{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-a9a85524a77be8e8", "name": "Possibly dead Python function: hardlink_or_copy", "shortDescription": {"text": "Possibly dead Python function: hardlink_or_copy"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d2b1e98936dd7cee", "name": "Possibly dead Python function: run_target_process", "shortDescription": {"text": "Possibly dead Python function: run_target_process"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6889d4c753325a23", "name": "Possibly dead Python function: hardlink_or_copy", "shortDescription": {"text": "Possibly dead Python function: hardlink_or_copy"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-071ae2482f8ae3b7", "name": "Possibly dead Python function: probe_ubuntu_apt_mirror", "shortDescription": {"text": "Possibly dead Python function: probe_ubuntu_apt_mirror"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0b49020cb143b875", "name": "Possibly dead Python function: hardlink_or_copy", "shortDescription": {"text": "Possibly dead Python function: hardlink_or_copy"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cf6b79b863bc0c24", "name": "Possibly dead Python function: probe_ubuntu_apt_mirror", "shortDescription": {"text": "Possibly dead Python function: probe_ubuntu_apt_mirror"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1f5b0833353a6e59", "name": "Possibly dead Python function: hardlink_or_copy", "shortDescription": {"text": "Possibly dead Python function: hardlink_or_copy"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-da1e710db203820b", "name": "Possibly dead Python function: aspect_score", "shortDescription": {"text": "Possibly dead Python function: aspect_score"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-00b38762821fea89", "name": "Possibly dead Python function: failure_count", "shortDescription": {"text": "Possibly dead Python function: failure_count"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-baaa9cb2693c86eb", "name": "Possibly dead Python function: search_by_smiles", "shortDescription": {"text": "Possibly dead Python function: search_by_smiles"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-224fdfce16d0d241", "name": "Possibly dead Python function: substructure_search", "shortDescription": {"text": "Possibly dead Python function: substructure_search"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-53f26922224524f5", "name": "Possibly dead Python function: download_structure", "shortDescription": {"text": "Possibly dead Python function: download_structure"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0c3d769bada208bc", "name": "Possibly dead Python function: sort_key", "shortDescription": {"text": "Possibly dead Python function: sort_key"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-362f9b36d2b10906", "name": "Possibly dead Python function: patched_get_inherited", "shortDescription": {"text": "Possibly dead Python function: patched_get_inherited"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-601e6cb1059dc3bb", "name": "Possibly dead Python function: filter_and_prepare_data", "shortDescription": {"text": "Possibly dead Python function: filter_and_prepare_data"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3c07a54414693503", "name": "Possibly dead Python function: split_into_levels", "shortDescription": {"text": "Possibly dead Python function: split_into_levels"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-59929c415a1320f0", "name": "Possibly dead Python function: forward", "shortDescription": {"text": "Possibly dead Python function: forward"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-97de63a9b3e0c9ab", "name": "Possibly dead Python function: load_fineweb", "shortDescription": {"text": "Possibly dead Python function: load_fineweb"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4e18227d7c515306", "name": "Possibly dead Python function: download_fineweb", "shortDescription": {"text": "Possibly dead Python function: download_fineweb"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-224479c35e919b95", "name": "Possibly dead Python function: load_shakespeare", "shortDescription": {"text": "Possibly dead Python function: load_shakespeare"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-74fbb136b7edd5b0", "name": "Possibly dead Python function: forward", "shortDescription": {"text": "Possibly dead Python function: forward"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-be2cf82c4be90408", "name": "Possibly dead Python function: load_fineweb", "shortDescription": {"text": "Possibly dead Python function: load_fineweb"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-39ed70cae4cf6cbb", "name": "Possibly dead Python function: download_fineweb", "shortDescription": {"text": "Possibly dead Python function: download_fineweb"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-428a66974f36afb6", "name": "Possibly dead Python function: load_shakespeare", "shortDescription": {"text": "Possibly dead Python function: load_shakespeare"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7f108a3a26ee53ff", "name": "Possibly dead Python function: pp_formatter", "shortDescription": {"text": "Possibly dead Python function: pp_formatter"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ecf09f78be2bf002", "name": "Stray `console.log` in TS/JS \u2014 experiments/metrics-dashboard/scripts/generate-metrics.ts:177", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 experiments/metrics-dashboard/scripts/generate-metrics.ts:177"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1587a30ef3c5fad5", "name": "`truncate` class without `title=` for hover reveal \u2014 experiments/metrics-dashboard/src/App.tsx:703", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 experiments/metrics-dashboard/src/App.tsx:703"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-6488b77f8d9a8f8c", "name": "`truncate` class without `title=` for hover reveal \u2014 experiments/metrics-dashboard/src/components/TrialsDataTable.tsx:11", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 experiments/metrics-dashboard/src/components/TrialsDataTable.tsx:112"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-549ebe29edf57534", "name": "`truncate` class without `title=` for hover reveal \u2014 experiments/metrics-dashboard/src/components/JobTabbedPanel.tsx:385", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 experiments/metrics-dashboard/src/components/JobTabbedPanel.tsx:385"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c654edd1511984e3", "name": "`truncate` class without `title=` for hover reveal \u2014 experiments/metrics-dashboard/src/components/SystemInfoPanel.tsx:38", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 experiments/metrics-dashboard/src/components/SystemInfoPanel.tsx:387"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-bed3a1e279dd0c91", "name": "`truncate` class without `title=` for hover reveal \u2014 experiments/metrics-dashboard/src/components/TracebackViewer.tsx:40", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 experiments/metrics-dashboard/src/components/TracebackViewer.tsx:40"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-0720057a2c411d26", "name": "`truncate` class without `title=` for hover reveal \u2014 experiments/metrics-dashboard/src/components/FileBrowser.tsx:184", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 experiments/metrics-dashboard/src/components/FileBrowser.tsx:184"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a08e9490b815b5f9", "name": "`truncate` class without `title=` for hover reveal \u2014 experiments/metrics-dashboard/src/components/JobActivityPanel.tsx:1", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 experiments/metrics-dashboard/src/components/JobActivityPanel.tsx:129"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f4d2713d685ae88b", "name": "`truncate` class without `title=` for hover reveal \u2014 experiments/metrics-dashboard/src/components/HealthPanel.tsx:277", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 experiments/metrics-dashboard/src/components/HealthPanel.tsx:277"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f902bd14e5c5b79b", "name": "`truncate` class without `title=` for hover reveal \u2014 experiments/metrics-dashboard/src/components/HarborJobsPanel.tsx:13", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 experiments/metrics-dashboard/src/components/HarborJobsPanel.tsx:132"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a56efeec0d03e0ca", "name": "`truncate` class without `title=` for hover reveal \u2014 experiments/metrics-dashboard/src/components/TrialDetailPanel.tsx:6", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 experiments/metrics-dashboard/src/components/TrialDetailPanel.tsx:63"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-4a6abc28c8380213", "name": "`truncate` class without `title=` for hover reveal \u2014 experiments/metrics-dashboard/src/components/TrialFilesPanel.tsx:16", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 experiments/metrics-dashboard/src/components/TrialFilesPanel.tsx:160"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-adb716f7fb731892", "name": "`truncate` class without `title=` for hover reveal \u2014 experiments/metrics-dashboard/src/components/ErrorFileTree.tsx:94", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 experiments/metrics-dashboard/src/components/ErrorFileTree.tsx:94"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-6773b6147ec1aadd", "name": "Stray `console.log` in TS/JS \u2014 experiments/metrics-dashboard/server/index.ts:159", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 experiments/metrics-dashboard/server/index.ts:159"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-893ab9219e3846ff", "name": "Stray `console.log` in TS/JS \u2014 website/scripts/generate-verifiers-registry.ts:32", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 website/scripts/generate-verifiers-registry.ts:32"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-eda6c1e3b8c1634a", "name": "Stray `console.log` in TS/JS \u2014 website/scripts/generate-results-registry.ts:47", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 website/scripts/generate-results-registry.ts:47"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d0f44e231a067200", "name": "Stray `console.log` in TS/JS \u2014 website/scripts/generate-skills-registry.ts:101", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 website/scripts/generate-skills-registry.ts:101"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c3b393241dcaf042", "name": "Stray `console.log` in TS/JS \u2014 website/scripts/resolve-data-paths.ts:18", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 website/scripts/resolve-data-paths.ts:18"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-15be7e43be6491ad", "name": "Stray `console.log` in TS/JS \u2014 website/scripts/generate-tasks-registry.ts:172", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 website/scripts/generate-tasks-registry.ts:172"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-edcd9964b42b5352", "name": "`dangerouslySetInnerHTML` used in a React component \u2014 website/src/app/(main)/tasks/[taskName]/components/task-verifier.t", "shortDescription": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 website/src/app/(main)/tasks/[taskName]/components/task-verifier.tsx:61"}, "fullDescription": {"text": "Open XSS surface unless the input is provably trusted. Replace with explicit JSX or sanitize via a vetted library.\n\nWhy: OWASP basics. Already partially flagged by the security analyzer.\nRule id: fq.dangerous-html"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f1b6fb372082296c", "name": "`truncate` class without `title=` for hover reveal \u2014 website/src/components/ContributorCard.tsx:71", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 website/src/components/ContributorCard.tsx:71"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-fc66902b1b0ffddb", "name": "`truncate` class without `title=` for hover reveal \u2014 website/src/components/SkillModal.tsx:128", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 website/src/components/SkillModal.tsx:128"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-967f16fe4354ce9f", "name": "`dangerouslySetInnerHTML` used in a React component \u2014 website/src/components/BrandIcon.tsx:34", "shortDescription": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 website/src/components/BrandIcon.tsx:34"}, "fullDescription": {"text": "Open XSS surface unless the input is provably trusted. Replace with explicit JSX or sanitize via a vetted library.\n\nWhy: OWASP basics. Already partially flagged by the security analyzer.\nRule id: fq.dangerous-html"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-03f3298b266b286f", "name": "`truncate` class without `title=` for hover reveal \u2014 website/src/components/BenchmarkDashboard.tsx:272", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 website/src/components/BenchmarkDashboard.tsx:272"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-55537f61006ccc24", "name": "`truncate` class without `title=` for hover reveal \u2014 website/src/components/FilterSelect.tsx:64", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 website/src/components/FilterSelect.tsx:64"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-cd634d572e8033dd", "name": "Stray `console.log` in TS/JS \u2014 tasks-extra/scheduling-email-assistant/tests/verifier-skills/gmail-skill/scripts/gmail-re", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 tasks-extra/scheduling-email-assistant/tests/verifier-skills/gmail-skill/scripts/gmail-read.js:113"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fbbd746cbc56213e", "name": "Stray `console.log` in TS/JS \u2014 tasks-extra/scheduling-email-assistant/environment/skills/gmail-skill/scripts/gmail-filte", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 tasks-extra/scheduling-email-assistant/environment/skills/gmail-skill/scripts/gmail-filters.js:166"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3fdcbd2e1e176a76", "name": "Stray `console.log` in TS/JS \u2014 tasks-extra/scheduling-email-assistant/environment/skills/gmail-skill/scripts/gmail-label", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 tasks-extra/scheduling-email-assistant/environment/skills/gmail-skill/scripts/gmail-labels.js:146"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7a67730d109927b6", "name": "Stray `console.log` in TS/JS \u2014 tasks-extra/scheduling-email-assistant/environment/skills/gmail-skill/scripts/gmail-read.", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 tasks-extra/scheduling-email-assistant/environment/skills/gmail-skill/scripts/gmail-read.js:113"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d794ee0dcf00cf22", "name": "Stray `console.log` in TS/JS \u2014 tasks-extra/scheduling-email-assistant/environment/skills/gmail-skill/scripts/gmail-forwa", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 tasks-extra/scheduling-email-assistant/environment/skills/gmail-skill/scripts/gmail-forward.js:65"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1556c159409a7e1a", "name": "Stray `console.log` in TS/JS \u2014 tasks-extra/scheduling-email-assistant/environment/skills/gmail-skill/scripts/migrate-tok", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 tasks-extra/scheduling-email-assistant/environment/skills/gmail-skill/scripts/migrate-tokens.js:14"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0dba73d57be98857", "name": "Stray `console.log` in TS/JS \u2014 tasks-extra/scheduling-email-assistant/environment/skills/gmail-skill/scripts/gmail-draft", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 tasks-extra/scheduling-email-assistant/environment/skills/gmail-skill/scripts/gmail-drafts.js:221"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-09c360244a42676d", "name": "Stray `console.log` in TS/JS \u2014 tasks-extra/scheduling-email-assistant/environment/skills/gmail-skill/scripts/gmail-searc", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 tasks-extra/scheduling-email-assistant/environment/skills/gmail-skill/scripts/gmail-search.js:83"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0a0cf92c46e23d7e", "name": "Stray `console.log` in TS/JS \u2014 tasks-extra/scheduling-email-assistant/environment/skills/gmail-skill/scripts/gmail-send.", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 tasks-extra/scheduling-email-assistant/environment/skills/gmail-skill/scripts/gmail-send.js:87"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-25919d90dedcafc9", "name": "Stray `console.log` in TS/JS \u2014 tasks-extra/scheduling-email-assistant/environment/skills/gmail-skill/scripts/manage-acco", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 tasks-extra/scheduling-email-assistant/environment/skills/gmail-skill/scripts/manage-accounts.js:12"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0bf2aeab62907fce", "name": "Stray `console.log` in TS/JS \u2014 tasks-extra/scheduling-email-assistant/environment/skills/gmail-skill/scripts/gmail-every", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 tasks-extra/scheduling-email-assistant/environment/skills/gmail-skill/scripts/gmail-every-paywall-cleanup.js:167"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c175bb1dcd4d41b5", "name": "Stray `console.log` in TS/JS \u2014 tasks-extra/scheduling-email-assistant/environment/skills/gmail-skill/scripts/auth/setup-", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 tasks-extra/scheduling-email-assistant/environment/skills/gmail-skill/scripts/auth/setup-oauth.js:38"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7e52828504ba909d", "name": "Stray `console.log` in TS/JS \u2014 tasks-extra/scheduling-email-assistant/environment/skills/google-calendar-skill/scripts/c", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 tasks-extra/scheduling-email-assistant/environment/skills/google-calendar-skill/scripts/calendar-events-create.js:147"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6017734a89f82e1b", "name": "Stray `console.log` in TS/JS \u2014 tasks-extra/scheduling-email-assistant/environment/skills/google-calendar-skill/scripts/c", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 tasks-extra/scheduling-email-assistant/environment/skills/google-calendar-skill/scripts/calendar-events-delete.js:62"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3c97fe3e41711005", "name": "Stray `console.log` in TS/JS \u2014 tasks-extra/scheduling-email-assistant/environment/skills/google-calendar-skill/scripts/m", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 tasks-extra/scheduling-email-assistant/environment/skills/google-calendar-skill/scripts/migrate-tokens.js:14"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4ad5ac4ed6c567b5", "name": "Stray `console.log` in TS/JS \u2014 tasks-extra/scheduling-email-assistant/environment/skills/google-calendar-skill/scripts/c", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 tasks-extra/scheduling-email-assistant/environment/skills/google-calendar-skill/scripts/calendar-events-respond.js:73"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0e0dd9c2644d51cc", "name": "Stray `console.log` in TS/JS \u2014 tasks-extra/scheduling-email-assistant/environment/skills/google-calendar-skill/scripts/c", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 tasks-extra/scheduling-email-assistant/environment/skills/google-calendar-skill/scripts/calendar-events-list.js:125"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fd10ce36c880b40d", "name": "Stray `console.log` in TS/JS \u2014 tasks-extra/scheduling-email-assistant/environment/skills/google-calendar-skill/scripts/c", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 tasks-extra/scheduling-email-assistant/environment/skills/google-calendar-skill/scripts/calendar-events-get.js:112"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-774ee915b977750b", "name": "Stray `console.log` in TS/JS \u2014 tasks-extra/scheduling-email-assistant/environment/skills/google-calendar-skill/scripts/c", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 tasks-extra/scheduling-email-assistant/environment/skills/google-calendar-skill/scripts/calendar-events-quick.js:54"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8ca55b3fbe940ea8", "name": "Stray `console.log` in TS/JS \u2014 tasks-extra/scheduling-email-assistant/environment/skills/google-calendar-skill/scripts/m", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 tasks-extra/scheduling-email-assistant/environment/skills/google-calendar-skill/scripts/manage-accounts.js:12"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c8435a59d925e02f", "name": "Stray `console.log` in TS/JS \u2014 tasks-extra/scheduling-email-assistant/environment/skills/google-calendar-skill/scripts/c", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 tasks-extra/scheduling-email-assistant/environment/skills/google-calendar-skill/scripts/calendar-events-update.js:137"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-88fdc8b8ce46b01c", "name": "Stray `console.log` in TS/JS \u2014 tasks-extra/scheduling-email-assistant/environment/skills/google-calendar-skill/scripts/c", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 tasks-extra/scheduling-email-assistant/environment/skills/google-calendar-skill/scripts/calendar-list.js:51"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bde4707c92494184", "name": "Stray `console.log` in TS/JS \u2014 tasks-extra/scheduling-email-assistant/environment/skills/google-calendar-skill/scripts/a", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 tasks-extra/scheduling-email-assistant/environment/skills/google-calendar-skill/scripts/auth/setup-oauth.js:35"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-81404f4d312db53d", "name": "Stray `console.log` in TS/JS \u2014 tasks-extra/scheduling-email-assistant/environment/skills/google-calendar-skill/scripts/a", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 tasks-extra/scheduling-email-assistant/environment/skills/google-calendar-skill/scripts/auth/auth-utils.js:10"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4df39673e67e2465", "name": "Stray `console.log` in TS/JS \u2014 tasks/react-performance-debugging/environment/api-simulator/src/server.ts:67", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 tasks/react-performance-debugging/environment/api-simulator/src/server.ts:67"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-93052674bac73596", "name": "Stray `console.log` in TS/JS \u2014 tasks/react-performance-debugging/environment/skills/browser-testing/measure-cls.ts:69", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 tasks/react-performance-debugging/environment/skills/browser-testing/measure-cls.ts:69"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3ef40f3e3919e890", "name": "Stray `console.log` in TS/JS \u2014 tasks/react-performance-debugging/environment/skills/browser-testing/measure.ts:86", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 tasks/react-performance-debugging/environment/skills/browser-testing/measure.ts:86"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c70454d7bcbc7263", "name": "Stray `console.log` in TS/JS \u2014 tasks/fix-visual-stability/environment/skills/browser-testing/detect-flicker.ts:104", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 tasks/fix-visual-stability/environment/skills/browser-testing/detect-flicker.ts:104"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0c91e50370bacb1e", "name": "Stray `console.log` in TS/JS \u2014 tasks/fix-visual-stability/environment/skills/browser-testing/measure-cls.ts:69", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 tasks/fix-visual-stability/environment/skills/browser-testing/measure-cls.ts:69"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-140bd1410142d573", "name": "Stray `console.log` in TS/JS \u2014 tasks/fix-visual-stability/environment/skills/browser-testing/measure.ts:86", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 tasks/fix-visual-stability/environment/skills/browser-testing/measure.ts:86"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e246296cb19bb9d4", "name": "Stray `console.log` in TS/JS \u2014 tasks/fix-visual-stability/environment/api-server/server.js:58", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 tasks/fix-visual-stability/environment/api-server/server.js:58"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fca0301443f8754d", "name": "Stray `console.log` in TS/JS \u2014 tasks/exceltable-in-ppt/environment/skills/pptx/scripts/html2pptx.js:921", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 tasks/exceltable-in-ppt/environment/skills/pptx/scripts/html2pptx.js:921"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d82fad9af2737682", "name": "Stray `console.log` in TS/JS \u2014 tasks/pptx-reference-formatting/environment/skills/pptx/scripts/html2pptx.js:921", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 tasks/pptx-reference-formatting/environment/skills/pptx/scripts/html2pptx.js:921"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e8cf721a777110f5", "name": "Stray `console.log` in TS/JS \u2014 tasks/organize-messy-files/environment/skills/pptx/scripts/html2pptx.js:921", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 tasks/organize-messy-files/environment/skills/pptx/scripts/html2pptx.js:921"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-abb38c47ca59018c", "name": "Stray `console.log` in TS/JS \u2014 tasks/data-to-d3/environment/skills/d3-visualization/scripts/check_tooltip.js:19", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 tasks/data-to-d3/environment/skills/d3-visualization/scripts/check_tooltip.js:19"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0c53a46194eea78d", "name": "Privileged port 10 in use", "shortDescription": {"text": "Privileged port 10 in use"}, "fullDescription": {"text": "Port 10 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d758c80d40890961", "name": "Privileged port 14 in use", "shortDescription": {"text": "Privileged port 14 in use"}, "fullDescription": {"text": "Port 14 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-02a0839dfc3b091b", "name": "Privileged port 30 in use", "shortDescription": {"text": "Privileged port 30 in use"}, "fullDescription": {"text": "Port 30 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6544ae9b33e434d9", "name": "Privileged port 16 in use", "shortDescription": {"text": "Privileged port 16 in use"}, "fullDescription": {"text": "Port 16 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-67d8bd20d69fe2a7", "name": "Privileged port 18 in use", "shortDescription": {"text": "Privileged port 18 in use"}, "fullDescription": {"text": "Port 18 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-319e648b723c472a", "name": "Privileged port 17 in use", "shortDescription": {"text": "Privileged port 17 in use"}, "fullDescription": {"text": "Port 17 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-95ae41161b9a3937", "name": "Privileged port 23 in use", "shortDescription": {"text": "Privileged port 23 in use"}, "fullDescription": {"text": "Port 23 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0d490041469767c5", "name": "Privileged port 59 in use", "shortDescription": {"text": "Privileged port 59 in use"}, "fullDescription": {"text": "Port 59 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4835ac2a0125a0f5", "name": "Privileged port 99 in use", "shortDescription": {"text": "Privileged port 99 in use"}, "fullDescription": {"text": "Port 99 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a9e35afa8ee76997", "name": "Privileged port 11 in use", "shortDescription": {"text": "Privileged port 11 in use"}, "fullDescription": {"text": "Port 11 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a07b93f2db955a2d", "name": "Privileged port 38 in use", "shortDescription": {"text": "Privileged port 38 in use"}, "fullDescription": {"text": "Port 38 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e0acf8d6e980cf02", "name": "Privileged port 12 in use", "shortDescription": {"text": "Privileged port 12 in use"}, "fullDescription": {"text": "Port 12 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e7821efe1c1ae896", "name": "Privileged port 15 in use", "shortDescription": {"text": "Privileged port 15 in use"}, "fullDescription": {"text": "Port 15 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-60b9fda2cd118984", "name": "Dockerfile runs as root: experiments/sanity-tasks/hello-world/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: experiments/sanity-tasks/hello-world/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4b2a998b1e95d5b4", "name": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-94f9567b056fe923", "name": "Dockerfile runs as root: tasks-extra/nda-playbook-review/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks-extra/nda-playbook-review/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3da3db2bd444dc73", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e9423c1d33b1fb1d", "name": "Dockerfile runs as root: tasks-extra/gpu-cluster-online-scheduling/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks-extra/gpu-cluster-online-scheduling/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ddadaea1cea8454a", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cf31741cce314208", "name": "Dockerfile runs as root: tasks-extra/pedestrian-traffic-counting/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks-extra/pedestrian-traffic-counting/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1162cd4b125d46a9", "name": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f53a51687cdc1eb3", "name": "Dockerfile runs as root: tasks-extra/find-topk-similiar-chemicals/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks-extra/find-topk-similiar-chemicals/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d895fc6cb153daf5", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.12.9-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12.9-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3aebdfa0124a9541", "name": "Dockerfile runs as root: tasks-extra/pg-essay-to-audiobook/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks-extra/pg-essay-to-audiobook/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-dee623f0f691686a", "name": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-86e5adbe357575a4", "name": "Dockerfile runs as root: tasks-extra/cobol-gl-batch-reconcile/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks-extra/cobol-gl-batch-reconcile/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ec6715268eca69e9", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ba3d3bf98c85ad6d", "name": "Dockerfile runs as root: tasks-extra/scheduling-email-assistant/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks-extra/scheduling-email-assistant/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5752367bba9df32b", "name": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-790fa7d8c9262f1e", "name": "Dockerfile runs as root: tasks-extra/taxonomy-tree-merge/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks-extra/taxonomy-tree-merge/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a68564028f1d64db", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f72b49562e9d4077", "name": "Dockerfile runs as root: tasks-extra/gh-repo-analytics/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks-extra/gh-repo-analytics/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e99af1f7d31e3eac", "name": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-382cc09a402f5adc", "name": "Dockerfile runs as root: tasks-extra/diff-transformer_impl/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks-extra/diff-transformer_impl/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ede543d54de7e1ed", "name": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-669e3650b7c4902b", "name": "Dockerfile runs as root: tasks-extra/video-filler-word-remover/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks-extra/video-filler-word-remover/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8c41b7364306f8e9", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-93409e5cdf147df1", "name": "Dockerfile runs as root: tasks-extra/video-tutorial-indexer/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks-extra/video-tutorial-indexer/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5dc0206e36209440", "name": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9dd7f1de3267c486", "name": "Dockerfile runs as root: tasks-extra/speaker-diarization-subtitles/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks-extra/speaker-diarization-subtitles/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-efa37f4cd3bae15f", "name": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6af8a22ac59bb213", "name": "Dockerfile runs as root: tasks-extra/mhc-layer-impl/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks-extra/mhc-layer-impl/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bf5ec5b09924cec1", "name": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8dd306987e76265c", "name": "Dockerfile runs as root: tasks/energy-market-pricing/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/energy-market-pricing/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-26483da6abb8f463", "name": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-127d0c137980da29", "name": "Dockerfile runs as root: tasks/dapt-intrusion-detection/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/dapt-intrusion-detection/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e16abada893bd07f", "name": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-509dd91a13dab439", "name": "Dockerfile runs as root: tasks/dialogue-parser/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/dialogue-parser/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8147c579e4533534", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.12.8-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12.8-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4b50bd0ebf704040", "name": "Dockerfile runs as root: tasks/enterprise-information-search/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/enterprise-information-search/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ec577650416178a2", "name": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-aad51372c3ecace0", "name": "Dockerfile runs as root: tasks/crystallographic-wyckoff-position-analysis/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/crystallographic-wyckoff-position-analysis/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6a01cd6dec401117", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a706d131d5239b46", "name": "Dockerfile runs as root: tasks/exam-block-sequencing/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/exam-block-sequencing/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5ab79dfc4f3bcb50", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f498ad257a428c09", "name": "Dockerfile runs as root: tasks/paratransit-routing/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/paratransit-routing/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ff8246ff95970b61", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-caa0b856b3c022f3", "name": "Dockerfile runs as root: tasks/lake-warming-attribution/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/lake-warming-attribution/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f9f01aea33fe35a7", "name": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0f7516edd1380c50", "name": "Dockerfile runs as root: tasks/earthquake-phase-association/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/earthquake-phase-association/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5f166b002e8c5bcb", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1ae8f9ddc6c2cad5", "name": "Dockerfile runs as root: tasks/protein-expression-analysis/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/protein-expression-analysis/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-65d57f690c00712a", "name": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e0ddfd4da509b3ee", "name": "Dockerfile runs as root: tasks/simpo-code-reproduction/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/simpo-code-reproduction/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2524e5260c35b2db", "name": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8d792d9682596211", "name": "Dockerfile runs as root: tasks/exoplanet-detection-period/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/exoplanet-detection-period/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d5f0f879f6325f65", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5b18f133dc37d347", "name": "Dockerfile runs as root: tasks/ada-bathroom-plan-repair/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/ada-bathroom-plan-repair/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c50ae86031187b5c", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c4d1e63ff2a6341a", "name": "Dockerfile runs as root: tasks/parallel-tfidf-search/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/parallel-tfidf-search/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-41077a93210c4136", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2b93effcdfdf63c9", "name": "Dockerfile runs as root: tasks/grid-dispatch-operator/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/grid-dispatch-operator/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1f765cd9269afc56", "name": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-91aad1dfafad970c", "name": "Dockerfile runs as root: tasks/software-dependency-audit/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/software-dependency-audit/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-427f6cb3303f94e6", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-54fbcbf3195da46e", "name": "Dockerfile pipes a remote installer into a shell", "shortDescription": {"text": "Dockerfile pipes a remote installer into a shell"}, "fullDescription": {"text": "Executing downloaded code during image build gives the remote endpoint build-time code execution. Prefer pinned packages or verify downloaded installers by checksum/signature."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6773651b0930eb1a", "name": "Dockerfile runs as root: tasks/syzkaller-ppdev-syzlang/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/syzkaller-ppdev-syzlang/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-402edbdd6a9b65d9", "name": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a72f6c823f69cb04", "name": "Dockerfile runs as root: tasks/xlsx-recover-data/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/xlsx-recover-data/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2dc85e5797301ece", "name": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bfb29418b05be9dd", "name": "Dockerfile runs as root: tasks/react-performance-debugging/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/react-performance-debugging/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-df99cdc2b6e0099f", "name": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d084ff7f07ca1db6", "name": "Dockerfile runs as root: tasks/react-performance-debugging/environment/api-simulator/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/react-performance-debugging/environment/api-simulator/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ea42438898082bd9", "name": "Docker base image is tag-pinned but not digest-pinned: node:20-alpine", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: node:20-alpine"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8aeb7e0a7dd13c08", "name": "Dockerfile runs as root: tasks/seismic-phase-picking/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/seismic-phase-picking/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-61c765fbed9dd57c", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6dae6ae0d5d891af", "name": "Dockerfile runs as root: tasks/fix-druid-loophole-cve/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/fix-druid-loophole-cve/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0a552f6fd28f9d09", "name": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a7c70bce490e9ee0", "name": "Dockerfile runs as root: tasks/court-form-filling/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/court-form-filling/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-011368f778cc328e", "name": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-43a43757367bcd19", "name": "Dockerfile runs as root: tasks/pdf-excel-diff/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/pdf-excel-diff/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-475d841ea58ef4b5", "name": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-82d3d9e78a2f2c80", "name": "Dockerfile runs as root: tasks/fix-build-google-auto/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/fix-build-google-auto/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7a8cde45ecba0268", "name": "Docker base image is tag-pinned but not digest-pinned: bugswarm/cached-images:${bugswarm_image_tag}", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: bugswarm/cached-images:${bugswarm_image_tag}"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a9fcf0ea81fa902d", "name": "Docker base image is tag-pinned but not digest-pinned: ubuntu:20.04", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:20.04"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1946b056f5410831", "name": "Dockerfile pipes a remote installer into a shell", "shortDescription": {"text": "Dockerfile pipes a remote installer into a shell"}, "fullDescription": {"text": "Executing downloaded code during image build gives the remote endpoint build-time code execution. Prefer pinned packages or verify downloaded installers by checksum/signature."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "high", "confidence": 1.0}}, {"id": "scanner-15966133d0c56674", "name": "Dockerfile runs as root: tasks/debug-trl-grpo/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/debug-trl-grpo/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-db29ac72ea153fec", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.11-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.11-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-df9e2204b13f877a", "name": "Dockerfile runs as root: tasks/llm-prefix-cache-replay/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/llm-prefix-cache-replay/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b4e451df630d907c", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-49d06d2975030bab", "name": "Dockerfile runs as root: tasks/fix-visual-stability/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/fix-visual-stability/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-24605c190d0aa015", "name": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bbb0196e603e5d11", "name": "Dockerfile pipes a remote installer into a shell", "shortDescription": {"text": "Dockerfile pipes a remote installer into a shell"}, "fullDescription": {"text": "Executing downloaded code during image build gives the remote endpoint build-time code execution. Prefer pinned packages or verify downloaded installers by checksum/signature."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "high", "confidence": 1.0}}, {"id": "scanner-4f3ccedd8b95edd7", "name": "Dockerfile runs as root: tasks/video-silence-remover/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/video-silence-remover/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d304d5bc566c1e2c", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2f698572a8e2cea8", "name": "Dockerfile runs as root: tasks/edit-pdf/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/edit-pdf/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-08fb3823076a6762", "name": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d79dcd5473e37e53", "name": "Dockerfile runs as root: tasks/exceltable-in-ppt/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/exceltable-in-ppt/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-99b548c89590e79a", "name": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e814b71dd7cd3f43", "name": "Dockerfile runs as root: tasks/lab-unit-harmonization/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/lab-unit-harmonization/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8dd452d06552109b", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b74836f265e7af7b", "name": "Dockerfile runs as root: tasks/suricata-custom-exfil/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/suricata-custom-exfil/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-752e2043e5fad539", "name": "Docker base image is tag-pinned but not digest-pinned: jasonish/suricata:7.0.11", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: jasonish/suricata:7.0.11"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-82d8529288df6ac1", "name": "Dockerfile pipes a remote installer into a shell", "shortDescription": {"text": "Dockerfile pipes a remote installer into a shell"}, "fullDescription": {"text": "Executing downloaded code during image build gives the remote endpoint build-time code execution. Prefer pinned packages or verify downloaded installers by checksum/signature."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3356bcdac83777aa", "name": "Dockerfile runs as root: tasks/reserves-at-risk-calc/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/reserves-at-risk-calc/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c534efe9862eeb40", "name": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-faa7293939da82d3", "name": "Dockerfile runs as root: tasks/python-scala-translation/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/python-scala-translation/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c2d2660b7bf26c66", "name": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b5ca5c6475827fe6", "name": "Dockerfile runs as root: tasks/sales-pivot-analysis/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/sales-pivot-analysis/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a86602c35535e311", "name": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-09afee2f952b56f5", "name": "Dockerfile runs as root: tasks/financial-modeling-qa/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/financial-modeling-qa/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cdda742ebf1e95e4", "name": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0bc4ff6c0f30b544", "name": "Dockerfile runs as root: tasks/pddl-airport-planning/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/pddl-airport-planning/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bdeeb5e5ba352c30", "name": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ff401757d19ff9fc", "name": "Dockerfile runs as root: tasks/manufacturing-equipment-maintenance/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/manufacturing-equipment-maintenance/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9392bb10984d76cb", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8c7d8b2ebfaa4b80", "name": "Dockerfile runs as root: tasks/jpg-ocr-stat/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/jpg-ocr-stat/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-92b42693c3395064", "name": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fecdd450ed0d2910", "name": "Dockerfile runs as root: tasks/manufacturing-codebook-normalization/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/manufacturing-codebook-normalization/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-50f991b71ec6c8eb", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-59e1966301607e2c", "name": "Dockerfile runs as root: tasks/fix-erlang-ssh-cve/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/fix-erlang-ssh-cve/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c8e8211f1f33c8a6", "name": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0ca0a2691bdff281", "name": "Dockerfile runs as root: tasks/3d-scan-calc/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/3d-scan-calc/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3ed6c1a7ce8f9e53", "name": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a3c4a82cfd7d64d9", "name": "Dockerfile runs as root: tasks/spring-boot-jakarta-migration/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/spring-boot-jakarta-migration/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a7315f780e00be0a", "name": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4b8a3d4bac0315c8", "name": "Dockerfile pipes a remote installer into a shell", "shortDescription": {"text": "Dockerfile pipes a remote installer into a shell"}, "fullDescription": {"text": "Executing downloaded code during image build gives the remote endpoint build-time code execution. Prefer pinned packages or verify downloaded installers by checksum/signature."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "high", "confidence": 1.0}}, {"id": "scanner-7e17e597f604d2f7", "name": "Dockerfile runs as root: tasks/hvac-control/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/hvac-control/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-32fc7f55e136a737", "name": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d0410bf9d0540366", "name": "Dockerfile runs as root: tasks/flink-query/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/flink-query/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b75bc818216261e1", "name": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8133397c967a1318", "name": "Dockerfile runs as root: tasks/latex-formula-extraction/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/latex-formula-extraction/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-82d20958fda4ffed", "name": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-46138e00ee394b48", "name": "Docker base image uses a mutable or implicit tag: huggingface_hub", "shortDescription": {"text": "Docker base image uses a mutable or implicit tag: huggingface_hub"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9c37648cc25ad667", "name": "Dockerfile runs as root: tasks/earthquake-plate-calculation/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/earthquake-plate-calculation/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6f38a2aedfc3baa0", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-929284ecbd5c20c7", "name": "Dockerfile runs as root: tasks/shock-analysis-supply/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/shock-analysis-supply/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f2ea77f597d039b1", "name": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f951099eba7f2cbb", "name": "Dockerfile runs as root: tasks/multilingual-video-dubbing/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/multilingual-video-dubbing/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c83d69b3deb0a2ca", "name": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-65c8f816a1ae5f54", "name": "Dockerfile runs as root: tasks/pptx-reference-formatting/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/pptx-reference-formatting/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-de44fffd0a08275b", "name": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-763712de05328eea", "name": "Dockerfile runs as root: tasks/mario-coin-counting/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/mario-coin-counting/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2657c65f90ce95ba", "name": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1b2c668d30037666", "name": "Dockerfile runs as root: tasks/offer-letter-generator/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/offer-letter-generator/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c631bb02d56ae80e", "name": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-dbe26d6f530feb14", "name": "Dockerfile runs as root: tasks/threejs-to-obj/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/threejs-to-obj/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-12d28c846566efd9", "name": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-09b1412015e4ff4d", "name": "Dockerfile runs as root: tasks/fix-build-agentops/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/fix-build-agentops/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e1f164afa7a499d6", "name": "Docker base image is tag-pinned but not digest-pinned: bugswarm/cached-images:${bugswarm_image_tag}", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: bugswarm/cached-images:${bugswarm_image_tag}"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fe8993f98b4cca1b", "name": "Dockerfile pipes a remote installer into a shell", "shortDescription": {"text": "Dockerfile pipes a remote installer into a shell"}, "fullDescription": {"text": "Executing downloaded code during image build gives the remote endpoint build-time code execution. Prefer pinned packages or verify downloaded installers by checksum/signature."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "high", "confidence": 1.0}}, {"id": "scanner-74b676d62c281879", "name": "Dockerfile runs as root: tasks/shock-analysis-demand/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/shock-analysis-demand/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4f402413d0f404d9", "name": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1d2756097ac20ff3", "name": "Dockerfile runs as root: tasks/manufacturing-fjsp-optimization/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/manufacturing-fjsp-optimization/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c39cd23b1d664310", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9aab2bba28405cf0", "name": "Dockerfile runs as root: tasks/glm-lake-mendota/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/glm-lake-mendota/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-de9813a4ea625bf9", "name": "Docker base image is tag-pinned but not digest-pinned: ubuntu:20.04", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:20.04"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-25a00a1158afa532", "name": "Dockerfile runs as root: tasks/setup-fuzzing-py/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/setup-fuzzing-py/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9be928c4984589ce", "name": "Docker base image uses a mutable or implicit tag: gcr.io/oss-fuzz-base/base-builder-python", "shortDescription": {"text": "Docker base image uses a mutable or implicit tag: gcr.io/oss-fuzz-base/base-builder-python"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0a6b3658fc6b8b01", "name": "Dockerfile pipes a remote installer into a shell", "shortDescription": {"text": "Dockerfile pipes a remote installer into a shell"}, "fullDescription": {"text": "Executing downloaded code during image build gives the remote endpoint build-time code execution. Prefer pinned packages or verify downloaded installers by checksum/signature."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e1a17d273fe3361b", "name": "Dockerfile runs as root: tasks/organize-messy-files/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/organize-messy-files/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e4b1c1de2867dea6", "name": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5a800a3f3db4b850", "name": "Dockerfile runs as root: tasks/dynamic-object-aware-egomotion/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/dynamic-object-aware-egomotion/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-309371bc05bac0f7", "name": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2624cb9003f296f6", "name": "Dockerfile runs as root: tasks/data-to-d3/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/data-to-d3/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7162913401e39b10", "name": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-80366c215fcbfed4", "name": "Dockerfile runs as root: tasks/bike-rebalance/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/bike-rebalance/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3217378d780cb470", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-915f615955c00db4", "name": "Dockerfile runs as root: tasks/flood-risk-analysis/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/flood-risk-analysis/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2ab06067e9e1cc21", "name": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e612355e5db188a9", "name": "Dockerfile runs as root: tasks/azure-bgp-oscillation-route-leak/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/azure-bgp-oscillation-route-leak/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-07157deca69b1f16", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-dea98dc7f8fb92b7", "name": "Dockerfile runs as root: tasks/civ6-adjacency-optimizer/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/civ6-adjacency-optimizer/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bea8622e237de833", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bfbf2812d0d0c801", "name": "Dockerfile runs as root: tasks/citation-check/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/citation-check/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-522a28633444a414", "name": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-65af9220d27e2532", "name": "Dockerfile runs as root: tasks/paper-anonymizer/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/paper-anonymizer/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6c0daf8099d6740c", "name": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-60f44e45c746554c", "name": "Dockerfile runs as root: tasks/invoice-fraud-detection/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/invoice-fraud-detection/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-66bda8b28dd19ce0", "name": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-80a29417ba280c92", "name": "Dockerfile runs as root: tasks/mars-clouds-clustering/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/mars-clouds-clustering/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-749138b188b73027", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4f956e9ec921caa0", "name": "Dockerfile runs as root: tasks/lean4-proof/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/lean4-proof/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1a52e6f160c8f80d", "name": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6e0d2d9ab6917219", "name": "Dockerfile runs as root: tasks/adaptive-cruise-control/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/adaptive-cruise-control/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d2e8ff8efd0ce4fc", "name": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2b5a75b6da1db287", "name": "Dockerfile runs as root: tasks/pddl-tpp-planning/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/pddl-tpp-planning/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5835ed37644c1620", "name": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3d393a2010ba2961", "name": "Dockerfile pipes a remote installer into a shell", "shortDescription": {"text": "Dockerfile pipes a remote installer into a shell"}, "fullDescription": {"text": "Executing downloaded code during image build gives the remote endpoint build-time code execution. Prefer pinned packages or verify downloaded installers by checksum/signature."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "high", "confidence": 1.0}}, {"id": "scanner-decbd5771040f861", "name": "Dockerfile runs as root: tasks/tictoc-unnecessary-abort-detection/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/tictoc-unnecessary-abort-detection/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-46649873a034ccff", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-efb6a4c76bf7890e", "name": "Dockerfile runs as root: tasks/powerlifting-coef-calc/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/powerlifting-coef-calc/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-de664f6d63222d42", "name": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0f34653d258aa202", "name": "Dockerfile pipes a remote installer into a shell", "shortDescription": {"text": "Dockerfile pipes a remote installer into a shell"}, "fullDescription": {"text": "Executing downloaded code during image build gives the remote endpoint build-time code execution. Prefer pinned packages or verify downloaded installers by checksum/signature."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "high", "confidence": 1.0}}, {"id": "scanner-eb46214a91a13c0f", "name": "Dockerfile runs as root: tasks/sec-financial-report/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/sec-financial-report/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cc2473489de84929", "name": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9953e2a26de2b70b", "name": "Dockerfile runs as root: tasks/econ-detrending-correlation/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/econ-detrending-correlation/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ed6eae0007a2ff5e", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7f0d98993f3882c5", "name": "Dockerfile runs as root: tasks/weighted-gdp-calc/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/weighted-gdp-calc/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-36a8e8f7610cf5f1", "name": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5c93bcf58ff8c9af", "name": "Dockerfile runs as root: tasks/energy-ac-optimal-power-flow/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/energy-ac-optimal-power-flow/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d710c387337bf678", "name": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9d7e1cdc8767280c", "name": "Dockerfile runs as root: tasks/r2r-mpc-control/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/r2r-mpc-control/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-227cd2d09fbb62a7", "name": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-dd5135f47a97f4f2", "name": "Dockerfile runs as root: tasks/jax-computing-basics/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/jax-computing-basics/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2fbaaa6a3c2f4863", "name": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0a734e66e05dda44", "name": "Dockerfile runs as root: tasks/threejs-structure-parser/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/threejs-structure-parser/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-63a70df507ef00a9", "name": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e4d0e9aeb390904f", "name": "Dockerfile runs as root: tasks/energy-unit-commitment/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/energy-unit-commitment/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5c657d4c37777d63", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e0d19f0207c25502", "name": "Dockerfile runs as root: tasks/travel-planning/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/travel-planning/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3c6c8ab80e94bc93", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f358fc79d508dde6", "name": "Dockerfile runs as root: tasks/radar-vital-signs/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/radar-vital-signs/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-171195bca71f8e7c", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.11-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.11-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b8ca3954cf820866", "name": "Dockerfile runs as root: tasks/quantum-numerical-simulation/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/quantum-numerical-simulation/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d172f6e30ded3714", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3581178880e6b81d", "name": "Dockerfile runs as root: tasks/drone-planning-control/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/drone-planning-control/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f5230e3feac6b818", "name": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7108b205068481a7", "name": "Dockerfile runs as root: tasks/gravitational-wave-detection/environment/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tasks/gravitational-wave-detection/environment/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c2890d1c7fc41f1b", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b7be5a205577888d", "name": "Insecure pattern 'exec_used' in experiments/metrics-dashboard/server/index.ts:299", "shortDescription": {"text": "Insecure pattern 'exec_used' in experiments/metrics-dashboard/server/index.ts:299"}, "fullDescription": {"text": "Found a known-risky pattern (exec_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d3f7446421115ff3", "name": "Insecure pattern 'node_child_process' in experiments/metrics-dashboard/server/index.ts:292", "shortDescription": {"text": "Insecure pattern 'node_child_process' in experiments/metrics-dashboard/server/index.ts:292"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f1756322c4e7f0aa", "name": "Insecure pattern 'cors_wildcard' in experiments/metrics-dashboard/server/index.ts:11", "shortDescription": {"text": "Insecure pattern 'cors_wildcard' in experiments/metrics-dashboard/server/index.ts:11"}, "fullDescription": {"text": "Found a known-risky pattern (cors_wildcard). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4db3aa616f1ed12e", "name": "Insecure pattern 'node_child_process' in website/scripts/generate-tasks-registry.ts:1", "shortDescription": {"text": "Insecure pattern 'node_child_process' in website/scripts/generate-tasks-registry.ts:1"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8fc7ddb5dad0cc49", "name": "Insecure pattern 'dangerous_innerhtml' in website/src/app/(main)/tasks/[taskName]/components/task-verifier.tsx:61", "shortDescription": {"text": "Insecure pattern 'dangerous_innerhtml' in website/src/app/(main)/tasks/[taskName]/components/task-verifier.tsx:61"}, "fullDescription": {"text": "Found a known-risky pattern (dangerous_innerhtml). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-68a3e2c63f080584", "name": "Insecure pattern 'dangerous_innerhtml' in website/src/components/BrandIcon.tsx:34", "shortDescription": {"text": "Insecure pattern 'dangerous_innerhtml' in website/src/components/BrandIcon.tsx:34"}, "fullDescription": {"text": "Found a known-risky pattern (dangerous_innerhtml). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-479350821e84c786", "name": "Insecure pattern 'direct_innerhtml_assignment' in website/public/blog/fig3.html:84", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in website/public/blog/fig3.html:84"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-88da15c8d08492ad", "name": "Insecure pattern 'weak_hash' in tasks/enterprise-information-search/environment/DATA/products/ForecastForce.json:11181", "shortDescription": {"text": "Insecure pattern 'weak_hash' in tasks/enterprise-information-search/environment/DATA/products/ForecastForce.json:11181"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c52748eb9ce74b02", "name": "Insecure pattern 'dangerous_innerhtml' in tasks/react-performance-debugging/environment/skills/react-best-practices/AGEN", "shortDescription": {"text": "Insecure pattern 'dangerous_innerhtml' in tasks/react-performance-debugging/environment/skills/react-best-practices/AGENTS.md:1466"}, "fullDescription": {"text": "Found a known-risky pattern (dangerous_innerhtml). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b5843e69e665267a", "name": "Insecure pattern 'dangerous_innerhtml' in tasks/fix-visual-stability/solution/solve.sh:216", "shortDescription": {"text": "Insecure pattern 'dangerous_innerhtml' in tasks/fix-visual-stability/solution/solve.sh:216"}, "fullDescription": {"text": "Found a known-risky pattern (dangerous_innerhtml). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-788083142c040ad6", "name": "Insecure pattern 'cors_wildcard' in tasks/fix-visual-stability/environment/api-server/server.js:6", "shortDescription": {"text": "Insecure pattern 'cors_wildcard' in tasks/fix-visual-stability/environment/api-server/server.js:6"}, "fullDescription": {"text": "Found a known-risky pattern (cors_wildcard). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d0e51a91fc79e5f3", "name": "Insecure pattern 'exec_used' in tasks/pddl-airport-planning/solution/solve.sh:41", "shortDescription": {"text": "Insecure pattern 'exec_used' in tasks/pddl-airport-planning/solution/solve.sh:41"}, "fullDescription": {"text": "Found a known-risky pattern (exec_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-66ebf2b344d845c8", "name": "Insecure pattern 'cors_wildcard' in tasks/spring-boot-jakarta-migration/environment/skills/spring-security-6/SKILL.md:14", "shortDescription": {"text": "Insecure pattern 'cors_wildcard' in tasks/spring-boot-jakarta-migration/environment/skills/spring-security-6/SKILL.md:140"}, "fullDescription": {"text": "Found a known-risky pattern (cors_wildcard). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f01392a3bbcfd406", "name": "Possible secret in tasks/flink-query/environment/skills/senior-data-engineer/scripts/kafka_config_generator.py", "shortDescription": {"text": "Possible secret in tasks/flink-query/environment/skills/senior-data-engineer/scripts/kafka_config_generator.py"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-d6b05079a5356340", "name": "Insecure pattern 'direct_innerhtml_assignment' in tasks/data-to-d3/environment/skills/d3-visualization/scripts/check_too", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in tasks/data-to-d3/environment/skills/d3-visualization/scripts/check_tooltip.js:45"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e632a63d18937b20", "name": "Insecure pattern 'exec_used' in tasks/pddl-tpp-planning/solution/solve.sh:44", "shortDescription": {"text": "Insecure pattern 'exec_used' in tasks/pddl-tpp-planning/solution/solve.sh:44"}, "fullDescription": {"text": "Found a known-risky pattern (exec_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d73825252806fa52", "name": "Very large file: experiments/scripts/open_model_scripts/run_opencode_bench_docker_open_models.py (1500 lines)", "shortDescription": {"text": "Very large file: experiments/scripts/open_model_scripts/run_opencode_bench_docker_open_models.py (1500 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-196774003d074279", "name": "Very large file: experiments/scripts/open_model_scripts/run_opencode_bench_daytona_open_models.py (1504 lines)", "shortDescription": {"text": "Very large file: experiments/scripts/open_model_scripts/run_opencode_bench_daytona_open_models.py (1504 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1ada3068196adac1", "name": "Very large file: experiments/metrics-dashboard/src/App.tsx (1426 lines)", "shortDescription": {"text": "Very large file: experiments/metrics-dashboard/src/App.tsx (1426 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d7ddc9f5ba547309", "name": "Very large file: tasks/flink-query/environment/skills/senior-data-engineer/scripts/stream_processor.py (1734 lines)", "shortDescription": {"text": "Very large file: tasks/flink-query/environment/skills/senior-data-engineer/scripts/stream_processor.py (1734 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-782671a9fe1516e6", "name": "Node manifest has dependencies but no lockfile: tasks-extra/scheduling-email-assistant/tests/verifier-skills/gmail-skill", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: tasks-extra/scheduling-email-assistant/tests/verifier-skills/gmail-skill/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7e9c61bbd7e9314c", "name": "Node manifest has dependencies but no lockfile: tasks-extra/scheduling-email-assistant/environment/skills/gmail-skill/pa", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: tasks-extra/scheduling-email-assistant/environment/skills/gmail-skill/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f075dc47e5723d50", "name": "Node manifest has dependencies but no lockfile: tasks-extra/scheduling-email-assistant/environment/skills/google-calenda", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: tasks-extra/scheduling-email-assistant/environment/skills/google-calendar-skill/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e40f9b4c562a8e0f", "name": "Node manifest has dependencies but no lockfile: tasks/fix-visual-stability/environment/api-server/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: tasks/fix-visual-stability/environment/api-server/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3ab5d313dda8e5f9", "name": "Debug logging residue appears in source files", "shortDescription": {"text": "Debug logging residue appears in source files"}, "fullDescription": {"text": "Found 2898 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-72b2a6250083a784", "name": "Placeholder or mock-heavy implementation detected", "shortDescription": {"text": "Placeholder or mock-heavy implementation detected"}, "fullDescription": {"text": "Found 137 placeholder/mock markers across 42 source files. This often means the repo looks complete while core flows still use generated scaffolding or fake data."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2d0c7b7ab8f8aacf", "name": "Critical user flow still appears backed by mock or placeholder data", "shortDescription": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "fullDescription": {"text": "A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-749d4bc1bd66df5f", "name": "Agent instructions exist but release-hardening basics are missing", "shortDescription": {"text": "Agent instructions exist but release-hardening basics are missing"}, "fullDescription": {"text": "AI-coder instruction files were found, but the repo is missing lockfile. Treat this as a contract gap: the agent is guided, but the generated output is not yet guarded by the controls that make it repeatable."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-73961fcf41732ff9", "name": "Agent authority lacks a verifier contract: tasks-extra/nda-playbook-review/environment/skills/contract-playbook-review/S", "shortDescription": {"text": "Agent authority lacks a verifier contract: tasks-extra/nda-playbook-review/environment/skills/contract-playbook-review/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-97ca95b7d65b0d13", "name": "Agent instruction/config may expose a secret: tasks-extra/gpu-cluster-online-scheduling/environment/skills/multi-resourc", "shortDescription": {"text": "Agent instruction/config may expose a secret: tasks-extra/gpu-cluster-online-scheduling/environment/skills/multi-resource-allocation-validation/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-933a47655959f99a", "name": "Agent instruction/config may expose a secret: tasks-extra/pedestrian-traffic-counting/environment/skills/gpt-multimodal/", "shortDescription": {"text": "Agent instruction/config may expose a secret: tasks-extra/pedestrian-traffic-counting/environment/skills/gpt-multimodal/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ca38ecb505a6e562", "name": "Agent instruction/config may expose a secret: tasks-extra/find-topk-similiar-chemicals/environment/skills/pubchem-databa", "shortDescription": {"text": "Agent instruction/config may expose a secret: tasks-extra/find-topk-similiar-chemicals/environment/skills/pubchem-database/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e9b3332843545890", "name": "Agent authority lacks a verifier contract: tasks-extra/pg-essay-to-audiobook/environment/skills/openai-tts/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: tasks-extra/pg-essay-to-audiobook/environment/skills/openai-tts/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-76cb2d437ce189a1", "name": "Agent instruction/config may expose a secret: tasks-extra/pg-essay-to-audiobook/environment/skills/elevenlabs-tts/SKILL.", "shortDescription": {"text": "Agent instruction/config may expose a secret: tasks-extra/pg-essay-to-audiobook/environment/skills/elevenlabs-tts/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-959c2217b4691662", "name": "Agent authority lacks a verifier contract: tasks-extra/pg-essay-to-audiobook/environment/skills/elevenlabs-tts/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: tasks-extra/pg-essay-to-audiobook/environment/skills/elevenlabs-tts/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9c0f053e2a3bb554", "name": "Agent instruction/config may expose a secret: tasks-extra/pg-essay-to-audiobook/environment/skills/audiobook/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: tasks-extra/pg-essay-to-audiobook/environment/skills/audiobook/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-09a8a405378d0dab", "name": "Agent authority lacks a verifier contract: tasks-extra/pg-essay-to-audiobook/environment/skills/gtts/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: tasks-extra/pg-essay-to-audiobook/environment/skills/gtts/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-33d4a0eb6348c84f", "name": "Agent authority lacks a verifier contract: tasks-extra/gh-repo-analytics/environment/skills/gh-cli/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: tasks-extra/gh-repo-analytics/environment/skills/gh-cli/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-61588ac10efa2c68", "name": "Agent authority lacks a verifier contract: tasks-extra/diff-transformer_impl/environment/skills/modal-gpu/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: tasks-extra/diff-transformer_impl/environment/skills/modal-gpu/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-87182a1189de789d", "name": "Agent authority lacks a verifier contract: tasks-extra/video-filler-word-remover/environment/skills/ffmpeg-video-editing", "shortDescription": {"text": "Agent authority lacks a verifier contract: tasks-extra/video-filler-word-remover/environment/skills/ffmpeg-video-editing/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f50924b5fba739df", "name": "Agent authority lacks a verifier contract: tasks-extra/video-filler-word-remover/environment/skills/whisper-transcriptio", "shortDescription": {"text": "Agent authority lacks a verifier contract: tasks-extra/video-filler-word-remover/environment/skills/whisper-transcription/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7491faf6424740b7", "name": "Agent authority lacks a verifier contract: tasks-extra/video-tutorial-indexer/environment/skills/speech-to-text/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: tasks-extra/video-tutorial-indexer/environment/skills/speech-to-text/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-620f6960e70ca600", "name": "Agent authority lacks a verifier contract: tasks-extra/speaker-diarization-subtitles/environment/skills/automatic-speech", "shortDescription": {"text": "Agent authority lacks a verifier contract: tasks-extra/speaker-diarization-subtitles/environment/skills/automatic-speech-recognition/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-09e18b3cb928f0c8", "name": "Agent authority lacks a verifier contract: tasks-extra/speaker-diarization-subtitles/environment/skills/voice-activity-d", "shortDescription": {"text": "Agent authority lacks a verifier contract: tasks-extra/speaker-diarization-subtitles/environment/skills/voice-activity-detection/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e359f90b519a22f3", "name": "Agent authority lacks a verifier contract: tasks-extra/speaker-diarization-subtitles/environment/skills/multimodal-fusio", "shortDescription": {"text": "Agent authority lacks a verifier contract: tasks-extra/speaker-diarization-subtitles/environment/skills/multimodal-fusion/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-09467b21674ac780", "name": "Agent authority lacks a verifier contract: tasks-extra/mhc-layer-impl/environment/skills/modal-gpu/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: tasks-extra/mhc-layer-impl/environment/skills/modal-gpu/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-662653a7a7025286", "name": "Agent instruction/config may expose a secret: tasks/dapt-intrusion-detection/environment/skills/pcap-analysis/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: tasks/dapt-intrusion-detection/environment/skills/pcap-analysis/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8f225882009a6e08", "name": "Agent authority lacks a verifier contract: tasks/dapt-intrusion-detection/environment/skills/threat-detection/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: tasks/dapt-intrusion-detection/environment/skills/threat-detection/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7ae1135fde9f115b", "name": "Agent instruction/config may expose a secret: tasks/lake-warming-attribution/environment/skills/contribution-analysis/SK", "shortDescription": {"text": "Agent instruction/config may expose a secret: tasks/lake-warming-attribution/environment/skills/contribution-analysis/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-fc4e00eb369362ad", "name": "Agent authority lacks a verifier contract: tasks/lake-warming-attribution/environment/skills/contribution-analysis/SKILL", "shortDescription": {"text": "Agent authority lacks a verifier contract: tasks/lake-warming-attribution/environment/skills/contribution-analysis/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-27df5cc8031570db", "name": "Agent authority lacks a verifier contract: tasks/lake-warming-attribution/environment/skills/pca-decomposition/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: tasks/lake-warming-attribution/environment/skills/pca-decomposition/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8161bc8f079706ff", "name": "Agent authority lacks a verifier contract: tasks/earthquake-phase-association/environment/skills/seismic-picker-selectio", "shortDescription": {"text": "Agent authority lacks a verifier contract: tasks/earthquake-phase-association/environment/skills/seismic-picker-selection/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cffd7d3d4fbd1180", "name": "Agent authority lacks a verifier contract: tasks/earthquake-phase-association/environment/skills/seisbench-model-api/SKI", "shortDescription": {"text": "Agent authority lacks a verifier contract: tasks/earthquake-phase-association/environment/skills/seisbench-model-api/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-036af6949bfaff9b", "name": "Agent instruction contains unpinned remote install: tasks/earthquake-phase-association/environment/skills/gamma-phase-as", "shortDescription": {"text": "Agent instruction contains unpinned remote install: tasks/earthquake-phase-association/environment/skills/gamma-phase-associator/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f4c4d5fc8fa89e8c", "name": "Agent authority lacks a verifier contract: tasks/simpo-code-reproduction/environment/skills/nlp-research-repo-package-in", "shortDescription": {"text": "Agent authority lacks a verifier contract: tasks/simpo-code-reproduction/environment/skills/nlp-research-repo-package-installment/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1cce8639930dd751", "name": "Agent instruction contains unpinned remote install: tasks/simpo-code-reproduction/environment/skills/nlp-research-repo-p", "shortDescription": {"text": "Agent instruction contains unpinned remote install: tasks/simpo-code-reproduction/environment/skills/nlp-research-repo-package-installment/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-88e5476171d1e416", "name": "Agent authority lacks a verifier contract: tasks/exoplanet-detection-period/environment/skills/lomb-scargle-periodogram/", "shortDescription": {"text": "Agent authority lacks a verifier contract: tasks/exoplanet-detection-period/environment/skills/lomb-scargle-periodogram/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cd616cd02039344f", "name": "Agent authority lacks a verifier contract: tasks/exoplanet-detection-period/environment/skills/transit-least-squares/SKI", "shortDescription": {"text": "Agent authority lacks a verifier contract: tasks/exoplanet-detection-period/environment/skills/transit-least-squares/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f58ec17ad4effcb2", "name": "Agent authority lacks a verifier contract: tasks/syzkaller-ppdev-syzlang/environment/skills/syzlang-ioctl-basics/SKILL.m", "shortDescription": {"text": "Agent authority lacks a verifier contract: tasks/syzkaller-ppdev-syzlang/environment/skills/syzlang-ioctl-basics/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e89f6e9b1eca9390", "name": "Agent authority lacks a verifier contract: tasks/seismic-phase-picking/environment/skills/seismic-picker-selection/SKILL", "shortDescription": {"text": "Agent authority lacks a verifier contract: tasks/seismic-phase-picking/environment/skills/seismic-picker-selection/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6a5e59c46e8ca914", "name": "Agent authority lacks a verifier contract: tasks/seismic-phase-picking/environment/skills/seisbench-model-api/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: tasks/seismic-phase-picking/environment/skills/seisbench-model-api/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-90c713342265b2b2", "name": "Agent authority lacks a verifier contract: tasks/fix-build-google-auto/environment/skills/maven-plugin-configuration/SKI", "shortDescription": {"text": "Agent authority lacks a verifier contract: tasks/fix-build-google-auto/environment/skills/maven-plugin-configuration/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3506fb9b45f66eaf", "name": "Agent authority lacks a verifier contract: tasks/fix-build-google-auto/environment/skills/maven-build-lifecycle/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: tasks/fix-build-google-auto/environment/skills/maven-build-lifecycle/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2d4fe0a6f824d43a", "name": "Agent authority lacks a verifier contract: tasks/debug-trl-grpo/environment/skills/rl-post-training/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: tasks/debug-trl-grpo/environment/skills/rl-post-training/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fcb736b694ce2a6f", "name": "Agent authority lacks a verifier contract: tasks/video-silence-remover/environment/skills/audio-extractor/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: tasks/video-silence-remover/environment/skills/audio-extractor/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7f76680aac84325b", "name": "Agent authority lacks a verifier contract: tasks/video-silence-remover/environment/skills/silence-detector/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: tasks/video-silence-remover/environment/skills/silence-detector/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e8ea72e26b5a54ed", "name": "Agent authority lacks a verifier contract: tasks/video-silence-remover/environment/skills/pause-detector/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: tasks/video-silence-remover/environment/skills/pause-detector/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b7be310e3d61406a", "name": "Agent authority lacks a verifier contract: tasks/video-silence-remover/environment/skills/energy-calculator/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: tasks/video-silence-remover/environment/skills/energy-calculator/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-299b37a91841182d", "name": "Agent authority lacks a verifier contract: tasks/video-silence-remover/environment/skills/report-generator/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: tasks/video-silence-remover/environment/skills/report-generator/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3269b6e108dd1fc2", "name": "Agent authority lacks a verifier contract: tasks/video-silence-remover/environment/skills/segment-combiner/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: tasks/video-silence-remover/environment/skills/segment-combiner/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e9916dfe3d2ad953", "name": "Agent instruction contains unpinned remote install: tasks/exceltable-in-ppt/environment/skills/pptx/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: tasks/exceltable-in-ppt/environment/skills/pptx/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f22cc84608230c27", "name": "Agent authority lacks a verifier contract: tasks/suricata-custom-exfil/environment/skills/pcap-triage-tshark/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: tasks/suricata-custom-exfil/environment/skills/pcap-triage-tshark/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-13fc9e4525a1aabe", "name": "Agent authority lacks a verifier contract: tasks/suricata-custom-exfil/environment/skills/suricata-offline-evejson/SKILL", "shortDescription": {"text": "Agent authority lacks a verifier contract: tasks/suricata-custom-exfil/environment/skills/suricata-offline-evejson/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e81f186627671a3c", "name": "Agent instruction/config may expose a secret: tasks/python-scala-translation/environment/skills/python-scala-collections", "shortDescription": {"text": "Agent instruction/config may expose a secret: tasks/python-scala-translation/environment/skills/python-scala-collections/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-75a3ede4e92b9def", "name": "Agent authority lacks a verifier contract: tasks/manufacturing-equipment-maintenance/environment/skills/reflow-machine-m", "shortDescription": {"text": "Agent authority lacks a verifier contract: tasks/manufacturing-equipment-maintenance/environment/skills/reflow-machine-maintenance-guidance/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2fb53972d64ca660", "name": "Agent authority lacks a verifier contract: tasks/fix-erlang-ssh-cve/environment/skills/find-bugs/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: tasks/fix-erlang-ssh-cve/environment/skills/find-bugs/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bad409628bb2cfdd", "name": "Agent instruction/config may expose a secret: tasks/fix-erlang-ssh-cve/environment/skills/erlang-distribution/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: tasks/fix-erlang-ssh-cve/environment/skills/erlang-distribution/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-645f8e909505bbf0", "name": "Agent authority lacks a verifier contract: tasks/hvac-control/environment/skills/safety-interlocks/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: tasks/hvac-control/environment/skills/safety-interlocks/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2ac9d32e763b348f", "name": "Agent authority lacks a verifier contract: tasks/latex-formula-extraction/environment/skills/marker/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: tasks/latex-formula-extraction/environment/skills/marker/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-63f375e09d42049b", "name": "Agent authority lacks a verifier contract: tasks/multilingual-video-dubbing/environment/skills/ffmpeg-audio-processing/S", "shortDescription": {"text": "Agent authority lacks a verifier contract: tasks/multilingual-video-dubbing/environment/skills/ffmpeg-audio-processing/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3074e506fd3eed8c", "name": "Agent authority lacks a verifier contract: tasks/multilingual-video-dubbing/environment/skills/ffmpeg-video-filters/SKIL", "shortDescription": {"text": "Agent authority lacks a verifier contract: tasks/multilingual-video-dubbing/environment/skills/ffmpeg-video-filters/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c8525704e8626129", "name": "Agent authority lacks a verifier contract: tasks/multilingual-video-dubbing/environment/skills/ffmpeg-format-conversion/", "shortDescription": {"text": "Agent authority lacks a verifier contract: tasks/multilingual-video-dubbing/environment/skills/ffmpeg-format-conversion/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4241131a2779ce36", "name": "Agent authority lacks a verifier contract: tasks/multilingual-video-dubbing/environment/skills/ffmpeg-video-editing/SKIL", "shortDescription": {"text": "Agent authority lacks a verifier contract: tasks/multilingual-video-dubbing/environment/skills/ffmpeg-video-editing/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-efeff2fe62bea712", "name": "Agent instruction contains unpinned remote install: tasks/pptx-reference-formatting/environment/skills/pptx/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: tasks/pptx-reference-formatting/environment/skills/pptx/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-08ceb6a6050570aa", "name": "Agent authority lacks a verifier contract: tasks/mario-coin-counting/environment/skills/image-editing/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: tasks/mario-coin-counting/environment/skills/image-editing/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5da4c4e0b21f9548", "name": "Agent authority lacks a verifier contract: tasks/mario-coin-counting/environment/skills/ffmpeg-keyframe-extraction/SKILL", "shortDescription": {"text": "Agent authority lacks a verifier contract: tasks/mario-coin-counting/environment/skills/ffmpeg-keyframe-extraction/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2225cfc3b02d1e81", "name": "Agent authority lacks a verifier contract: tasks/mario-coin-counting/environment/skills/object-counter/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: tasks/mario-coin-counting/environment/skills/object-counter/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-dfa68e5b2d51da22", "name": "Agent authority lacks a verifier contract: tasks/threejs-to-obj/environment/skills/obj-exporter/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: tasks/threejs-to-obj/environment/skills/obj-exporter/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-193fa82ec941b982", "name": "Agent authority lacks a verifier contract: tasks/fix-build-agentops/environment/skills/testing-python/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: tasks/fix-build-agentops/environment/skills/testing-python/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-18ed6201ded5d0ed", "name": "Agent instruction contains unpinned remote install: tasks/fix-build-agentops/environment/skills/uv-package-manager/SKILL", "shortDescription": {"text": "Agent instruction contains unpinned remote install: tasks/fix-build-agentops/environment/skills/uv-package-manager/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d9d19f29783265ba", "name": "Agent authority lacks a verifier contract: tasks/glm-lake-mendota/environment/skills/glm-calibration/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: tasks/glm-lake-mendota/environment/skills/glm-calibration/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-934d086fb68e2e61", "name": "Agent authority lacks a verifier contract: tasks/setup-fuzzing-py/environment/skills/discover-important-function/SKILL.m", "shortDescription": {"text": "Agent authority lacks a verifier contract: tasks/setup-fuzzing-py/environment/skills/discover-important-function/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f2588c519f81b76d", "name": "Agent authority lacks a verifier contract: tasks/setup-fuzzing-py/environment/skills/fuzzing-python/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: tasks/setup-fuzzing-py/environment/skills/fuzzing-python/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-472124452a253986", "name": "Agent instruction contains unpinned remote install: tasks/organize-messy-files/environment/skills/pptx/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: tasks/organize-messy-files/environment/skills/pptx/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-09233a97c7749d78", "name": "Agent instruction contains unpinned remote install: tasks/organize-messy-files/environment/skills/docx/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: tasks/organize-messy-files/environment/skills/docx/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5e7ee66d971b5460", "name": "Agent authority lacks a verifier contract: tasks/flood-risk-analysis/environment/skills/usgs-data-download/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: tasks/flood-risk-analysis/environment/skills/usgs-data-download/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-57fb65c118cf2abf", "name": "Agent authority lacks a verifier contract: tasks/sec-financial-report/environment/skills/fuzzy-name-search/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: tasks/sec-financial-report/environment/skills/fuzzy-name-search/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-216dbe5744f5f676", "name": "Agent authority lacks a verifier contract: tasks/sec-financial-report/environment/skills/13f-analyzer/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: tasks/sec-financial-report/environment/skills/13f-analyzer/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-be35f32819a070bc", "name": "Agent authority lacks a verifier contract: tasks/econ-detrending-correlation/environment/skills/timeseries-detrending/SK", "shortDescription": {"text": "Agent authority lacks a verifier contract: tasks/econ-detrending-correlation/environment/skills/timeseries-detrending/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-41e52767170b66ba", "name": "Agent authority lacks a verifier contract: tasks/r2r-mpc-control/environment/skills/mpc-horizon-tuning/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: tasks/r2r-mpc-control/environment/skills/mpc-horizon-tuning/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f5a7387bb381205c", "name": "Agent authority lacks a verifier contract: tasks/jax-computing-basics/environment/skills/jax-skills/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: tasks/jax-computing-basics/environment/skills/jax-skills/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c455b320601c5699", "name": "Agent authority lacks a verifier contract: tasks/threejs-structure-parser/environment/skills/obj-exporter/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: tasks/threejs-structure-parser/environment/skills/obj-exporter/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-dd3d423c554cfa24", "name": "Agent authority lacks a verifier contract: tasks/travel-planning/environment/skills/search-driving-distance/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: tasks/travel-planning/environment/skills/search-driving-distance/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0c1277c1e9980d22", "name": "Agent authority lacks a verifier contract: tasks/travel-planning/environment/skills/search-attractions/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: tasks/travel-planning/environment/skills/search-attractions/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-432de74d2b256b4e", "name": "Agent authority lacks a verifier contract: tasks/travel-planning/environment/skills/search-accommodations/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: tasks/travel-planning/environment/skills/search-accommodations/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2559c5af79d67ccd", "name": "Agent authority lacks a verifier contract: tasks/travel-planning/environment/skills/search-restaurants/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: tasks/travel-planning/environment/skills/search-restaurants/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-203e3ae92fc2c4c5", "name": "Agent authority lacks a verifier contract: tasks/travel-planning/environment/skills/search-cities/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: tasks/travel-planning/environment/skills/search-cities/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-675e9cca0374ce21", "name": "Agent authority lacks a verifier contract: tasks/travel-planning/environment/skills/search-flights/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: tasks/travel-planning/environment/skills/search-flights/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a2a4448f30c18a54", "name": "Agent authority lacks a verifier contract: tasks/radar-vital-signs/environment/skills/vital-sign-extraction/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: tasks/radar-vital-signs/environment/skills/vital-sign-extraction/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-37f7f0f9e5b2bb35", "name": "Agent authority lacks a verifier contract: tasks/radar-vital-signs/environment/skills/radar-vital-signs/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: tasks/radar-vital-signs/environment/skills/radar-vital-signs/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5f6514847b07d3be", "name": "Agent instruction/config may expose a secret: tasks/quantum-numerical-simulation/environment/skills/qutip/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: tasks/quantum-numerical-simulation/environment/skills/qutip/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-28e6e36fe91dde64", "name": "Agent authority lacks a verifier contract: tasks/drone-planning-control/environment/skills/plot-quadrotor/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: tasks/drone-planning-control/environment/skills/plot-quadrotor/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b43ed29ce7326aa5", "name": "Agent authority lacks a verifier contract: tasks/drone-planning-control/environment/skills/flight-plan-parser/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: tasks/drone-planning-control/environment/skills/flight-plan-parser/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f933386a03723159", "name": "Agent authority lacks a verifier contract: tasks/drone-planning-control/environment/skills/stepinfo-3d/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: tasks/drone-planning-control/environment/skills/stepinfo-3d/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ecb0d2c55ed6875d", "name": "Agent authority lacks a verifier contract: .claude/settings.local.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/settings.local.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d977acc21e8e0f7b", "name": "Network/subprocess call without timeout or try/except \u2014 experiments/scripts/run_opencode_daytona_ablation.py:142", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 experiments/scripts/run_opencode_daytona_ablation.py:142"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-be03e34701dd1156", "name": "Legacy-named symbol `hardlink_or_copy` in experiments/scripts/run_benchflow_integration.py:228", "shortDescription": {"text": "Legacy-named symbol `hardlink_or_copy` in experiments/scripts/run_benchflow_integration.py:228"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9f18cedb60945cdd", "name": "Legacy-named symbol `hardlink_or_copy` in experiments/scripts/open_model_scripts/run_opencode_bench_docker_open_models.p", "shortDescription": {"text": "Legacy-named symbol `hardlink_or_copy` in experiments/scripts/open_model_scripts/run_opencode_bench_docker_open_models.py:450"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9826e921243c64d2", "name": "Network/subprocess call without timeout or try/except \u2014 experiments/scripts/open_model_scripts/run_opencode_bench_docker", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 experiments/scripts/open_model_scripts/run_opencode_bench_docker_open_models.py:324"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6a7b578782e62d31", "name": "Legacy-named symbol `hardlink_or_copy` in experiments/scripts/open_model_scripts/run_opencode_bench_daytona_open_models.", "shortDescription": {"text": "Legacy-named symbol `hardlink_or_copy` in experiments/scripts/open_model_scripts/run_opencode_bench_daytona_open_models.py:468"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-699fb0c83ae2c33a", "name": "Network/subprocess call without timeout or try/except \u2014 experiments/scripts/open_model_scripts/run_opencode_bench_dayton", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 experiments/scripts/open_model_scripts/run_opencode_bench_daytona_open_models.py:329"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5b5fb59b8f0a04b5", "name": "Network/subprocess call without timeout or try/except \u2014 experiments/scripts/open_model_scripts/export_leaderboard_submis", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 experiments/scripts/open_model_scripts/export_leaderboard_submission.py:96"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-17fc799babba7edc", "name": "Legacy-named symbol `hardlink_or_copy` in experiments/scripts/gcp_setup/run_opencode_gcp_docker_ablation.py:253", "shortDescription": {"text": "Legacy-named symbol `hardlink_or_copy` in experiments/scripts/gcp_setup/run_opencode_gcp_docker_ablation.py:253"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3990bf4f5b76f897", "name": "Network/subprocess call without timeout or try/except \u2014 experiments/scripts/gcp_setup/run_opencode_gcp_docker_ablation.p", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 experiments/scripts/gcp_setup/run_opencode_gcp_docker_ablation.py:168"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-51ffb437579a0e2e", "name": "`fetch()` without try/.catch or AbortSignal \u2014 experiments/metrics-dashboard/src/App.tsx:718", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 experiments/metrics-dashboard/src/App.tsx:718"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b27392e9f22b0db1", "name": "`fetch()` without try/.catch or AbortSignal \u2014 experiments/metrics-dashboard/src/components/SystemInfoPanel.tsx:91", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 experiments/metrics-dashboard/src/components/SystemInfoPanel.tsx:91"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3ccff3d4bd39faf3", "name": "`fetch()` without try/.catch or AbortSignal \u2014 experiments/metrics-dashboard/src/components/TrialFilesPanel.tsx:92", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 experiments/metrics-dashboard/src/components/TrialFilesPanel.tsx:92"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e25e7e1e584442bc", "name": "Commented-code block (8 lines) in website/scripts/generate-tasks-registry.ts:75", "shortDescription": {"text": "Commented-code block (8 lines) in website/scripts/generate-tasks-registry.ts:75"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-fad664c319bd8de1", "name": "`fetch()` without try/.catch or AbortSignal \u2014 website/src/app/opengraph-image.tsx:19", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 website/src/app/opengraph-image.tsx:19"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0df5abbaea26db62", "name": "Commented-code block (7 lines) in website/src/components/GradientBlinds.tsx:315", "shortDescription": {"text": "Commented-code block (7 lines) in website/src/components/GradientBlinds.tsx:315"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-297b7ba97973861a", "name": "Commented-code block (8 lines) in website/src/components/Squares.tsx:72", "shortDescription": {"text": "Commented-code block (8 lines) in website/src/components/Squares.tsx:72"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-4009a75351594800", "name": "Commented-code block (5 lines) in tasks-extra/nda-playbook-review/tests/test_outputs.py:32", "shortDescription": {"text": "Commented-code block (5 lines) in tasks-extra/nda-playbook-review/tests/test_outputs.py:32"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-0a5acaf83ef9964e", "name": "Commented-code block (5 lines) in tasks-extra/find-topk-similiar-chemicals/environment/skills/pdf/scripts/extract_form_f", "shortDescription": {"text": "Commented-code block (5 lines) in tasks-extra/find-topk-similiar-chemicals/environment/skills/pdf/scripts/extract_form_field_info.py:56"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e468dcb1c77b7e0e", "name": "Commented-code block (6 lines) in tasks-extra/cobol-gl-batch-reconcile/scripts/regenerate_fixtures.py:41", "shortDescription": {"text": "Commented-code block (6 lines) in tasks-extra/cobol-gl-batch-reconcile/scripts/regenerate_fixtures.py:41"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d7ce313c9e3841b7", "name": "Commented-code block (5 lines) in tasks-extra/taxonomy-tree-merge/tests/test_outputs.py:270", "shortDescription": {"text": "Commented-code block (5 lines) in tasks-extra/taxonomy-tree-merge/tests/test_outputs.py:270"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-eaf3c5852ae1bb10", "name": "Commented-code block (8 lines) in tasks-extra/taxonomy-tree-merge/environment/skills/hierarchical-taxonomy-clustering/sc", "shortDescription": {"text": "Commented-code block (8 lines) in tasks-extra/taxonomy-tree-merge/environment/skills/hierarchical-taxonomy-clustering/scripts/step1_preprocessing_and_merge.py:75"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8c9f0c1ae769286a", "name": "Network/subprocess call without timeout or try/except \u2014 tasks-extra/video-tutorial-indexer/environment/skills/speech-to-", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 tasks-extra/video-tutorial-indexer/environment/skills/speech-to-text/scripts/transcribe.py:40"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0897b8ba0f8a4e8f", "name": "Commented-code block (7 lines) in tasks-extra/speaker-diarization-subtitles/tests/test_outputs.py:15", "shortDescription": {"text": "Commented-code block (7 lines) in tasks-extra/speaker-diarization-subtitles/tests/test_outputs.py:15"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-844cb06a2cf6d707", "name": "Commented-code block (5 lines) in tasks/dialogue-parser/tests/test_outputs.py:253", "shortDescription": {"text": "Commented-code block (5 lines) in tasks/dialogue-parser/tests/test_outputs.py:253"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-190a316e51b17721", "name": "Commented-code block (6 lines) in tasks/dialogue-parser/solution/solution.py:118", "shortDescription": {"text": "Commented-code block (6 lines) in tasks/dialogue-parser/solution/solution.py:118"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-79ce9e4459a7e899", "name": "Network/subprocess call without timeout or try/except \u2014 tasks/protein-expression-analysis/environment/skills/xlsx/recalc", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 tasks/protein-expression-analysis/environment/skills/xlsx/recalc.py:94"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5186b4aa41984b5f", "name": "Commented-code block (12 lines) in tasks/simpo-code-reproduction/environment/SimPO/scripts/run_simpo.py:224", "shortDescription": {"text": "Commented-code block (12 lines) in tasks/simpo-code-reproduction/environment/SimPO/scripts/run_simpo.py:224"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-05e91f352ea0507e", "name": "Commented-code block (10 lines) in tasks/simpo-code-reproduction/environment/SimPO/scripts/simpo_trainer.py:96", "shortDescription": {"text": "Commented-code block (10 lines) in tasks/simpo-code-reproduction/environment/SimPO/scripts/simpo_trainer.py:96"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-dc03323385670073", "name": "Commented-code block (5 lines) in tasks/simpo-code-reproduction/environment/SimPO/alignment/data.py:159", "shortDescription": {"text": "Commented-code block (5 lines) in tasks/simpo-code-reproduction/environment/SimPO/alignment/data.py:159"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-03415c9026f174b6", "name": "Commented-code block (5 lines) in tasks/simpo-code-reproduction/environment/skills/pdf/scripts/extract_form_field_info.p", "shortDescription": {"text": "Commented-code block (5 lines) in tasks/simpo-code-reproduction/environment/skills/pdf/scripts/extract_form_field_info.py:56"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-6cadba0ec0058fc7", "name": "Commented-code block (5 lines) in tasks/software-dependency-audit/solution/solution.py:34", "shortDescription": {"text": "Commented-code block (5 lines) in tasks/software-dependency-audit/solution/solution.py:34"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-41b2d3204a289542", "name": "Network/subprocess call without timeout or try/except \u2014 tasks/xlsx-recover-data/environment/skills/xlsx/recalc.py:94", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 tasks/xlsx-recover-data/environment/skills/xlsx/recalc.py:94"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b525cd6883b4ae50", "name": "`fetch()` without try/.catch or AbortSignal \u2014 tasks/react-performance-debugging/environment/website/src/services/api-cli", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 tasks/react-performance-debugging/environment/website/src/services/api-client.ts:8"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-38f4d5641d46e114", "name": "Commented-code block (6 lines) in tasks/react-performance-debugging/environment/skills/browser-testing/measure.ts:53", "shortDescription": {"text": "Commented-code block (6 lines) in tasks/react-performance-debugging/environment/skills/browser-testing/measure.ts:53"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-557199907273fd50", "name": "Commented-code block (5 lines) in tasks/court-form-filling/tests/test_outputs.py:219", "shortDescription": {"text": "Commented-code block (5 lines) in tasks/court-form-filling/tests/test_outputs.py:219"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-36dd4d4f079cf829", "name": "Commented-code block (5 lines) in tasks/court-form-filling/environment/skills/pdf/scripts/extract_form_field_info.py:60", "shortDescription": {"text": "Commented-code block (5 lines) in tasks/court-form-filling/environment/skills/pdf/scripts/extract_form_field_info.py:60"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-46e65b3f6ca4ce76", "name": "Legacy-named symbol `exp_old` in tasks/pdf-excel-diff/tests/test_outputs.py:150", "shortDescription": {"text": "Legacy-named symbol `exp_old` in tasks/pdf-excel-diff/tests/test_outputs.py:150"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c2de9de4267232bf", "name": "Commented-code block (5 lines) in tasks/pdf-excel-diff/environment/skills/pdf/scripts/extract_form_field_info.py:60", "shortDescription": {"text": "Commented-code block (5 lines) in tasks/pdf-excel-diff/environment/skills/pdf/scripts/extract_form_field_info.py:60"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-61fcb13dbd8be6fb", "name": "Network/subprocess call without timeout or try/except \u2014 tasks/pdf-excel-diff/environment/skills/xlsx/recalc.py:94", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 tasks/pdf-excel-diff/environment/skills/xlsx/recalc.py:94"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3e3b6b4a5e554839", "name": "`fetch()` without try/.catch or AbortSignal \u2014 tasks/fix-visual-stability/environment/app/src/components/SidePane.tsx:11", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 tasks/fix-visual-stability/environment/app/src/components/SidePane.tsx:11"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9b3045baa7cfde89", "name": "`fetch()` without try/.catch or AbortSignal \u2014 tasks/fix-visual-stability/environment/app/src/components/ResultsBar.tsx:1", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 tasks/fix-visual-stability/environment/app/src/components/ResultsBar.tsx:19"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a8a7ecc845109613", "name": "`fetch()` without try/.catch or AbortSignal \u2014 tasks/fix-visual-stability/environment/app/src/components/ProductList.tsx:", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 tasks/fix-visual-stability/environment/app/src/components/ProductList.tsx:20"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-365d2f436567aa21", "name": "`fetch()` without try/.catch or AbortSignal \u2014 tasks/fix-visual-stability/environment/app/src/components/Banner.tsx:11", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 tasks/fix-visual-stability/environment/app/src/components/Banner.tsx:11"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-dadb9c4ecf229cae", "name": "`fetch()` without try/.catch or AbortSignal \u2014 tasks/fix-visual-stability/environment/app/src/components/LateBanner.tsx:1", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 tasks/fix-visual-stability/environment/app/src/components/LateBanner.tsx:11"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d59882a3c8b103bf", "name": "Commented-code block (6 lines) in tasks/fix-visual-stability/environment/skills/browser-testing/measure.ts:53", "shortDescription": {"text": "Commented-code block (6 lines) in tasks/fix-visual-stability/environment/skills/browser-testing/measure.ts:53"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-0a6c909961cf62a3", "name": "Network/subprocess call without timeout or try/except \u2014 tasks/video-silence-remover/environment/skills/audio-extractor/s", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 tasks/video-silence-remover/environment/skills/audio-extractor/scripts/extract_audio.py:31"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-70cbdaeb49bbf15c", "name": "Network/subprocess call without timeout or try/except \u2014 tasks/video-silence-remover/environment/skills/report-generator/", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 tasks/video-silence-remover/environment/skills/report-generator/scripts/generate_report.py:13"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c5bd2eb3ec7c514b", "name": "Network/subprocess call without timeout or try/except \u2014 tasks/video-silence-remover/environment/skills/video-processor/s", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 tasks/video-silence-remover/environment/skills/video-processor/scripts/process_video.py:14"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fd8325df42794f18", "name": "Commented-code block (6 lines) in tasks/exceltable-in-ppt/environment/skills/pptx/scripts/thumbnail.py:32", "shortDescription": {"text": "Commented-code block (6 lines) in tasks/exceltable-in-ppt/environment/skills/pptx/scripts/thumbnail.py:32"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7e855f9f15c7a1ac", "name": "Network/subprocess call without timeout or try/except \u2014 tasks/exceltable-in-ppt/environment/skills/pptx/scripts/thumbnai", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 tasks/exceltable-in-ppt/environment/skills/pptx/scripts/thumbnail.py:219"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-498b7f6900b85343", "name": "Network/subprocess call without timeout or try/except \u2014 tasks/exceltable-in-ppt/environment/skills/pptx/ooxml/scripts/va", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 tasks/exceltable-in-ppt/environment/skills/pptx/ooxml/scripts/validation/redlining.py:153"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1c6324f3d18b37a5", "name": "Legacy-named symbol `xml_copy` in tasks/exceltable-in-ppt/environment/skills/pptx/ooxml/scripts/validation/base.py:769", "shortDescription": {"text": "Legacy-named symbol `xml_copy` in tasks/exceltable-in-ppt/environment/skills/pptx/ooxml/scripts/validation/base.py:769"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-af58d4060aa77a83", "name": "Network/subprocess call without timeout or try/except \u2014 tasks/exceltable-in-ppt/environment/skills/xlsx/recalc.py:92", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 tasks/exceltable-in-ppt/environment/skills/xlsx/recalc.py:92"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-65a8dba355b82320", "name": "Network/subprocess call without timeout or try/except \u2014 tasks/reserves-at-risk-calc/environment/skills/xlsx/recalc.py:94", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 tasks/reserves-at-risk-calc/environment/skills/xlsx/recalc.py:94"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fa97040e822bffef", "name": "Commented-code block (5 lines) in tasks/financial-modeling-qa/environment/skills/pdf/scripts/extract_form_field_info.py:", "shortDescription": {"text": "Commented-code block (5 lines) in tasks/financial-modeling-qa/environment/skills/pdf/scripts/extract_form_field_info.py:56"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-97821a7396dba939", "name": "Network/subprocess call without timeout or try/except \u2014 tasks/financial-modeling-qa/environment/skills/xlsx/recalc.py:92", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 tasks/financial-modeling-qa/environment/skills/xlsx/recalc.py:92"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a7a82cf6d8b64194", "name": "Commented-code block (7 lines) in tasks/pddl-airport-planning/tests/test_outputs.py:44", "shortDescription": {"text": "Commented-code block (7 lines) in tasks/pddl-airport-planning/tests/test_outputs.py:44"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a35d86f040ffdedf", "name": "Commented-code block (6 lines) in tasks/pddl-airport-planning/environment/validate.py:20", "shortDescription": {"text": "Commented-code block (6 lines) in tasks/pddl-airport-planning/environment/validate.py:20"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8ba76c52ff38a3f1", "name": "Commented-code block (5 lines) in tasks/manufacturing-equipment-maintenance/tests/test_outputs.py:30", "shortDescription": {"text": "Commented-code block (5 lines) in tasks/manufacturing-equipment-maintenance/tests/test_outputs.py:30"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-90b754e06000bc2d", "name": "Commented-code block (5 lines) in tasks/jpg-ocr-stat/environment/skills/pdf/scripts/extract_form_field_info.py:60", "shortDescription": {"text": "Commented-code block (5 lines) in tasks/jpg-ocr-stat/environment/skills/pdf/scripts/extract_form_field_info.py:60"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a29f029feae88531", "name": "Network/subprocess call without timeout or try/except \u2014 tasks/jpg-ocr-stat/environment/skills/xlsx/recalc.py:94", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 tasks/jpg-ocr-stat/environment/skills/xlsx/recalc.py:94"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-eca942ca29780dc5", "name": "Legacy-named symbol `exactly_once_v2` in tasks/flink-query/environment/skills/senior-data-engineer/scripts/kafka_config_", "shortDescription": {"text": "Legacy-named symbol `exactly_once_v2` in tasks/flink-query/environment/skills/senior-data-engineer/scripts/kafka_config_generator.py:481"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fbbd098a811faa60", "name": "Commented-code block (5 lines) in tasks/flink-query/environment/skills/pdf/scripts/extract_form_field_info.py:60", "shortDescription": {"text": "Commented-code block (5 lines) in tasks/flink-query/environment/skills/pdf/scripts/extract_form_field_info.py:60"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-865f2fad57a28b03", "name": "Commented-code block (5 lines) in tasks/latex-formula-extraction/environment/skills/pdf/scripts/extract_form_field_info.", "shortDescription": {"text": "Commented-code block (5 lines) in tasks/latex-formula-extraction/environment/skills/pdf/scripts/extract_form_field_info.py:60"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-60bada3955519392", "name": "Network/subprocess call without timeout or try/except \u2014 tasks/shock-analysis-supply/environment/skills/xlsx/recalc.py:94", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 tasks/shock-analysis-supply/environment/skills/xlsx/recalc.py:94"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-43ee8a514128d3bb", "name": "Commented-code block (6 lines) in tasks/pptx-reference-formatting/environment/skills/pptx/scripts/thumbnail.py:32", "shortDescription": {"text": "Commented-code block (6 lines) in tasks/pptx-reference-formatting/environment/skills/pptx/scripts/thumbnail.py:32"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f01790ccc582cacf", "name": "Network/subprocess call without timeout or try/except \u2014 tasks/pptx-reference-formatting/environment/skills/pptx/scripts/", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 tasks/pptx-reference-formatting/environment/skills/pptx/scripts/thumbnail.py:211"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e876591740bb1afb", "name": "Network/subprocess call without timeout or try/except \u2014 tasks/pptx-reference-formatting/environment/skills/pptx/ooxml/sc", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 tasks/pptx-reference-formatting/environment/skills/pptx/ooxml/scripts/validation/redlining.py:139"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-25aee4a773ffa2a5", "name": "Legacy-named symbol `xml_copy` in tasks/pptx-reference-formatting/environment/skills/pptx/ooxml/scripts/validation/base.", "shortDescription": {"text": "Legacy-named symbol `xml_copy` in tasks/pptx-reference-formatting/environment/skills/pptx/ooxml/scripts/validation/base.py:693"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-26a1f81191d97ba6", "name": "Network/subprocess call without timeout or try/except \u2014 tasks/shock-analysis-demand/environment/skills/xlsx/recalc.py:94", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 tasks/shock-analysis-demand/environment/skills/xlsx/recalc.py:94"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f348e3070ee81150", "name": "Commented-code block (5 lines) in tasks/organize-messy-files/environment/skills/pdf/scripts/extract_form_field_info.py:6", "shortDescription": {"text": "Commented-code block (5 lines) in tasks/organize-messy-files/environment/skills/pdf/scripts/extract_form_field_info.py:60"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-99e9c7f045997f14", "name": "Commented-code block (6 lines) in tasks/organize-messy-files/environment/skills/pptx/scripts/thumbnail.py:32", "shortDescription": {"text": "Commented-code block (6 lines) in tasks/organize-messy-files/environment/skills/pptx/scripts/thumbnail.py:32"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-04630ad6535d3a14", "name": "Network/subprocess call without timeout or try/except \u2014 tasks/organize-messy-files/environment/skills/pptx/scripts/thumb", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 tasks/organize-messy-files/environment/skills/pptx/scripts/thumbnail.py:211"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4057e3cf7574e24e", "name": "Network/subprocess call without timeout or try/except \u2014 tasks/organize-messy-files/environment/skills/pptx/ooxml/scripts", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 tasks/organize-messy-files/environment/skills/pptx/ooxml/scripts/validation/redlining.py:139"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fa1b1aabd3ebb8c5", "name": "Legacy-named symbol `xml_copy` in tasks/organize-messy-files/environment/skills/pptx/ooxml/scripts/validation/base.py:69", "shortDescription": {"text": "Legacy-named symbol `xml_copy` in tasks/organize-messy-files/environment/skills/pptx/ooxml/scripts/validation/base.py:696"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f1bf7f04cb865651", "name": "Network/subprocess call without timeout or try/except \u2014 tasks/organize-messy-files/environment/skills/docx/ooxml/scripts", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 tasks/organize-messy-files/environment/skills/docx/ooxml/scripts/validation/redlining.py:139"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-06d3cdaae183ee44", "name": "Legacy-named symbol `xml_copy` in tasks/organize-messy-files/environment/skills/docx/ooxml/scripts/validation/base.py:69", "shortDescription": {"text": "Legacy-named symbol `xml_copy` in tasks/organize-messy-files/environment/skills/docx/ooxml/scripts/validation/base.py:696"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-238c82f1d28d6a2e", "name": "Commented-code block (7 lines) in tasks/azure-bgp-oscillation-route-leak/environment/generate_data.py:11", "shortDescription": {"text": "Commented-code block (7 lines) in tasks/azure-bgp-oscillation-route-leak/environment/generate_data.py:11"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-6ed80810064cd232", "name": "Commented-code block (5 lines) in tasks/civ6-adjacency-optimizer/tests/tools/civ6map_to_scenario.py:176", "shortDescription": {"text": "Commented-code block (5 lines) in tasks/civ6-adjacency-optimizer/tests/tools/civ6map_to_scenario.py:176"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-dccd9be58674710a", "name": "Commented-code block (5 lines) in tasks/citation-check/tests/test_outputs.py:15", "shortDescription": {"text": "Commented-code block (5 lines) in tasks/citation-check/tests/test_outputs.py:15"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-9606e7ad020ac9f7", "name": "Commented-code block (5 lines) in tasks/invoice-fraud-detection/environment/skills/pdf/scripts/extract_form_field_info.p", "shortDescription": {"text": "Commented-code block (5 lines) in tasks/invoice-fraud-detection/environment/skills/pdf/scripts/extract_form_field_info.py:60"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d9828ba131e65533", "name": "Network/subprocess call without timeout or try/except \u2014 tasks/invoice-fraud-detection/environment/skills/xlsx/recalc.py:", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 tasks/invoice-fraud-detection/environment/skills/xlsx/recalc.py:94"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2d476587c6976c6e", "name": "Legacy-named symbol `tuning_backup` in tasks/adaptive-cruise-control/tests/test_outputs.py:329", "shortDescription": {"text": "Legacy-named symbol `tuning_backup` in tasks/adaptive-cruise-control/tests/test_outputs.py:329"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-04956c49d3263646", "name": "Network/subprocess call without timeout or try/except \u2014 tasks/powerlifting-coef-calc/environment/skills/xlsx/recalc.py:9", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 tasks/powerlifting-coef-calc/environment/skills/xlsx/recalc.py:94"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1171307c74e9d772", "name": "Network/subprocess call without timeout or try/except \u2014 tasks/weighted-gdp-calc/environment/skills/xlsx/recalc.py:94", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 tasks/weighted-gdp-calc/environment/skills/xlsx/recalc.py:94"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1ab7c793e4421d70", "name": "Commented-code block (5 lines) in tasks/radar-vital-signs/_generate_data.py:50", "shortDescription": {"text": "Commented-code block (5 lines) in tasks/radar-vital-signs/_generate_data.py:50"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-49c98f7cedd9c977", "name": "Near-duplicate function bodies in 4 places", "shortDescription": {"text": "Near-duplicate function bodies in 4 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nexperiments/scripts/run_opencode_daytona_ablation.py:tasks_dir, experiments/scripts/open_model_scripts/run_opencode_bench_docker_open_models.py:source_tasks_dir, experiments/scripts/open_model_scripts/run_opencode_bench_daytona_open_models.py:source_tasks_dir, experiments/scripts/gcp_setup/run_opencode_gcp_docker_ablation.py:source_tasks_dir\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2c04133e54348533", "name": "Near-duplicate function bodies in 2 places", "shortDescription": {"text": "Near-duplicate function bodies in 2 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nexperiments/scripts/run_opencode_daytona_ablation.py:parse_env_file, experiments/scripts/run_benchflow_integration.py:parse_env_file\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-02525d39071dd2c7", "name": "Near-duplicate function bodies in 5 places", "shortDescription": {"text": "Near-duplicate function bodies in 5 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nexperiments/scripts/run_opencode_daytona_ablation.py:latest_result_json, experiments/scripts/run_benchflow_integration.py:latest_result_json, experiments/scripts/open_model_scripts/run_opencode_bench_docker_open_models.py:latest_result_json, experiments/scripts/open_model_scripts/run_opencode_bench_daytona_open_models.py:latest_result_json\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b695a5b67fb4fb96", "name": "Unused endpoint: GET /api/products", "shortDescription": {"text": "Unused endpoint: GET /api/products"}, "fullDescription": {"text": "`tasks/fix-visual-stability/environment/api-server/server.js` declares `GET /api/products` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d1a7636dc1745278", "name": "Unused endpoint: GET /api/banner", "shortDescription": {"text": "Unused endpoint: GET /api/banner"}, "fullDescription": {"text": "`tasks/fix-visual-stability/environment/api-server/server.js` declares `GET /api/banner` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-df8ff9da7425d546", "name": "Unused endpoint: GET /api/late-banner", "shortDescription": {"text": "Unused endpoint: GET /api/late-banner"}, "fullDescription": {"text": "`tasks/fix-visual-stability/environment/api-server/server.js` declares `GET /api/late-banner` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2621fa5025e6e7e8", "name": "Unused endpoint: GET /api/side-pane", "shortDescription": {"text": "Unused endpoint: GET /api/side-pane"}, "fullDescription": {"text": "`tasks/fix-visual-stability/environment/api-server/server.js` declares `GET /api/side-pane` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cf35a1f528952045", "name": "Unused endpoint: GET /api/results-bar", "shortDescription": {"text": "Unused endpoint: GET /api/results-bar"}, "fullDescription": {"text": "`tasks/fix-visual-stability/environment/api-server/server.js` declares `GET /api/results-bar` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-30ebd8b02a460b20", "name": "Unused endpoint: GET /api/metrics", "shortDescription": {"text": "Unused endpoint: GET /api/metrics"}, "fullDescription": {"text": "`experiments/metrics-dashboard/server/index.ts` declares `GET /api/metrics` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-77a21e69b379a5bf", "name": "Unused endpoint: GET /{*path}", "shortDescription": {"text": "Unused endpoint: GET /{*path}"}, "fullDescription": {"text": "`experiments/metrics-dashboard/server/index.ts` declares `GET /{*path}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-da52492b1893958b", "name": "Unused endpoint: GET /api/user", "shortDescription": {"text": "Unused endpoint: GET /api/user"}, "fullDescription": {"text": "`tasks/react-performance-debugging/environment/api-simulator/src/server.ts` declares `GET /api/user` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8cbf6af853ff55b8", "name": "Unused endpoint: GET /api/reviews", "shortDescription": {"text": "Unused endpoint: GET /api/reviews"}, "fullDescription": {"text": "`tasks/react-performance-debugging/environment/api-simulator/src/server.ts` declares `GET /api/reviews` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7aa4b2518cbbbfa2", "name": "Unused endpoint: GET /api/config", "shortDescription": {"text": "Unused endpoint: GET /api/config"}, "fullDescription": {"text": "`tasks/react-performance-debugging/environment/api-simulator/src/server.ts` declares `GET /api/config` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9c180560f2059bc1", "name": "Unused endpoint: GET /api/profile/:userId", "shortDescription": {"text": "Unused endpoint: GET /api/profile/:userId"}, "fullDescription": {"text": "`tasks/react-performance-debugging/environment/api-simulator/src/server.ts` declares `GET /api/profile/:userId` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4baf56668e48d3b2", "name": "Unused endpoint: POST /api/analytics", "shortDescription": {"text": "Unused endpoint: POST /api/analytics"}, "fullDescription": {"text": "`tasks/react-performance-debugging/environment/api-simulator/src/server.ts` declares `POST /api/analytics` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/24531"}, "properties": {"repository": "benchflow-ai/skillsbench", "repoUrl": "https://github.com/benchflow-ai/skillsbench", "branch": "main"}, "results": [{"ruleId": "scanner-a9a85524a77be8e8", "level": "note", "message": {"text": "Possibly dead Python function: hardlink_or_copy"}, "properties": {"repobilityId": "c22d71e819e42c07", "scanner": "scanner-primary", "fingerprint": "a9a85524a77be8e8", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "experiments/scripts/run_benchflow_integration.py:228"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d2b1e98936dd7cee", "level": "note", "message": {"text": "Possibly dead Python function: run_target_process"}, "properties": {"repobilityId": "332eaabbfc5cc3c2", "scanner": "scanner-primary", "fingerprint": "d2b1e98936dd7cee", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "experiments/scripts/open_model_scripts/smoke_open_model_access.py:551"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6889d4c753325a23", "level": "note", "message": {"text": "Possibly dead Python function: hardlink_or_copy"}, "properties": {"repobilityId": "c22d71e819e42c07", "scanner": "scanner-primary", "fingerprint": "6889d4c753325a23", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "experiments/scripts/open_model_scripts/run_opencode_bench_docker_open_models.py:450"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-071ae2482f8ae3b7", "level": "note", "message": {"text": "Possibly dead Python function: probe_ubuntu_apt_mirror"}, "properties": {"repobilityId": "01b991d8a546420a", "scanner": "scanner-primary", "fingerprint": "071ae2482f8ae3b7", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "experiments/scripts/open_model_scripts/run_opencode_bench_docker_open_models.py:580"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0b49020cb143b875", "level": "note", "message": {"text": "Possibly dead Python function: hardlink_or_copy"}, "properties": {"repobilityId": "c22d71e819e42c07", "scanner": "scanner-primary", "fingerprint": "0b49020cb143b875", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "experiments/scripts/open_model_scripts/run_opencode_bench_daytona_open_models.py:468"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cf6b79b863bc0c24", "level": "note", "message": {"text": "Possibly dead Python function: probe_ubuntu_apt_mirror"}, "properties": {"repobilityId": "01b991d8a546420a", "scanner": "scanner-primary", "fingerprint": "cf6b79b863bc0c24", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "experiments/scripts/open_model_scripts/run_opencode_bench_daytona_open_models.py:598"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1f5b0833353a6e59", "level": "note", "message": {"text": "Possibly dead Python function: hardlink_or_copy"}, "properties": {"repobilityId": "c22d71e819e42c07", "scanner": "scanner-primary", "fingerprint": "1f5b0833353a6e59", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "experiments/scripts/gcp_setup/run_opencode_gcp_docker_ablation.py:253"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-da1e710db203820b", "level": "note", "message": {"text": "Possibly dead Python function: aspect_score"}, "properties": {"repobilityId": "68ba603e5a03e179", "scanner": "scanner-primary", "fingerprint": "da1e710db203820b", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks-extra/nda-playbook-review/experiments/openrouter_direct_json.py:582"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-00b38762821fea89", "level": "note", "message": {"text": "Possibly dead Python function: failure_count"}, "properties": {"repobilityId": "0389b6b398d638ef", "scanner": "scanner-primary", "fingerprint": "00b38762821fea89", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks-extra/nda-playbook-review/experiments/openrouter_direct_json.py:591"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-baaa9cb2693c86eb", "level": "note", "message": {"text": "Possibly dead Python function: search_by_smiles"}, "properties": {"repobilityId": "b347d46573f519d5", "scanner": "scanner-primary", "fingerprint": "baaa9cb2693c86eb", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks-extra/find-topk-similiar-chemicals/environment/skills/pubchem-database/scripts/compound_search.py:39"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-224fdfce16d0d241", "level": "note", "message": {"text": "Possibly dead Python function: substructure_search"}, "properties": {"repobilityId": "b0f8786f72f242e6", "scanner": "scanner-primary", "fingerprint": "224fdfce16d0d241", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks-extra/find-topk-similiar-chemicals/environment/skills/pubchem-database/scripts/compound_search.py:140"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-53f26922224524f5", "level": "note", "message": {"text": "Possibly dead Python function: download_structure"}, "properties": {"repobilityId": "367329a74e650493", "scanner": "scanner-primary", "fingerprint": "53f26922224524f5", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks-extra/find-topk-similiar-chemicals/environment/skills/pubchem-database/scripts/compound_search.py:213"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0c3d769bada208bc", "level": "note", "message": {"text": "Possibly dead Python function: sort_key"}, "properties": {"repobilityId": "ac2a4181eae38738", "scanner": "scanner-primary", "fingerprint": "0c3d769bada208bc", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks-extra/find-topk-similiar-chemicals/environment/skills/pdf/scripts/extract_form_field_info.py:126"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-362f9b36d2b10906", "level": "note", "message": {"text": "Possibly dead Python function: patched_get_inherited"}, "properties": {"repobilityId": "8c99afa3f6ae758e", "scanner": "scanner-primary", "fingerprint": "362f9b36d2b10906", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks-extra/find-topk-similiar-chemicals/environment/skills/pdf/scripts/fill_fillable_fields.py:96"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-601e6cb1059dc3bb", "level": "note", "message": {"text": "Possibly dead Python function: filter_and_prepare_data"}, "properties": {"repobilityId": "94a6b9dae549660d", "scanner": "scanner-primary", "fingerprint": "601e6cb1059dc3bb", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks-extra/taxonomy-tree-merge/environment/skills/hierarchical-taxonomy-clustering/scripts/step1_preprocessing_and_merge.py:174"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3c07a54414693503", "level": "note", "message": {"text": "Possibly dead Python function: split_into_levels"}, "properties": {"repobilityId": "00de4f30b8baf34c", "scanner": "scanner-primary", "fingerprint": "3c07a54414693503", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks-extra/taxonomy-tree-merge/environment/skills/hierarchical-taxonomy-clustering/scripts/step1_preprocessing_and_merge.py:179"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-59929c415a1320f0", "level": "note", "message": {"text": "Possibly dead Python function: forward"}, "properties": {"repobilityId": "ea414cce7f8e5874", "scanner": "scanner-primary", "fingerprint": "59929c415a1320f0", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks-extra/diff-transformer_impl/environment/src/model.py:269"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-97de63a9b3e0c9ab", "level": "note", "message": {"text": "Possibly dead Python function: load_fineweb"}, "properties": {"repobilityId": "24524ecc71d6a68a", "scanner": "scanner-primary", "fingerprint": "97de63a9b3e0c9ab", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks-extra/diff-transformer_impl/environment/src/data.py:93"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4e18227d7c515306", "level": "note", "message": {"text": "Possibly dead Python function: download_fineweb"}, "properties": {"repobilityId": "e8044e407a345759", "scanner": "scanner-primary", "fingerprint": "4e18227d7c515306", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks-extra/diff-transformer_impl/environment/src/data.py:100"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-224479c35e919b95", "level": "note", "message": {"text": "Possibly dead Python function: load_shakespeare"}, "properties": {"repobilityId": "b717ef6cead80505", "scanner": "scanner-primary", "fingerprint": "224479c35e919b95", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks-extra/diff-transformer_impl/environment/src/data.py:135"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-74fbb136b7edd5b0", "level": "note", "message": {"text": "Possibly dead Python function: forward"}, "properties": {"repobilityId": "ea414cce7f8e5874", "scanner": "scanner-primary", "fingerprint": "74fbb136b7edd5b0", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks-extra/mhc-layer-impl/environment/src/model.py:223"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-be2cf82c4be90408", "level": "note", "message": {"text": "Possibly dead Python function: load_fineweb"}, "properties": {"repobilityId": "24524ecc71d6a68a", "scanner": "scanner-primary", "fingerprint": "be2cf82c4be90408", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks-extra/mhc-layer-impl/environment/src/data.py:101"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-39ed70cae4cf6cbb", "level": "note", "message": {"text": "Possibly dead Python function: download_fineweb"}, "properties": {"repobilityId": "e8044e407a345759", "scanner": "scanner-primary", "fingerprint": "39ed70cae4cf6cbb", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks-extra/mhc-layer-impl/environment/src/data.py:108"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-428a66974f36afb6", "level": "note", "message": {"text": "Possibly dead Python function: load_shakespeare"}, "properties": {"repobilityId": "b717ef6cead80505", "scanner": "scanner-primary", "fingerprint": "428a66974f36afb6", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks-extra/mhc-layer-impl/environment/src/data.py:141"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7f108a3a26ee53ff", "level": "note", "message": {"text": "Possibly dead Python function: pp_formatter"}, "properties": {"repobilityId": "e333873283a333f9", "scanner": "scanner-primary", "fingerprint": "7f108a3a26ee53ff", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/paper-figures/scripts/utils.py:182"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ecf09f78be2bf002", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 experiments/metrics-dashboard/scripts/generate-metrics.ts:177"}, "properties": {"repobilityId": "535d9c5d6d95dcbd", "scanner": "scanner-primary", "fingerprint": "ecf09f78be2bf002", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-1587a30ef3c5fad5", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 experiments/metrics-dashboard/src/App.tsx:703"}, "properties": {"repobilityId": "9f0dff7de609e317", "scanner": "scanner-primary", "fingerprint": "1587a30ef3c5fad5", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-6488b77f8d9a8f8c", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 experiments/metrics-dashboard/src/components/TrialsDataTable.tsx:112"}, "properties": {"repobilityId": "21fefd439255c41b", "scanner": "scanner-primary", "fingerprint": "6488b77f8d9a8f8c", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-549ebe29edf57534", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 experiments/metrics-dashboard/src/components/JobTabbedPanel.tsx:385"}, "properties": {"repobilityId": "30b34c95f99500f9", "scanner": "scanner-primary", "fingerprint": "549ebe29edf57534", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-c654edd1511984e3", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 experiments/metrics-dashboard/src/components/SystemInfoPanel.tsx:387"}, "properties": {"repobilityId": "9084dba5c3faee58", "scanner": "scanner-primary", "fingerprint": "c654edd1511984e3", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-bed3a1e279dd0c91", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 experiments/metrics-dashboard/src/components/TracebackViewer.tsx:40"}, "properties": {"repobilityId": "3beba61133121943", "scanner": "scanner-primary", "fingerprint": "bed3a1e279dd0c91", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-0720057a2c411d26", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 experiments/metrics-dashboard/src/components/FileBrowser.tsx:184"}, "properties": {"repobilityId": "cae16884c72a79df", "scanner": "scanner-primary", "fingerprint": "0720057a2c411d26", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-a08e9490b815b5f9", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 experiments/metrics-dashboard/src/components/JobActivityPanel.tsx:129"}, "properties": {"repobilityId": "6c0b5804c335bf01", "scanner": "scanner-primary", "fingerprint": "a08e9490b815b5f9", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-f4d2713d685ae88b", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 experiments/metrics-dashboard/src/components/HealthPanel.tsx:277"}, "properties": {"repobilityId": "a9e00742d6fc0067", "scanner": "scanner-primary", "fingerprint": "f4d2713d685ae88b", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-f902bd14e5c5b79b", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 experiments/metrics-dashboard/src/components/HarborJobsPanel.tsx:132"}, "properties": {"repobilityId": "d8274064a4c60d49", "scanner": "scanner-primary", "fingerprint": "f902bd14e5c5b79b", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-a56efeec0d03e0ca", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 experiments/metrics-dashboard/src/components/TrialDetailPanel.tsx:63"}, "properties": {"repobilityId": "81a1fd984afdffc0", "scanner": "scanner-primary", "fingerprint": "a56efeec0d03e0ca", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-4a6abc28c8380213", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 experiments/metrics-dashboard/src/components/TrialFilesPanel.tsx:160"}, "properties": {"repobilityId": "7e8ea6ed5e9e0011", "scanner": "scanner-primary", "fingerprint": "4a6abc28c8380213", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-adb716f7fb731892", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 experiments/metrics-dashboard/src/components/ErrorFileTree.tsx:94"}, "properties": {"repobilityId": "54adab6a82c1c841", "scanner": "scanner-primary", "fingerprint": "adb716f7fb731892", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-6773b6147ec1aadd", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 experiments/metrics-dashboard/server/index.ts:159"}, "properties": {"repobilityId": "a7ae1ce26fef0522", "scanner": "scanner-primary", "fingerprint": "6773b6147ec1aadd", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-893ab9219e3846ff", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 website/scripts/generate-verifiers-registry.ts:32"}, "properties": {"repobilityId": "0a2369b4c794bba8", "scanner": "scanner-primary", "fingerprint": "893ab9219e3846ff", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-eda6c1e3b8c1634a", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 website/scripts/generate-results-registry.ts:47"}, "properties": {"repobilityId": "6f5fe81f7502f3dd", "scanner": "scanner-primary", "fingerprint": "eda6c1e3b8c1634a", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-d0f44e231a067200", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 website/scripts/generate-skills-registry.ts:101"}, "properties": {"repobilityId": "2ca5dfb96e9c5ed3", "scanner": "scanner-primary", "fingerprint": "d0f44e231a067200", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-c3b393241dcaf042", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 website/scripts/resolve-data-paths.ts:18"}, "properties": {"repobilityId": "9fb509fd5e32f977", "scanner": "scanner-primary", "fingerprint": "c3b393241dcaf042", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-15be7e43be6491ad", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 website/scripts/generate-tasks-registry.ts:172"}, "properties": {"repobilityId": "fafccdb91cbef288", "scanner": "scanner-primary", "fingerprint": "15be7e43be6491ad", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-edcd9964b42b5352", "level": "warning", "message": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 website/src/app/(main)/tasks/[taskName]/components/task-verifier.tsx:61"}, "properties": {"repobilityId": "b6cd64bd131b7d36", "scanner": "scanner-primary", "fingerprint": "edcd9964b42b5352", "layer": "frontend", "severity": "medium", "confidence": 1.0, "tags": ["frontend-quality", "fq.dangerous-html"]}}, {"ruleId": "scanner-f1b6fb372082296c", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 website/src/components/ContributorCard.tsx:71"}, "properties": {"repobilityId": "10233e6073fa9031", "scanner": "scanner-primary", "fingerprint": "f1b6fb372082296c", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-fc66902b1b0ffddb", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 website/src/components/SkillModal.tsx:128"}, "properties": {"repobilityId": "29a00b81d25f6fe4", "scanner": "scanner-primary", "fingerprint": "fc66902b1b0ffddb", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-967f16fe4354ce9f", "level": "warning", "message": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 website/src/components/BrandIcon.tsx:34"}, "properties": {"repobilityId": "d268df8e10ee598d", "scanner": "scanner-primary", "fingerprint": "967f16fe4354ce9f", "layer": "frontend", "severity": "medium", "confidence": 1.0, "tags": ["frontend-quality", "fq.dangerous-html"]}}, {"ruleId": "scanner-03f3298b266b286f", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 website/src/components/BenchmarkDashboard.tsx:272"}, "properties": {"repobilityId": "c1d7c7c1ff98a9f2", "scanner": "scanner-primary", "fingerprint": "03f3298b266b286f", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-55537f61006ccc24", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 website/src/components/FilterSelect.tsx:64"}, "properties": {"repobilityId": "bac2462cef41f8f5", "scanner": "scanner-primary", "fingerprint": "55537f61006ccc24", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-cd634d572e8033dd", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 tasks-extra/scheduling-email-assistant/tests/verifier-skills/gmail-skill/scripts/gmail-read.js:113"}, "properties": {"repobilityId": "386d1e347b1e81c4", "scanner": "scanner-primary", "fingerprint": "cd634d572e8033dd", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-fbbd746cbc56213e", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 tasks-extra/scheduling-email-assistant/environment/skills/gmail-skill/scripts/gmail-filters.js:166"}, "properties": {"repobilityId": "a6f9001fffd59c78", "scanner": "scanner-primary", "fingerprint": "fbbd746cbc56213e", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-3fdcbd2e1e176a76", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 tasks-extra/scheduling-email-assistant/environment/skills/gmail-skill/scripts/gmail-labels.js:146"}, "properties": {"repobilityId": "ef6d9eae21bebb15", "scanner": "scanner-primary", "fingerprint": "3fdcbd2e1e176a76", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-7a67730d109927b6", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 tasks-extra/scheduling-email-assistant/environment/skills/gmail-skill/scripts/gmail-read.js:113"}, "properties": {"repobilityId": "d6bdf0a1df12176c", "scanner": "scanner-primary", "fingerprint": "7a67730d109927b6", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-d794ee0dcf00cf22", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 tasks-extra/scheduling-email-assistant/environment/skills/gmail-skill/scripts/gmail-forward.js:65"}, "properties": {"repobilityId": "740fc2919cbaab2a", "scanner": "scanner-primary", "fingerprint": "d794ee0dcf00cf22", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-1556c159409a7e1a", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 tasks-extra/scheduling-email-assistant/environment/skills/gmail-skill/scripts/migrate-tokens.js:14"}, "properties": {"repobilityId": "05925e1dda28987e", "scanner": "scanner-primary", "fingerprint": "1556c159409a7e1a", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-0dba73d57be98857", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 tasks-extra/scheduling-email-assistant/environment/skills/gmail-skill/scripts/gmail-drafts.js:221"}, "properties": {"repobilityId": "3f74c478c3eacf84", "scanner": "scanner-primary", "fingerprint": "0dba73d57be98857", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-09c360244a42676d", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 tasks-extra/scheduling-email-assistant/environment/skills/gmail-skill/scripts/gmail-search.js:83"}, "properties": {"repobilityId": "bca7177d8a730cbf", "scanner": "scanner-primary", "fingerprint": "09c360244a42676d", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-0a0cf92c46e23d7e", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 tasks-extra/scheduling-email-assistant/environment/skills/gmail-skill/scripts/gmail-send.js:87"}, "properties": {"repobilityId": "cb2b42709a146b7c", "scanner": "scanner-primary", "fingerprint": "0a0cf92c46e23d7e", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-25919d90dedcafc9", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 tasks-extra/scheduling-email-assistant/environment/skills/gmail-skill/scripts/manage-accounts.js:12"}, "properties": {"repobilityId": "f649caff602f0c81", "scanner": "scanner-primary", "fingerprint": "25919d90dedcafc9", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-0bf2aeab62907fce", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 tasks-extra/scheduling-email-assistant/environment/skills/gmail-skill/scripts/gmail-every-paywall-cleanup.js:167"}, "properties": {"repobilityId": "79a3c9af7535bcb1", "scanner": "scanner-primary", "fingerprint": "0bf2aeab62907fce", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-c175bb1dcd4d41b5", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 tasks-extra/scheduling-email-assistant/environment/skills/gmail-skill/scripts/auth/setup-oauth.js:38"}, "properties": {"repobilityId": "7d486663c61a0a4c", "scanner": "scanner-primary", "fingerprint": "c175bb1dcd4d41b5", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-7e52828504ba909d", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 tasks-extra/scheduling-email-assistant/environment/skills/google-calendar-skill/scripts/calendar-events-create.js:147"}, "properties": {"repobilityId": "57322c61a37d5fef", "scanner": "scanner-primary", "fingerprint": "7e52828504ba909d", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-6017734a89f82e1b", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 tasks-extra/scheduling-email-assistant/environment/skills/google-calendar-skill/scripts/calendar-events-delete.js:62"}, "properties": {"repobilityId": "5aed0a2c19c3d760", "scanner": "scanner-primary", "fingerprint": "6017734a89f82e1b", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-3c97fe3e41711005", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 tasks-extra/scheduling-email-assistant/environment/skills/google-calendar-skill/scripts/migrate-tokens.js:14"}, "properties": {"repobilityId": "d4d0fcf747ebbb6c", "scanner": "scanner-primary", "fingerprint": "3c97fe3e41711005", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-4ad5ac4ed6c567b5", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 tasks-extra/scheduling-email-assistant/environment/skills/google-calendar-skill/scripts/calendar-events-respond.js:73"}, "properties": {"repobilityId": "45015b21df1e1a29", "scanner": "scanner-primary", "fingerprint": "4ad5ac4ed6c567b5", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-0e0dd9c2644d51cc", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 tasks-extra/scheduling-email-assistant/environment/skills/google-calendar-skill/scripts/calendar-events-list.js:125"}, "properties": {"repobilityId": "158e57ee4073c295", "scanner": "scanner-primary", "fingerprint": "0e0dd9c2644d51cc", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-fd10ce36c880b40d", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 tasks-extra/scheduling-email-assistant/environment/skills/google-calendar-skill/scripts/calendar-events-get.js:112"}, "properties": {"repobilityId": "4f0c6ebdbdb813e8", "scanner": "scanner-primary", "fingerprint": "fd10ce36c880b40d", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-774ee915b977750b", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 tasks-extra/scheduling-email-assistant/environment/skills/google-calendar-skill/scripts/calendar-events-quick.js:54"}, "properties": {"repobilityId": "5f7e2e02114b29fd", "scanner": "scanner-primary", "fingerprint": "774ee915b977750b", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-8ca55b3fbe940ea8", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 tasks-extra/scheduling-email-assistant/environment/skills/google-calendar-skill/scripts/manage-accounts.js:12"}, "properties": {"repobilityId": "a1ec609e4410dea3", "scanner": "scanner-primary", "fingerprint": "8ca55b3fbe940ea8", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-c8435a59d925e02f", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 tasks-extra/scheduling-email-assistant/environment/skills/google-calendar-skill/scripts/calendar-events-update.js:137"}, "properties": {"repobilityId": "6db5528fae603f1b", "scanner": "scanner-primary", "fingerprint": "c8435a59d925e02f", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-88fdc8b8ce46b01c", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 tasks-extra/scheduling-email-assistant/environment/skills/google-calendar-skill/scripts/calendar-list.js:51"}, "properties": {"repobilityId": "1522770f7e4b4948", "scanner": "scanner-primary", "fingerprint": "88fdc8b8ce46b01c", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-bde4707c92494184", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 tasks-extra/scheduling-email-assistant/environment/skills/google-calendar-skill/scripts/auth/setup-oauth.js:35"}, "properties": {"repobilityId": "a0bf8e5a2f3e8055", "scanner": "scanner-primary", "fingerprint": "bde4707c92494184", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-81404f4d312db53d", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 tasks-extra/scheduling-email-assistant/environment/skills/google-calendar-skill/scripts/auth/auth-utils.js:10"}, "properties": {"repobilityId": "1b397c2663e9b4d2", "scanner": "scanner-primary", "fingerprint": "81404f4d312db53d", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-4df39673e67e2465", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 tasks/react-performance-debugging/environment/api-simulator/src/server.ts:67"}, "properties": {"repobilityId": "e3fd2c48e180c43d", "scanner": "scanner-primary", "fingerprint": "4df39673e67e2465", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-93052674bac73596", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 tasks/react-performance-debugging/environment/skills/browser-testing/measure-cls.ts:69"}, "properties": {"repobilityId": "afada8a889c8bac8", "scanner": "scanner-primary", "fingerprint": "93052674bac73596", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-3ef40f3e3919e890", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 tasks/react-performance-debugging/environment/skills/browser-testing/measure.ts:86"}, "properties": {"repobilityId": "7b3de98e4bd11d2a", "scanner": "scanner-primary", "fingerprint": "3ef40f3e3919e890", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-c70454d7bcbc7263", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 tasks/fix-visual-stability/environment/skills/browser-testing/detect-flicker.ts:104"}, "properties": {"repobilityId": "0e1e5178869ba33b", "scanner": "scanner-primary", "fingerprint": "c70454d7bcbc7263", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-0c91e50370bacb1e", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 tasks/fix-visual-stability/environment/skills/browser-testing/measure-cls.ts:69"}, "properties": {"repobilityId": "bcdd194d31c827c9", "scanner": "scanner-primary", "fingerprint": "0c91e50370bacb1e", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-140bd1410142d573", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 tasks/fix-visual-stability/environment/skills/browser-testing/measure.ts:86"}, "properties": {"repobilityId": "9ee46455aa34656f", "scanner": "scanner-primary", "fingerprint": "140bd1410142d573", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-e246296cb19bb9d4", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 tasks/fix-visual-stability/environment/api-server/server.js:58"}, "properties": {"repobilityId": "69e6d18eb5ce0189", "scanner": "scanner-primary", "fingerprint": "e246296cb19bb9d4", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-fca0301443f8754d", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 tasks/exceltable-in-ppt/environment/skills/pptx/scripts/html2pptx.js:921"}, "properties": {"repobilityId": "f9975788cbd968c4", "scanner": "scanner-primary", "fingerprint": "fca0301443f8754d", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-d82fad9af2737682", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 tasks/pptx-reference-formatting/environment/skills/pptx/scripts/html2pptx.js:921"}, "properties": {"repobilityId": "b83ce867c3b2c22e", "scanner": "scanner-primary", "fingerprint": "d82fad9af2737682", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-e8cf721a777110f5", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 tasks/organize-messy-files/environment/skills/pptx/scripts/html2pptx.js:921"}, "properties": {"repobilityId": "7c3b1f074ffac334", "scanner": "scanner-primary", "fingerprint": "e8cf721a777110f5", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-abb38c47ca59018c", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 tasks/data-to-d3/environment/skills/d3-visualization/scripts/check_tooltip.js:19"}, "properties": {"repobilityId": "c04096a505d0ef7c", "scanner": "scanner-primary", "fingerprint": "abb38c47ca59018c", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-0c53a46194eea78d", "level": "warning", "message": {"text": "Privileged port 10 in use"}, "properties": {"repobilityId": "735372d6b5594915", "scanner": "scanner-primary", "fingerprint": "0c53a46194eea78d", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks-extra/scheduling-email-assistant/solution/solve.sh"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d758c80d40890961", "level": "warning", "message": {"text": "Privileged port 14 in use"}, "properties": {"repobilityId": "2dbd4b719a1412ff", "scanner": "scanner-primary", "fingerprint": "d758c80d40890961", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks-extra/scheduling-email-assistant/solution/solve.sh"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-02a0839dfc3b091b", "level": "warning", "message": {"text": "Privileged port 30 in use"}, "properties": {"repobilityId": "54f172e7d16fc662", "scanner": "scanner-primary", "fingerprint": "02a0839dfc3b091b", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks-extra/scheduling-email-assistant/solution/solve.sh"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6544ae9b33e434d9", "level": "warning", "message": {"text": "Privileged port 16 in use"}, "properties": {"repobilityId": "d31009168c502ace", "scanner": "scanner-primary", "fingerprint": "6544ae9b33e434d9", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks-extra/scheduling-email-assistant/solution/solve.sh"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-67d8bd20d69fe2a7", "level": "warning", "message": {"text": "Privileged port 18 in use"}, "properties": {"repobilityId": "2d7b5e7d9c158e43", "scanner": "scanner-primary", "fingerprint": "67d8bd20d69fe2a7", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks-extra/scheduling-email-assistant/solution/solve.sh"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-319e648b723c472a", "level": "warning", "message": {"text": "Privileged port 17 in use"}, "properties": {"repobilityId": "0bf38fb8f89ec589", "scanner": "scanner-primary", "fingerprint": "319e648b723c472a", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks-extra/scheduling-email-assistant/solution/solve.sh"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-95ae41161b9a3937", "level": "warning", "message": {"text": "Privileged port 23 in use"}, "properties": {"repobilityId": "a1230e3dfc4becfa", "scanner": "scanner-primary", "fingerprint": "95ae41161b9a3937", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks-extra/scheduling-email-assistant/solution/solve.sh"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0d490041469767c5", "level": "warning", "message": {"text": "Privileged port 59 in use"}, "properties": {"repobilityId": "6c14a9dab4958e92", "scanner": "scanner-primary", "fingerprint": "0d490041469767c5", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks-extra/scheduling-email-assistant/solution/solve.sh"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4835ac2a0125a0f5", "level": "warning", "message": {"text": "Privileged port 99 in use"}, "properties": {"repobilityId": "78349e9298b9fc49", "scanner": "scanner-primary", "fingerprint": "4835ac2a0125a0f5", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/3d-scan-calc/solution/solve.sh"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a9e35afa8ee76997", "level": "warning", "message": {"text": "Privileged port 11 in use"}, "properties": {"repobilityId": "5b3038c67fabb4c8", "scanner": "scanner-primary", "fingerprint": "a9e35afa8ee76997", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/3d-scan-calc/solution/solve.sh"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a07b93f2db955a2d", "level": "warning", "message": {"text": "Privileged port 38 in use"}, "properties": {"repobilityId": "b7214bb254c5881d", "scanner": "scanner-primary", "fingerprint": "a07b93f2db955a2d", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/azure-bgp-oscillation-route-leak/solution/solve.sh"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e0acf8d6e980cf02", "level": "warning", "message": {"text": "Privileged port 12 in use"}, "properties": {"repobilityId": "65e7eefa33f2def4", "scanner": "scanner-primary", "fingerprint": "e0acf8d6e980cf02", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/drone-planning-control/solution/solve.sh"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e7821efe1c1ae896", "level": "warning", "message": {"text": "Privileged port 15 in use"}, "properties": {"repobilityId": "3340f9a170f285cd", "scanner": "scanner-primary", "fingerprint": "e7821efe1c1ae896", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/drone-planning-control/solution/solve.sh"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-60b9fda2cd118984", "level": "warning", "message": {"text": "Dockerfile runs as root: experiments/sanity-tasks/hello-world/environment/Dockerfile"}, "properties": {"repobilityId": "31da133075dac9dd", "scanner": "scanner-primary", "fingerprint": "60b9fda2cd118984", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-4b2a998b1e95d5b4", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "properties": {"repobilityId": "580c4d0e892672ba", "scanner": "scanner-primary", "fingerprint": "4b2a998b1e95d5b4", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "experiments/sanity-tasks/hello-world/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-94f9567b056fe923", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks-extra/nda-playbook-review/environment/Dockerfile"}, "properties": {"repobilityId": "aab1f7684d1a2426", "scanner": "scanner-primary", "fingerprint": "94f9567b056fe923", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-3da3db2bd444dc73", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "properties": {"repobilityId": "d73537533cb09b5f", "scanner": "scanner-primary", "fingerprint": "3da3db2bd444dc73", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks-extra/nda-playbook-review/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e9423c1d33b1fb1d", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks-extra/gpu-cluster-online-scheduling/environment/Dockerfile"}, "properties": {"repobilityId": "59d4d8e9ef014727", "scanner": "scanner-primary", "fingerprint": "e9423c1d33b1fb1d", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-ddadaea1cea8454a", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "properties": {"repobilityId": "36170107704eea2a", "scanner": "scanner-primary", "fingerprint": "ddadaea1cea8454a", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks-extra/gpu-cluster-online-scheduling/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cf31741cce314208", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks-extra/pedestrian-traffic-counting/environment/Dockerfile"}, "properties": {"repobilityId": "51b9db3e51191bc9", "scanner": "scanner-primary", "fingerprint": "cf31741cce314208", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-1162cd4b125d46a9", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "properties": {"repobilityId": "36a7d4cb7c27a6b2", "scanner": "scanner-primary", "fingerprint": "1162cd4b125d46a9", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks-extra/pedestrian-traffic-counting/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f53a51687cdc1eb3", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks-extra/find-topk-similiar-chemicals/environment/Dockerfile"}, "properties": {"repobilityId": "9a095780b17c585a", "scanner": "scanner-primary", "fingerprint": "f53a51687cdc1eb3", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-d895fc6cb153daf5", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12.9-slim"}, "properties": {"repobilityId": "c3a4ef597a990610", "scanner": "scanner-primary", "fingerprint": "d895fc6cb153daf5", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks-extra/find-topk-similiar-chemicals/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3aebdfa0124a9541", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks-extra/pg-essay-to-audiobook/environment/Dockerfile"}, "properties": {"repobilityId": "fe472b1a1c6a4e7b", "scanner": "scanner-primary", "fingerprint": "3aebdfa0124a9541", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-dee623f0f691686a", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "properties": {"repobilityId": "73031a1d0506d45c", "scanner": "scanner-primary", "fingerprint": "dee623f0f691686a", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks-extra/pg-essay-to-audiobook/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-86e5adbe357575a4", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks-extra/cobol-gl-batch-reconcile/environment/Dockerfile"}, "properties": {"repobilityId": "808f0f490e107361", "scanner": "scanner-primary", "fingerprint": "86e5adbe357575a4", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-ec6715268eca69e9", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "properties": {"repobilityId": "3f9e494c61b272dd", "scanner": "scanner-primary", "fingerprint": "ec6715268eca69e9", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks-extra/cobol-gl-batch-reconcile/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ba3d3bf98c85ad6d", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks-extra/scheduling-email-assistant/environment/Dockerfile"}, "properties": {"repobilityId": "d58112df389dbdc1", "scanner": "scanner-primary", "fingerprint": "ba3d3bf98c85ad6d", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-5752367bba9df32b", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "properties": {"repobilityId": "d5454a7f2a6eb241", "scanner": "scanner-primary", "fingerprint": "5752367bba9df32b", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks-extra/scheduling-email-assistant/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-790fa7d8c9262f1e", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks-extra/taxonomy-tree-merge/environment/Dockerfile"}, "properties": {"repobilityId": "f52f3ad11b5de0d8", "scanner": "scanner-primary", "fingerprint": "790fa7d8c9262f1e", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-a68564028f1d64db", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "properties": {"repobilityId": "60931b2c1bcb0dfe", "scanner": "scanner-primary", "fingerprint": "a68564028f1d64db", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks-extra/taxonomy-tree-merge/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f72b49562e9d4077", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks-extra/gh-repo-analytics/environment/Dockerfile"}, "properties": {"repobilityId": "d1200b6dd75bc39e", "scanner": "scanner-primary", "fingerprint": "f72b49562e9d4077", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-e99af1f7d31e3eac", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "properties": {"repobilityId": "92d60e9f94c7530d", "scanner": "scanner-primary", "fingerprint": "e99af1f7d31e3eac", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks-extra/gh-repo-analytics/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-382cc09a402f5adc", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks-extra/diff-transformer_impl/environment/Dockerfile"}, "properties": {"repobilityId": "b053b67d3fda8254", "scanner": "scanner-primary", "fingerprint": "382cc09a402f5adc", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-ede543d54de7e1ed", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "properties": {"repobilityId": "651a9fa8389a79eb", "scanner": "scanner-primary", "fingerprint": "ede543d54de7e1ed", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks-extra/diff-transformer_impl/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-669e3650b7c4902b", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks-extra/video-filler-word-remover/environment/Dockerfile"}, "properties": {"repobilityId": "618905fdd244ce31", "scanner": "scanner-primary", "fingerprint": "669e3650b7c4902b", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-8c41b7364306f8e9", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "properties": {"repobilityId": "19b73fbd84752e1d", "scanner": "scanner-primary", "fingerprint": "8c41b7364306f8e9", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks-extra/video-filler-word-remover/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-93409e5cdf147df1", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks-extra/video-tutorial-indexer/environment/Dockerfile"}, "properties": {"repobilityId": "2092b433f09bcf18", "scanner": "scanner-primary", "fingerprint": "93409e5cdf147df1", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-5dc0206e36209440", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "properties": {"repobilityId": "1849505e3326d399", "scanner": "scanner-primary", "fingerprint": "5dc0206e36209440", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks-extra/video-tutorial-indexer/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9dd7f1de3267c486", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks-extra/speaker-diarization-subtitles/environment/Dockerfile"}, "properties": {"repobilityId": "ca58385629b5c4e4", "scanner": "scanner-primary", "fingerprint": "9dd7f1de3267c486", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-efa37f4cd3bae15f", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "properties": {"repobilityId": "8c3f756f1774fa62", "scanner": "scanner-primary", "fingerprint": "efa37f4cd3bae15f", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks-extra/speaker-diarization-subtitles/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6af8a22ac59bb213", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks-extra/mhc-layer-impl/environment/Dockerfile"}, "properties": {"repobilityId": "aa467016eaae72a9", "scanner": "scanner-primary", "fingerprint": "6af8a22ac59bb213", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-bf5ec5b09924cec1", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "properties": {"repobilityId": "215a86206a295519", "scanner": "scanner-primary", "fingerprint": "bf5ec5b09924cec1", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks-extra/mhc-layer-impl/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8dd306987e76265c", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/energy-market-pricing/environment/Dockerfile"}, "properties": {"repobilityId": "95a41f96c165c137", "scanner": "scanner-primary", "fingerprint": "8dd306987e76265c", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-26483da6abb8f463", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "properties": {"repobilityId": "dce0e3037046761c", "scanner": "scanner-primary", "fingerprint": "26483da6abb8f463", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/energy-market-pricing/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-127d0c137980da29", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/dapt-intrusion-detection/environment/Dockerfile"}, "properties": {"repobilityId": "5535feb2f4b61c94", "scanner": "scanner-primary", "fingerprint": "127d0c137980da29", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-e16abada893bd07f", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "properties": {"repobilityId": "ed9c3fb40baabea6", "scanner": "scanner-primary", "fingerprint": "e16abada893bd07f", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/dapt-intrusion-detection/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-509dd91a13dab439", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/dialogue-parser/environment/Dockerfile"}, "properties": {"repobilityId": "5b745e27a7503b82", "scanner": "scanner-primary", "fingerprint": "509dd91a13dab439", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-8147c579e4533534", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12.8-slim"}, "properties": {"repobilityId": "95ad35d12ad21921", "scanner": "scanner-primary", "fingerprint": "8147c579e4533534", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/dialogue-parser/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4b50bd0ebf704040", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/enterprise-information-search/environment/Dockerfile"}, "properties": {"repobilityId": "f0c3c80c5c580be7", "scanner": "scanner-primary", "fingerprint": "4b50bd0ebf704040", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-ec577650416178a2", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "properties": {"repobilityId": "5fca3f0fd2354775", "scanner": "scanner-primary", "fingerprint": "ec577650416178a2", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/enterprise-information-search/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-aad51372c3ecace0", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/crystallographic-wyckoff-position-analysis/environment/Dockerfile"}, "properties": {"repobilityId": "51a2c9a6216c5985", "scanner": "scanner-primary", "fingerprint": "aad51372c3ecace0", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-6a01cd6dec401117", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "properties": {"repobilityId": "b6eb0843f2b1c305", "scanner": "scanner-primary", "fingerprint": "6a01cd6dec401117", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/crystallographic-wyckoff-position-analysis/environment/Dockerfile"}, "region": {"startLine": 2}}}]}, {"ruleId": "scanner-a706d131d5239b46", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/exam-block-sequencing/environment/Dockerfile"}, "properties": {"repobilityId": "a3c7f3e542fa842a", "scanner": "scanner-primary", "fingerprint": "a706d131d5239b46", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-5ab79dfc4f3bcb50", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "properties": {"repobilityId": "7d903cf6a22698da", "scanner": "scanner-primary", "fingerprint": "5ab79dfc4f3bcb50", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/exam-block-sequencing/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f498ad257a428c09", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/paratransit-routing/environment/Dockerfile"}, "properties": {"repobilityId": "544bb7b364f31065", "scanner": "scanner-primary", "fingerprint": "f498ad257a428c09", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-ff8246ff95970b61", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "properties": {"repobilityId": "c9209f952e0cf279", "scanner": "scanner-primary", "fingerprint": "ff8246ff95970b61", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/paratransit-routing/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-caa0b856b3c022f3", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/lake-warming-attribution/environment/Dockerfile"}, "properties": {"repobilityId": "26e56b2f80ccde4b", "scanner": "scanner-primary", "fingerprint": "caa0b856b3c022f3", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-f9f01aea33fe35a7", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "properties": {"repobilityId": "81862848fe27e3cf", "scanner": "scanner-primary", "fingerprint": "f9f01aea33fe35a7", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/lake-warming-attribution/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0f7516edd1380c50", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/earthquake-phase-association/environment/Dockerfile"}, "properties": {"repobilityId": "2383f51703e905f8", "scanner": "scanner-primary", "fingerprint": "0f7516edd1380c50", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-5f166b002e8c5bcb", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "properties": {"repobilityId": "bcf72f7e03101ed8", "scanner": "scanner-primary", "fingerprint": "5f166b002e8c5bcb", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/earthquake-phase-association/environment/Dockerfile"}, "region": {"startLine": 2}}}]}, {"ruleId": "scanner-1ae8f9ddc6c2cad5", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/protein-expression-analysis/environment/Dockerfile"}, "properties": {"repobilityId": "f823ff5e8f43ed60", "scanner": "scanner-primary", "fingerprint": "1ae8f9ddc6c2cad5", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-65d57f690c00712a", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "properties": {"repobilityId": "8ab15ba3246b1fe0", "scanner": "scanner-primary", "fingerprint": "65d57f690c00712a", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/protein-expression-analysis/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e0ddfd4da509b3ee", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/simpo-code-reproduction/environment/Dockerfile"}, "properties": {"repobilityId": "38de4f5ed96528cb", "scanner": "scanner-primary", "fingerprint": "e0ddfd4da509b3ee", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-2524e5260c35b2db", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "properties": {"repobilityId": "39cdb36fde00746a", "scanner": "scanner-primary", "fingerprint": "2524e5260c35b2db", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/simpo-code-reproduction/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8d792d9682596211", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/exoplanet-detection-period/environment/Dockerfile"}, "properties": {"repobilityId": "055d0572d6223368", "scanner": "scanner-primary", "fingerprint": "8d792d9682596211", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-d5f0f879f6325f65", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "properties": {"repobilityId": "cbf17dbd1f2a6e83", "scanner": "scanner-primary", "fingerprint": "d5f0f879f6325f65", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/exoplanet-detection-period/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5b18f133dc37d347", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/ada-bathroom-plan-repair/environment/Dockerfile"}, "properties": {"repobilityId": "fe5fc1e77a079bfe", "scanner": "scanner-primary", "fingerprint": "5b18f133dc37d347", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-c50ae86031187b5c", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "properties": {"repobilityId": "cb57e557104c51f2", "scanner": "scanner-primary", "fingerprint": "c50ae86031187b5c", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/ada-bathroom-plan-repair/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c4d1e63ff2a6341a", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/parallel-tfidf-search/environment/Dockerfile"}, "properties": {"repobilityId": "dd0d07218384dce2", "scanner": "scanner-primary", "fingerprint": "c4d1e63ff2a6341a", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-41077a93210c4136", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "properties": {"repobilityId": "21ba07442cfe3606", "scanner": "scanner-primary", "fingerprint": "41077a93210c4136", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/parallel-tfidf-search/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2b93effcdfdf63c9", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/grid-dispatch-operator/environment/Dockerfile"}, "properties": {"repobilityId": "87329fc55194c83b", "scanner": "scanner-primary", "fingerprint": "2b93effcdfdf63c9", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-1f765cd9269afc56", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "properties": {"repobilityId": "7afc331423297318", "scanner": "scanner-primary", "fingerprint": "1f765cd9269afc56", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/grid-dispatch-operator/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-91aad1dfafad970c", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/software-dependency-audit/environment/Dockerfile"}, "properties": {"repobilityId": "d10acaaba7a1ca88", "scanner": "scanner-primary", "fingerprint": "91aad1dfafad970c", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-427f6cb3303f94e6", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "properties": {"repobilityId": "e620279e55e4f25f", "scanner": "scanner-primary", "fingerprint": "427f6cb3303f94e6", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/software-dependency-audit/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-54fbcbf3195da46e", "level": "error", "message": {"text": "Dockerfile pipes a remote installer into a shell"}, "properties": {"repobilityId": "48942a024570f8fd", "scanner": "scanner-primary", "fingerprint": "54fbcbf3195da46e", "layer": "hardware", "severity": "high", "confidence": 1.0, "tags": ["supply-chain", "docker", "remote-installer"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/software-dependency-audit/environment/Dockerfile"}, "region": {"startLine": 25}}}]}, {"ruleId": "scanner-6773651b0930eb1a", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/syzkaller-ppdev-syzlang/environment/Dockerfile"}, "properties": {"repobilityId": "80e42099db2d8280", "scanner": "scanner-primary", "fingerprint": "6773651b0930eb1a", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-402edbdd6a9b65d9", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "properties": {"repobilityId": "f910e733bb345947", "scanner": "scanner-primary", "fingerprint": "402edbdd6a9b65d9", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/syzkaller-ppdev-syzlang/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a72f6c823f69cb04", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/xlsx-recover-data/environment/Dockerfile"}, "properties": {"repobilityId": "c8056c4c5c07ae7d", "scanner": "scanner-primary", "fingerprint": "a72f6c823f69cb04", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-2dc85e5797301ece", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "properties": {"repobilityId": "9b6f6e7553be3168", "scanner": "scanner-primary", "fingerprint": "2dc85e5797301ece", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/xlsx-recover-data/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bfb29418b05be9dd", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/react-performance-debugging/environment/Dockerfile"}, "properties": {"repobilityId": "4219e351e62fd617", "scanner": "scanner-primary", "fingerprint": "bfb29418b05be9dd", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-df99cdc2b6e0099f", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "properties": {"repobilityId": "6239e5acba3cacd8", "scanner": "scanner-primary", "fingerprint": "df99cdc2b6e0099f", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/react-performance-debugging/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d084ff7f07ca1db6", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/react-performance-debugging/environment/api-simulator/Dockerfile"}, "properties": {"repobilityId": "fd4bc576cadfbfb2", "scanner": "scanner-primary", "fingerprint": "d084ff7f07ca1db6", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-ea42438898082bd9", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: node:20-alpine"}, "properties": {"repobilityId": "de46704b9af13412", "scanner": "scanner-primary", "fingerprint": "ea42438898082bd9", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/react-performance-debugging/environment/api-simulator/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8aeb7e0a7dd13c08", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/seismic-phase-picking/environment/Dockerfile"}, "properties": {"repobilityId": "a63760aeead1c66f", "scanner": "scanner-primary", "fingerprint": "8aeb7e0a7dd13c08", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-61c765fbed9dd57c", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "properties": {"repobilityId": "c4a41e03964a167f", "scanner": "scanner-primary", "fingerprint": "61c765fbed9dd57c", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/seismic-phase-picking/environment/Dockerfile"}, "region": {"startLine": 3}}}]}, {"ruleId": "scanner-6dae6ae0d5d891af", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/fix-druid-loophole-cve/environment/Dockerfile"}, "properties": {"repobilityId": "3eee0858565b8aa8", "scanner": "scanner-primary", "fingerprint": "6dae6ae0d5d891af", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-0a552f6fd28f9d09", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "properties": {"repobilityId": "7b92902d62031fc5", "scanner": "scanner-primary", "fingerprint": "0a552f6fd28f9d09", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/fix-druid-loophole-cve/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a7c70bce490e9ee0", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/court-form-filling/environment/Dockerfile"}, "properties": {"repobilityId": "fbbc94bc1e921036", "scanner": "scanner-primary", "fingerprint": "a7c70bce490e9ee0", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-011368f778cc328e", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "properties": {"repobilityId": "9251cc49e1b9e4cf", "scanner": "scanner-primary", "fingerprint": "011368f778cc328e", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/court-form-filling/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-43a43757367bcd19", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/pdf-excel-diff/environment/Dockerfile"}, "properties": {"repobilityId": "0b866683ecb19f78", "scanner": "scanner-primary", "fingerprint": "43a43757367bcd19", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-475d841ea58ef4b5", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "properties": {"repobilityId": "968e091478d4ebae", "scanner": "scanner-primary", "fingerprint": "475d841ea58ef4b5", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/pdf-excel-diff/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-82d3d9e78a2f2c80", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/fix-build-google-auto/environment/Dockerfile"}, "properties": {"repobilityId": "a99752acba71b081", "scanner": "scanner-primary", "fingerprint": "82d3d9e78a2f2c80", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-7a8cde45ecba0268", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: bugswarm/cached-images:${bugswarm_image_tag}"}, "properties": {"repobilityId": "00df6a0249541d43", "scanner": "scanner-primary", "fingerprint": "7a8cde45ecba0268", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/fix-build-google-auto/environment/Dockerfile"}, "region": {"startLine": 2}}}]}, {"ruleId": "scanner-a9fcf0ea81fa902d", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:20.04"}, "properties": {"repobilityId": "39e675628cf8d9d0", "scanner": "scanner-primary", "fingerprint": "a9fcf0ea81fa902d", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/fix-build-google-auto/environment/Dockerfile"}, "region": {"startLine": 3}}}]}, {"ruleId": "scanner-1946b056f5410831", "level": "error", "message": {"text": "Dockerfile pipes a remote installer into a shell"}, "properties": {"repobilityId": "980a1dfefc2368e1", "scanner": "scanner-primary", "fingerprint": "1946b056f5410831", "layer": "hardware", "severity": "high", "confidence": 1.0, "tags": ["supply-chain", "docker", "remote-installer"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/fix-build-google-auto/environment/Dockerfile"}, "region": {"startLine": 67}}}]}, {"ruleId": "scanner-15966133d0c56674", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/debug-trl-grpo/environment/Dockerfile"}, "properties": {"repobilityId": "de0701c76ecadd88", "scanner": "scanner-primary", "fingerprint": "15966133d0c56674", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-db29ac72ea153fec", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.11-slim"}, "properties": {"repobilityId": "d257b413d2e91880", "scanner": "scanner-primary", "fingerprint": "db29ac72ea153fec", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/debug-trl-grpo/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-df9e2204b13f877a", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/llm-prefix-cache-replay/environment/Dockerfile"}, "properties": {"repobilityId": "fb1b2d0864989944", "scanner": "scanner-primary", "fingerprint": "df9e2204b13f877a", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-b4e451df630d907c", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "properties": {"repobilityId": "c8b795b9a1be7af9", "scanner": "scanner-primary", "fingerprint": "b4e451df630d907c", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/llm-prefix-cache-replay/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-49d06d2975030bab", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/fix-visual-stability/environment/Dockerfile"}, "properties": {"repobilityId": "a2df342c2fc53e99", "scanner": "scanner-primary", "fingerprint": "49d06d2975030bab", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-24605c190d0aa015", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "properties": {"repobilityId": "2b9cc4c34b1c2f33", "scanner": "scanner-primary", "fingerprint": "24605c190d0aa015", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/fix-visual-stability/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bbb0196e603e5d11", "level": "error", "message": {"text": "Dockerfile pipes a remote installer into a shell"}, "properties": {"repobilityId": "72e11cdaf16ace0d", "scanner": "scanner-primary", "fingerprint": "bbb0196e603e5d11", "layer": "hardware", "severity": "high", "confidence": 1.0, "tags": ["supply-chain", "docker", "remote-installer"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/fix-visual-stability/environment/Dockerfile"}, "region": {"startLine": 33}}}]}, {"ruleId": "scanner-4f3ccedd8b95edd7", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/video-silence-remover/environment/Dockerfile"}, "properties": {"repobilityId": "aa82e73835291668", "scanner": "scanner-primary", "fingerprint": "4f3ccedd8b95edd7", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-d304d5bc566c1e2c", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "properties": {"repobilityId": "9ec02d8dcb35e096", "scanner": "scanner-primary", "fingerprint": "d304d5bc566c1e2c", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/video-silence-remover/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2f698572a8e2cea8", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/edit-pdf/environment/Dockerfile"}, "properties": {"repobilityId": "1c44a842379e3203", "scanner": "scanner-primary", "fingerprint": "2f698572a8e2cea8", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-08fb3823076a6762", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "properties": {"repobilityId": "6d24bc9a89809e00", "scanner": "scanner-primary", "fingerprint": "08fb3823076a6762", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/edit-pdf/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d79dcd5473e37e53", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/exceltable-in-ppt/environment/Dockerfile"}, "properties": {"repobilityId": "a3c073409517c107", "scanner": "scanner-primary", "fingerprint": "d79dcd5473e37e53", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-99b548c89590e79a", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "properties": {"repobilityId": "9879e8918d29702f", "scanner": "scanner-primary", "fingerprint": "99b548c89590e79a", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/exceltable-in-ppt/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e814b71dd7cd3f43", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/lab-unit-harmonization/environment/Dockerfile"}, "properties": {"repobilityId": "b0640c37335c5d09", "scanner": "scanner-primary", "fingerprint": "e814b71dd7cd3f43", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-8dd452d06552109b", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "properties": {"repobilityId": "d8f824723a3bae1c", "scanner": "scanner-primary", "fingerprint": "8dd452d06552109b", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/lab-unit-harmonization/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b74836f265e7af7b", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/suricata-custom-exfil/environment/Dockerfile"}, "properties": {"repobilityId": "190c5bb087d727fc", "scanner": "scanner-primary", "fingerprint": "b74836f265e7af7b", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-752e2043e5fad539", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: jasonish/suricata:7.0.11"}, "properties": {"repobilityId": "2a54cbab8fb846db", "scanner": "scanner-primary", "fingerprint": "752e2043e5fad539", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/suricata-custom-exfil/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-82d8529288df6ac1", "level": "error", "message": {"text": "Dockerfile pipes a remote installer into a shell"}, "properties": {"repobilityId": "b20e49bc96175325", "scanner": "scanner-primary", "fingerprint": "82d8529288df6ac1", "layer": "hardware", "severity": "high", "confidence": 1.0, "tags": ["supply-chain", "docker", "remote-installer"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/suricata-custom-exfil/environment/Dockerfile"}, "region": {"startLine": 43}}}]}, {"ruleId": "scanner-3356bcdac83777aa", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/reserves-at-risk-calc/environment/Dockerfile"}, "properties": {"repobilityId": "68b3b1b22ae8b788", "scanner": "scanner-primary", "fingerprint": "3356bcdac83777aa", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-c534efe9862eeb40", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "properties": {"repobilityId": "ddf7de6fc29ec19b", "scanner": "scanner-primary", "fingerprint": "c534efe9862eeb40", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/reserves-at-risk-calc/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-faa7293939da82d3", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/python-scala-translation/environment/Dockerfile"}, "properties": {"repobilityId": "90111a3c0b3656c0", "scanner": "scanner-primary", "fingerprint": "faa7293939da82d3", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-c2d2660b7bf26c66", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "properties": {"repobilityId": "4ef09418d75d0b94", "scanner": "scanner-primary", "fingerprint": "c2d2660b7bf26c66", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/python-scala-translation/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b5ca5c6475827fe6", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/sales-pivot-analysis/environment/Dockerfile"}, "properties": {"repobilityId": "44aeaeb67f0e5748", "scanner": "scanner-primary", "fingerprint": "b5ca5c6475827fe6", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-a86602c35535e311", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "properties": {"repobilityId": "1a4db72e3a0fcb8c", "scanner": "scanner-primary", "fingerprint": "a86602c35535e311", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/sales-pivot-analysis/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-09afee2f952b56f5", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/financial-modeling-qa/environment/Dockerfile"}, "properties": {"repobilityId": "bdc693f39fa96f58", "scanner": "scanner-primary", "fingerprint": "09afee2f952b56f5", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-cdda742ebf1e95e4", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "properties": {"repobilityId": "d86d1b74949114d7", "scanner": "scanner-primary", "fingerprint": "cdda742ebf1e95e4", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/financial-modeling-qa/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0bc4ff6c0f30b544", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/pddl-airport-planning/environment/Dockerfile"}, "properties": {"repobilityId": "d45e6af38ff7402a", "scanner": "scanner-primary", "fingerprint": "0bc4ff6c0f30b544", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-bdeeb5e5ba352c30", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "properties": {"repobilityId": "e1973a667238aa3f", "scanner": "scanner-primary", "fingerprint": "bdeeb5e5ba352c30", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/pddl-airport-planning/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ff401757d19ff9fc", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/manufacturing-equipment-maintenance/environment/Dockerfile"}, "properties": {"repobilityId": "b605a1d0d8db9cce", "scanner": "scanner-primary", "fingerprint": "ff401757d19ff9fc", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-9392bb10984d76cb", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "properties": {"repobilityId": "149134203ed9fb4f", "scanner": "scanner-primary", "fingerprint": "9392bb10984d76cb", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/manufacturing-equipment-maintenance/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8c7d8b2ebfaa4b80", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/jpg-ocr-stat/environment/Dockerfile"}, "properties": {"repobilityId": "3b60302967029e8c", "scanner": "scanner-primary", "fingerprint": "8c7d8b2ebfaa4b80", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-92b42693c3395064", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "properties": {"repobilityId": "bf59f7c6dbc1dd2d", "scanner": "scanner-primary", "fingerprint": "92b42693c3395064", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/jpg-ocr-stat/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fecdd450ed0d2910", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/manufacturing-codebook-normalization/environment/Dockerfile"}, "properties": {"repobilityId": "5ad785a10015326f", "scanner": "scanner-primary", "fingerprint": "fecdd450ed0d2910", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-50f991b71ec6c8eb", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "properties": {"repobilityId": "9fcb23f5db5dce17", "scanner": "scanner-primary", "fingerprint": "50f991b71ec6c8eb", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/manufacturing-codebook-normalization/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-59e1966301607e2c", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/fix-erlang-ssh-cve/environment/Dockerfile"}, "properties": {"repobilityId": "2eb7ac26ad9e142b", "scanner": "scanner-primary", "fingerprint": "59e1966301607e2c", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-c8e8211f1f33c8a6", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "properties": {"repobilityId": "89e2fc91f059bf7b", "scanner": "scanner-primary", "fingerprint": "c8e8211f1f33c8a6", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/fix-erlang-ssh-cve/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0ca0a2691bdff281", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/3d-scan-calc/environment/Dockerfile"}, "properties": {"repobilityId": "2134d36ee4ac6cdd", "scanner": "scanner-primary", "fingerprint": "0ca0a2691bdff281", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-3ed6c1a7ce8f9e53", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "properties": {"repobilityId": "380a631e57bc5eab", "scanner": "scanner-primary", "fingerprint": "3ed6c1a7ce8f9e53", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/3d-scan-calc/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a3c4a82cfd7d64d9", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/spring-boot-jakarta-migration/environment/Dockerfile"}, "properties": {"repobilityId": "929de3f2a87b5ff3", "scanner": "scanner-primary", "fingerprint": "a3c4a82cfd7d64d9", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-a7315f780e00be0a", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "properties": {"repobilityId": "777dd2ff5c99b676", "scanner": "scanner-primary", "fingerprint": "a7315f780e00be0a", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/spring-boot-jakarta-migration/environment/Dockerfile"}, "region": {"startLine": 3}}}]}, {"ruleId": "scanner-4b8a3d4bac0315c8", "level": "error", "message": {"text": "Dockerfile pipes a remote installer into a shell"}, "properties": {"repobilityId": "530468c9620c2d2c", "scanner": "scanner-primary", "fingerprint": "4b8a3d4bac0315c8", "layer": "hardware", "severity": "high", "confidence": 1.0, "tags": ["supply-chain", "docker", "remote-installer"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/spring-boot-jakarta-migration/environment/Dockerfile"}, "region": {"startLine": 22}}}]}, {"ruleId": "scanner-7e17e597f604d2f7", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/hvac-control/environment/Dockerfile"}, "properties": {"repobilityId": "bdce895cf2116da0", "scanner": "scanner-primary", "fingerprint": "7e17e597f604d2f7", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-32fc7f55e136a737", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "properties": {"repobilityId": "84dab7a14635315f", "scanner": "scanner-primary", "fingerprint": "32fc7f55e136a737", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/hvac-control/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d0410bf9d0540366", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/flink-query/environment/Dockerfile"}, "properties": {"repobilityId": "c92d8258a8554287", "scanner": "scanner-primary", "fingerprint": "d0410bf9d0540366", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-b75bc818216261e1", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "properties": {"repobilityId": "2f2880de79385913", "scanner": "scanner-primary", "fingerprint": "b75bc818216261e1", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/flink-query/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8133397c967a1318", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/latex-formula-extraction/environment/Dockerfile"}, "properties": {"repobilityId": "7b7dbc2309ccce2a", "scanner": "scanner-primary", "fingerprint": "8133397c967a1318", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-82d20958fda4ffed", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "properties": {"repobilityId": "eeaa374ff5d16aa4", "scanner": "scanner-primary", "fingerprint": "82d20958fda4ffed", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/latex-formula-extraction/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-46138e00ee394b48", "level": "warning", "message": {"text": "Docker base image uses a mutable or implicit tag: huggingface_hub"}, "properties": {"repobilityId": "a345bd7967cb401c", "scanner": "scanner-primary", "fingerprint": "46138e00ee394b48", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/latex-formula-extraction/environment/Dockerfile"}, "region": {"startLine": 53}}}]}, {"ruleId": "scanner-9c37648cc25ad667", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/earthquake-plate-calculation/environment/Dockerfile"}, "properties": {"repobilityId": "1882be368eed6db6", "scanner": "scanner-primary", "fingerprint": "9c37648cc25ad667", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-6f38a2aedfc3baa0", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "properties": {"repobilityId": "ad9546e5f6934f05", "scanner": "scanner-primary", "fingerprint": "6f38a2aedfc3baa0", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/earthquake-plate-calculation/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-929284ecbd5c20c7", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/shock-analysis-supply/environment/Dockerfile"}, "properties": {"repobilityId": "014ce33e4c266e45", "scanner": "scanner-primary", "fingerprint": "929284ecbd5c20c7", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-f2ea77f597d039b1", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "properties": {"repobilityId": "5f85dd2efc8d0c7d", "scanner": "scanner-primary", "fingerprint": "f2ea77f597d039b1", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/shock-analysis-supply/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f951099eba7f2cbb", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/multilingual-video-dubbing/environment/Dockerfile"}, "properties": {"repobilityId": "ca8b9a3ff8837ee6", "scanner": "scanner-primary", "fingerprint": "f951099eba7f2cbb", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-c83d69b3deb0a2ca", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "properties": {"repobilityId": "145af342b1af2356", "scanner": "scanner-primary", "fingerprint": "c83d69b3deb0a2ca", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/multilingual-video-dubbing/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-65c8f816a1ae5f54", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/pptx-reference-formatting/environment/Dockerfile"}, "properties": {"repobilityId": "4440ae980c55b945", "scanner": "scanner-primary", "fingerprint": "65c8f816a1ae5f54", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-de44fffd0a08275b", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "properties": {"repobilityId": "e1af47e678176d22", "scanner": "scanner-primary", "fingerprint": "de44fffd0a08275b", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/pptx-reference-formatting/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-763712de05328eea", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/mario-coin-counting/environment/Dockerfile"}, "properties": {"repobilityId": "d862c56fab8d950a", "scanner": "scanner-primary", "fingerprint": "763712de05328eea", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-2657c65f90ce95ba", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "properties": {"repobilityId": "57a28a00704cac6e", "scanner": "scanner-primary", "fingerprint": "2657c65f90ce95ba", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/mario-coin-counting/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1b2c668d30037666", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/offer-letter-generator/environment/Dockerfile"}, "properties": {"repobilityId": "472b38a3f41a83f7", "scanner": "scanner-primary", "fingerprint": "1b2c668d30037666", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-c631bb02d56ae80e", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "properties": {"repobilityId": "40a85c4b9010d027", "scanner": "scanner-primary", "fingerprint": "c631bb02d56ae80e", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/offer-letter-generator/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-dbe26d6f530feb14", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/threejs-to-obj/environment/Dockerfile"}, "properties": {"repobilityId": "ff5e656bee5579e8", "scanner": "scanner-primary", "fingerprint": "dbe26d6f530feb14", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-12d28c846566efd9", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "properties": {"repobilityId": "7b368a9e3023278a", "scanner": "scanner-primary", "fingerprint": "12d28c846566efd9", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/threejs-to-obj/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-09b1412015e4ff4d", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/fix-build-agentops/environment/Dockerfile"}, "properties": {"repobilityId": "c4f92b74e9e21b43", "scanner": "scanner-primary", "fingerprint": "09b1412015e4ff4d", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-e1f164afa7a499d6", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: bugswarm/cached-images:${bugswarm_image_tag}"}, "properties": {"repobilityId": "79373a653c8b2843", "scanner": "scanner-primary", "fingerprint": "e1f164afa7a499d6", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/fix-build-agentops/environment/Dockerfile"}, "region": {"startLine": 3}}}]}, {"ruleId": "scanner-fe8993f98b4cca1b", "level": "error", "message": {"text": "Dockerfile pipes a remote installer into a shell"}, "properties": {"repobilityId": "952bdcb29e572559", "scanner": "scanner-primary", "fingerprint": "fe8993f98b4cca1b", "layer": "hardware", "severity": "high", "confidence": 1.0, "tags": ["supply-chain", "docker", "remote-installer"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/fix-build-agentops/environment/Dockerfile"}, "region": {"startLine": 67}}}]}, {"ruleId": "scanner-74b676d62c281879", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/shock-analysis-demand/environment/Dockerfile"}, "properties": {"repobilityId": "16bd7d324277cce2", "scanner": "scanner-primary", "fingerprint": "74b676d62c281879", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-4f402413d0f404d9", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "properties": {"repobilityId": "fd7efd8b8f2c55d9", "scanner": "scanner-primary", "fingerprint": "4f402413d0f404d9", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/shock-analysis-demand/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1d2756097ac20ff3", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/manufacturing-fjsp-optimization/environment/Dockerfile"}, "properties": {"repobilityId": "f57ab802be481c83", "scanner": "scanner-primary", "fingerprint": "1d2756097ac20ff3", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-c39cd23b1d664310", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "properties": {"repobilityId": "d8bcf0176539660a", "scanner": "scanner-primary", "fingerprint": "c39cd23b1d664310", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/manufacturing-fjsp-optimization/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9aab2bba28405cf0", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/glm-lake-mendota/environment/Dockerfile"}, "properties": {"repobilityId": "e8239d211a7d499b", "scanner": "scanner-primary", "fingerprint": "9aab2bba28405cf0", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-de9813a4ea625bf9", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:20.04"}, "properties": {"repobilityId": "eb51a4880c578e7a", "scanner": "scanner-primary", "fingerprint": "de9813a4ea625bf9", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/glm-lake-mendota/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-25a00a1158afa532", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/setup-fuzzing-py/environment/Dockerfile"}, "properties": {"repobilityId": "c256c63bb64e105f", "scanner": "scanner-primary", "fingerprint": "25a00a1158afa532", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-9be928c4984589ce", "level": "warning", "message": {"text": "Docker base image uses a mutable or implicit tag: gcr.io/oss-fuzz-base/base-builder-python"}, "properties": {"repobilityId": "c4ef6bcf0a3c4fa1", "scanner": "scanner-primary", "fingerprint": "9be928c4984589ce", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/setup-fuzzing-py/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0a6b3658fc6b8b01", "level": "error", "message": {"text": "Dockerfile pipes a remote installer into a shell"}, "properties": {"repobilityId": "cc5678ebb686aade", "scanner": "scanner-primary", "fingerprint": "0a6b3658fc6b8b01", "layer": "hardware", "severity": "high", "confidence": 1.0, "tags": ["supply-chain", "docker", "remote-installer"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/setup-fuzzing-py/environment/Dockerfile"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-e1a17d273fe3361b", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/organize-messy-files/environment/Dockerfile"}, "properties": {"repobilityId": "5ef9ab82ca085698", "scanner": "scanner-primary", "fingerprint": "e1a17d273fe3361b", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-e4b1c1de2867dea6", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "properties": {"repobilityId": "80a9700358c113bd", "scanner": "scanner-primary", "fingerprint": "e4b1c1de2867dea6", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/organize-messy-files/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5a800a3f3db4b850", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/dynamic-object-aware-egomotion/environment/Dockerfile"}, "properties": {"repobilityId": "860e0a25b3ef6672", "scanner": "scanner-primary", "fingerprint": "5a800a3f3db4b850", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-309371bc05bac0f7", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "properties": {"repobilityId": "3a0cf2af494cf04a", "scanner": "scanner-primary", "fingerprint": "309371bc05bac0f7", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/dynamic-object-aware-egomotion/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2624cb9003f296f6", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/data-to-d3/environment/Dockerfile"}, "properties": {"repobilityId": "5413027360939026", "scanner": "scanner-primary", "fingerprint": "2624cb9003f296f6", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-7162913401e39b10", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "properties": {"repobilityId": "7374a091b027406b", "scanner": "scanner-primary", "fingerprint": "7162913401e39b10", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/data-to-d3/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-80366c215fcbfed4", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/bike-rebalance/environment/Dockerfile"}, "properties": {"repobilityId": "4cfff3fd49834551", "scanner": "scanner-primary", "fingerprint": "80366c215fcbfed4", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-3217378d780cb470", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "properties": {"repobilityId": "0e38c93d2229cbd6", "scanner": "scanner-primary", "fingerprint": "3217378d780cb470", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/bike-rebalance/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-915f615955c00db4", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/flood-risk-analysis/environment/Dockerfile"}, "properties": {"repobilityId": "a286dd472fb6afa5", "scanner": "scanner-primary", "fingerprint": "915f615955c00db4", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-2ab06067e9e1cc21", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "properties": {"repobilityId": "c793c1bfde0c89ff", "scanner": "scanner-primary", "fingerprint": "2ab06067e9e1cc21", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/flood-risk-analysis/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e612355e5db188a9", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/azure-bgp-oscillation-route-leak/environment/Dockerfile"}, "properties": {"repobilityId": "67ac294dce201de1", "scanner": "scanner-primary", "fingerprint": "e612355e5db188a9", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-07157deca69b1f16", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "properties": {"repobilityId": "1f98907d4f1f4a38", "scanner": "scanner-primary", "fingerprint": "07157deca69b1f16", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/azure-bgp-oscillation-route-leak/environment/Dockerfile"}, "region": {"startLine": 2}}}]}, {"ruleId": "scanner-dea98dc7f8fb92b7", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/civ6-adjacency-optimizer/environment/Dockerfile"}, "properties": {"repobilityId": "0162e1e97043a834", "scanner": "scanner-primary", "fingerprint": "dea98dc7f8fb92b7", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-bea8622e237de833", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "properties": {"repobilityId": "cab1e9eed601d4b0", "scanner": "scanner-primary", "fingerprint": "bea8622e237de833", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/civ6-adjacency-optimizer/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bfbf2812d0d0c801", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/citation-check/environment/Dockerfile"}, "properties": {"repobilityId": "590b0d1d6303a9ec", "scanner": "scanner-primary", "fingerprint": "bfbf2812d0d0c801", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-522a28633444a414", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "properties": {"repobilityId": "c83b8621d05fe426", "scanner": "scanner-primary", "fingerprint": "522a28633444a414", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/citation-check/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-65af9220d27e2532", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/paper-anonymizer/environment/Dockerfile"}, "properties": {"repobilityId": "b8cfad62d64b1f46", "scanner": "scanner-primary", "fingerprint": "65af9220d27e2532", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-6c0daf8099d6740c", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "properties": {"repobilityId": "06a36654884f9bf3", "scanner": "scanner-primary", "fingerprint": "6c0daf8099d6740c", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/paper-anonymizer/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-60f44e45c746554c", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/invoice-fraud-detection/environment/Dockerfile"}, "properties": {"repobilityId": "5fb1122a1390b0a4", "scanner": "scanner-primary", "fingerprint": "60f44e45c746554c", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-66bda8b28dd19ce0", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "properties": {"repobilityId": "66696f860007786d", "scanner": "scanner-primary", "fingerprint": "66bda8b28dd19ce0", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/invoice-fraud-detection/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-80a29417ba280c92", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/mars-clouds-clustering/environment/Dockerfile"}, "properties": {"repobilityId": "6e414876370fe01d", "scanner": "scanner-primary", "fingerprint": "80a29417ba280c92", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-749138b188b73027", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "properties": {"repobilityId": "98014b5f0a3b3039", "scanner": "scanner-primary", "fingerprint": "749138b188b73027", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/mars-clouds-clustering/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4f956e9ec921caa0", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/lean4-proof/environment/Dockerfile"}, "properties": {"repobilityId": "8d00ade3b54bfb82", "scanner": "scanner-primary", "fingerprint": "4f956e9ec921caa0", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-1a52e6f160c8f80d", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "properties": {"repobilityId": "b0e075ae7bfb3e71", "scanner": "scanner-primary", "fingerprint": "1a52e6f160c8f80d", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/lean4-proof/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6e0d2d9ab6917219", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/adaptive-cruise-control/environment/Dockerfile"}, "properties": {"repobilityId": "d3e74065f0578441", "scanner": "scanner-primary", "fingerprint": "6e0d2d9ab6917219", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-d2e8ff8efd0ce4fc", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "properties": {"repobilityId": "8f7e783976303ee1", "scanner": "scanner-primary", "fingerprint": "d2e8ff8efd0ce4fc", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/adaptive-cruise-control/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2b5a75b6da1db287", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/pddl-tpp-planning/environment/Dockerfile"}, "properties": {"repobilityId": "be13c3c120cecd3d", "scanner": "scanner-primary", "fingerprint": "2b5a75b6da1db287", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-5835ed37644c1620", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "properties": {"repobilityId": "e7253fb72f3aef7f", "scanner": "scanner-primary", "fingerprint": "5835ed37644c1620", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/pddl-tpp-planning/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3d393a2010ba2961", "level": "error", "message": {"text": "Dockerfile pipes a remote installer into a shell"}, "properties": {"repobilityId": "a1022ea401f3d1af", "scanner": "scanner-primary", "fingerprint": "3d393a2010ba2961", "layer": "hardware", "severity": "high", "confidence": 1.0, "tags": ["supply-chain", "docker", "remote-installer"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/pddl-tpp-planning/environment/Dockerfile"}, "region": {"startLine": 23}}}]}, {"ruleId": "scanner-decbd5771040f861", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/tictoc-unnecessary-abort-detection/environment/Dockerfile"}, "properties": {"repobilityId": "c4dbbb4edc7d180e", "scanner": "scanner-primary", "fingerprint": "decbd5771040f861", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-46649873a034ccff", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "properties": {"repobilityId": "8947f20d3e18655c", "scanner": "scanner-primary", "fingerprint": "46649873a034ccff", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/tictoc-unnecessary-abort-detection/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-efb6a4c76bf7890e", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/powerlifting-coef-calc/environment/Dockerfile"}, "properties": {"repobilityId": "b4cd94c3199f7471", "scanner": "scanner-primary", "fingerprint": "efb6a4c76bf7890e", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-de664f6d63222d42", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "properties": {"repobilityId": "9b12a1f8a830df15", "scanner": "scanner-primary", "fingerprint": "de664f6d63222d42", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/powerlifting-coef-calc/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0f34653d258aa202", "level": "error", "message": {"text": "Dockerfile pipes a remote installer into a shell"}, "properties": {"repobilityId": "2a6a79c31e505cf9", "scanner": "scanner-primary", "fingerprint": "0f34653d258aa202", "layer": "hardware", "severity": "high", "confidence": 1.0, "tags": ["supply-chain", "docker", "remote-installer"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/powerlifting-coef-calc/environment/Dockerfile"}, "region": {"startLine": 18}}}]}, {"ruleId": "scanner-eb46214a91a13c0f", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/sec-financial-report/environment/Dockerfile"}, "properties": {"repobilityId": "e8e94ac290ef930b", "scanner": "scanner-primary", "fingerprint": "eb46214a91a13c0f", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-cc2473489de84929", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "properties": {"repobilityId": "e42e54d555a0501d", "scanner": "scanner-primary", "fingerprint": "cc2473489de84929", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/sec-financial-report/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9953e2a26de2b70b", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/econ-detrending-correlation/environment/Dockerfile"}, "properties": {"repobilityId": "cc1cd767f252cdc4", "scanner": "scanner-primary", "fingerprint": "9953e2a26de2b70b", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-ed6eae0007a2ff5e", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "properties": {"repobilityId": "b49df8d9cd12cac1", "scanner": "scanner-primary", "fingerprint": "ed6eae0007a2ff5e", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/econ-detrending-correlation/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7f0d98993f3882c5", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/weighted-gdp-calc/environment/Dockerfile"}, "properties": {"repobilityId": "28d7076560487364", "scanner": "scanner-primary", "fingerprint": "7f0d98993f3882c5", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-36a8e8f7610cf5f1", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "properties": {"repobilityId": "4aae22468e565305", "scanner": "scanner-primary", "fingerprint": "36a8e8f7610cf5f1", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/weighted-gdp-calc/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5c93bcf58ff8c9af", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/energy-ac-optimal-power-flow/environment/Dockerfile"}, "properties": {"repobilityId": "c430f2e065c5c432", "scanner": "scanner-primary", "fingerprint": "5c93bcf58ff8c9af", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-d710c387337bf678", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "properties": {"repobilityId": "0d9fa1dc5054ed6e", "scanner": "scanner-primary", "fingerprint": "d710c387337bf678", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/energy-ac-optimal-power-flow/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9d7e1cdc8767280c", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/r2r-mpc-control/environment/Dockerfile"}, "properties": {"repobilityId": "c7ba3dcc177dce7c", "scanner": "scanner-primary", "fingerprint": "9d7e1cdc8767280c", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-227cd2d09fbb62a7", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "properties": {"repobilityId": "f591ade9bfeef29c", "scanner": "scanner-primary", "fingerprint": "227cd2d09fbb62a7", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/r2r-mpc-control/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-dd5135f47a97f4f2", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/jax-computing-basics/environment/Dockerfile"}, "properties": {"repobilityId": "054f0a1825f1b6f7", "scanner": "scanner-primary", "fingerprint": "dd5135f47a97f4f2", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-2fbaaa6a3c2f4863", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "properties": {"repobilityId": "09316e190d3d5d22", "scanner": "scanner-primary", "fingerprint": "2fbaaa6a3c2f4863", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/jax-computing-basics/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0a734e66e05dda44", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/threejs-structure-parser/environment/Dockerfile"}, "properties": {"repobilityId": "1d52b4f249cc92a7", "scanner": "scanner-primary", "fingerprint": "0a734e66e05dda44", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-63a70df507ef00a9", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "properties": {"repobilityId": "51da367c2e237206", "scanner": "scanner-primary", "fingerprint": "63a70df507ef00a9", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/threejs-structure-parser/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e4d0e9aeb390904f", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/energy-unit-commitment/environment/Dockerfile"}, "properties": {"repobilityId": "32a0b06fd6446874", "scanner": "scanner-primary", "fingerprint": "e4d0e9aeb390904f", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-5c657d4c37777d63", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "properties": {"repobilityId": "f9240c318d0235e7", "scanner": "scanner-primary", "fingerprint": "5c657d4c37777d63", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/energy-unit-commitment/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e0d19f0207c25502", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/travel-planning/environment/Dockerfile"}, "properties": {"repobilityId": "2fdeb565a6036dd4", "scanner": "scanner-primary", "fingerprint": "e0d19f0207c25502", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-3c6c8ab80e94bc93", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "properties": {"repobilityId": "838ef828383cbbe4", "scanner": "scanner-primary", "fingerprint": "3c6c8ab80e94bc93", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/travel-planning/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f358fc79d508dde6", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/radar-vital-signs/environment/Dockerfile"}, "properties": {"repobilityId": "7736c90ae909624b", "scanner": "scanner-primary", "fingerprint": "f358fc79d508dde6", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-171195bca71f8e7c", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.11-slim"}, "properties": {"repobilityId": "85e4756fde3ac518", "scanner": "scanner-primary", "fingerprint": "171195bca71f8e7c", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/radar-vital-signs/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b8ca3954cf820866", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/quantum-numerical-simulation/environment/Dockerfile"}, "properties": {"repobilityId": "8e37e654f5791dce", "scanner": "scanner-primary", "fingerprint": "b8ca3954cf820866", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-d172f6e30ded3714", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "properties": {"repobilityId": "53b6ef1637518f87", "scanner": "scanner-primary", "fingerprint": "d172f6e30ded3714", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/quantum-numerical-simulation/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3581178880e6b81d", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/drone-planning-control/environment/Dockerfile"}, "properties": {"repobilityId": "8d71d1fe96ff293c", "scanner": "scanner-primary", "fingerprint": "3581178880e6b81d", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-f5230e3feac6b818", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:24.04"}, "properties": {"repobilityId": "379ba613113bbb02", "scanner": "scanner-primary", "fingerprint": "f5230e3feac6b818", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/drone-planning-control/environment/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7108b205068481a7", "level": "warning", "message": {"text": "Dockerfile runs as root: tasks/gravitational-wave-detection/environment/Dockerfile"}, "properties": {"repobilityId": "0812e95e4f635bf6", "scanner": "scanner-primary", "fingerprint": "7108b205068481a7", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-c2890d1c7fc41f1b", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "properties": {"repobilityId": "4fa6fef185405436", "scanner": "scanner-primary", "fingerprint": "c2890d1c7fc41f1b", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/gravitational-wave-detection/environment/Dockerfile"}, "region": {"startLine": 2}}}]}, {"ruleId": "scanner-b7be5a205577888d", "level": "error", "message": {"text": "Insecure pattern 'exec_used' in experiments/metrics-dashboard/server/index.ts:299"}, "properties": {"repobilityId": "d580e4b0b464f9cc", "scanner": "scanner-primary", "fingerprint": "b7be5a205577888d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "exec_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "experiments/metrics-dashboard/server/index.ts"}, "region": {"startLine": 299}}}]}, {"ruleId": "scanner-d3f7446421115ff3", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in experiments/metrics-dashboard/server/index.ts:292"}, "properties": {"repobilityId": "ad61ffe949e2285c", "scanner": "scanner-primary", "fingerprint": "d3f7446421115ff3", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "experiments/metrics-dashboard/server/index.ts"}, "region": {"startLine": 292}}}]}, {"ruleId": "scanner-f1756322c4e7f0aa", "level": "warning", "message": {"text": "Insecure pattern 'cors_wildcard' in experiments/metrics-dashboard/server/index.ts:11"}, "properties": {"repobilityId": "9c150f648cee78a4", "scanner": "scanner-primary", "fingerprint": "f1756322c4e7f0aa", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "cors_wildcard"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "experiments/metrics-dashboard/server/index.ts"}, "region": {"startLine": 11}}}]}, {"ruleId": "scanner-4db3aa616f1ed12e", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in website/scripts/generate-tasks-registry.ts:1"}, "properties": {"repobilityId": "e177779e07fdae0f", "scanner": "scanner-primary", "fingerprint": "4db3aa616f1ed12e", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "website/scripts/generate-tasks-registry.ts"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8fc7ddb5dad0cc49", "level": "warning", "message": {"text": "Insecure pattern 'dangerous_innerhtml' in website/src/app/(main)/tasks/[taskName]/components/task-verifier.tsx:61"}, "properties": {"repobilityId": "b1042e20dd51c49a", "scanner": "scanner-primary", "fingerprint": "8fc7ddb5dad0cc49", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "dangerous_innerhtml"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "website/src/app/(main)/tasks/[taskName]/components/task-verifier.tsx"}, "region": {"startLine": 61}}}]}, {"ruleId": "scanner-68a3e2c63f080584", "level": "warning", "message": {"text": "Insecure pattern 'dangerous_innerhtml' in website/src/components/BrandIcon.tsx:34"}, "properties": {"repobilityId": "0e554a5d22d0085a", "scanner": "scanner-primary", "fingerprint": "68a3e2c63f080584", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "dangerous_innerhtml"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "website/src/components/BrandIcon.tsx"}, "region": {"startLine": 34}}}]}, {"ruleId": "scanner-479350821e84c786", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in website/public/blog/fig3.html:84"}, "properties": {"repobilityId": "7ced3ae899c7442a", "scanner": "scanner-primary", "fingerprint": "479350821e84c786", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "website/public/blog/fig3.html"}, "region": {"startLine": 84}}}]}, {"ruleId": "scanner-88da15c8d08492ad", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in tasks/enterprise-information-search/environment/DATA/products/ForecastForce.json:11181"}, "properties": {"repobilityId": "c20ba85dbf28a536", "scanner": "scanner-primary", "fingerprint": "88da15c8d08492ad", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/enterprise-information-search/environment/DATA/products/ForecastForce.json"}, "region": {"startLine": 11181}}}]}, {"ruleId": "scanner-c52748eb9ce74b02", "level": "warning", "message": {"text": "Insecure pattern 'dangerous_innerhtml' in tasks/react-performance-debugging/environment/skills/react-best-practices/AGENTS.md:1466"}, "properties": {"repobilityId": "229ac03a15477f89", "scanner": "scanner-primary", "fingerprint": "c52748eb9ce74b02", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "dangerous_innerhtml"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/react-performance-debugging/environment/skills/react-best-practices/AGENTS.md"}, "region": {"startLine": 1466}}}]}, {"ruleId": "scanner-b5843e69e665267a", "level": "warning", "message": {"text": "Insecure pattern 'dangerous_innerhtml' in tasks/fix-visual-stability/solution/solve.sh:216"}, "properties": {"repobilityId": "1f89b8fa89ec1ed7", "scanner": "scanner-primary", "fingerprint": "b5843e69e665267a", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "dangerous_innerhtml"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/fix-visual-stability/solution/solve.sh"}, "region": {"startLine": 216}}}]}, {"ruleId": "scanner-788083142c040ad6", "level": "warning", "message": {"text": "Insecure pattern 'cors_wildcard' in tasks/fix-visual-stability/environment/api-server/server.js:6"}, "properties": {"repobilityId": "7212c5a86d79a135", "scanner": "scanner-primary", "fingerprint": "788083142c040ad6", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "cors_wildcard"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/fix-visual-stability/environment/api-server/server.js"}, "region": {"startLine": 6}}}]}, {"ruleId": "scanner-d0e51a91fc79e5f3", "level": "error", "message": {"text": "Insecure pattern 'exec_used' in tasks/pddl-airport-planning/solution/solve.sh:41"}, "properties": {"repobilityId": "d8c4e1dfaa714b86", "scanner": "scanner-primary", "fingerprint": "d0e51a91fc79e5f3", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "exec_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/pddl-airport-planning/solution/solve.sh"}, "region": {"startLine": 41}}}]}, {"ruleId": "scanner-66ebf2b344d845c8", "level": "warning", "message": {"text": "Insecure pattern 'cors_wildcard' in tasks/spring-boot-jakarta-migration/environment/skills/spring-security-6/SKILL.md:140"}, "properties": {"repobilityId": "6716b2eee9d057d8", "scanner": "scanner-primary", "fingerprint": "66ebf2b344d845c8", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "cors_wildcard"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/spring-boot-jakarta-migration/environment/skills/spring-security-6/SKILL.md"}, "region": {"startLine": 140}}}]}, {"ruleId": "scanner-f01392a3bbcfd406", "level": "error", "message": {"text": "Possible secret in tasks/flink-query/environment/skills/senior-data-engineer/scripts/kafka_config_generator.py"}, "properties": {"repobilityId": "fe437dbc09a54789", "scanner": "scanner-primary", "fingerprint": "f01392a3bbcfd406", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/flink-query/environment/skills/senior-data-engineer/scripts/kafka_config_generator.py"}, "region": {"startLine": 609}}}]}, {"ruleId": "scanner-f01392a3bbcfd406", "level": "error", "message": {"text": "Possible secret in tasks/flink-query/environment/skills/senior-data-engineer/scripts/kafka_config_generator.py"}, "properties": {"repobilityId": "fe437dbc09a54789", "scanner": "scanner-primary", "fingerprint": "f01392a3bbcfd406", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/flink-query/environment/skills/senior-data-engineer/scripts/kafka_config_generator.py"}, "region": {"startLine": 614}}}]}, {"ruleId": "scanner-d6b05079a5356340", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in tasks/data-to-d3/environment/skills/d3-visualization/scripts/check_tooltip.js:45"}, "properties": {"repobilityId": "d516421f0d8cc1b4", "scanner": "scanner-primary", "fingerprint": "d6b05079a5356340", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/data-to-d3/environment/skills/d3-visualization/scripts/check_tooltip.js"}, "region": {"startLine": 45}}}]}, {"ruleId": "scanner-e632a63d18937b20", "level": "error", "message": {"text": "Insecure pattern 'exec_used' in tasks/pddl-tpp-planning/solution/solve.sh:44"}, "properties": {"repobilityId": "789ff1260df4ad4d", "scanner": "scanner-primary", "fingerprint": "e632a63d18937b20", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "exec_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/pddl-tpp-planning/solution/solve.sh"}, "region": {"startLine": 44}}}]}, {"ruleId": "scanner-d73825252806fa52", "level": "note", "message": {"text": "Very large file: experiments/scripts/open_model_scripts/run_opencode_bench_docker_open_models.py (1500 lines)"}, "properties": {"repobilityId": "e45ae376e071d3f1", "scanner": "scanner-primary", "fingerprint": "d73825252806fa52", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-196774003d074279", "level": "note", "message": {"text": "Very large file: experiments/scripts/open_model_scripts/run_opencode_bench_daytona_open_models.py (1504 lines)"}, "properties": {"repobilityId": "760c9c17e905ece6", "scanner": "scanner-primary", "fingerprint": "196774003d074279", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-1ada3068196adac1", "level": "note", "message": {"text": "Very large file: experiments/metrics-dashboard/src/App.tsx (1426 lines)"}, "properties": {"repobilityId": "95cf8742bebed9fb", "scanner": "scanner-primary", "fingerprint": "1ada3068196adac1", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-d7ddc9f5ba547309", "level": "note", "message": {"text": "Very large file: tasks/flink-query/environment/skills/senior-data-engineer/scripts/stream_processor.py (1734 lines)"}, "properties": {"repobilityId": "48081c1a04bae256", "scanner": "scanner-primary", "fingerprint": "d7ddc9f5ba547309", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-782671a9fe1516e6", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: tasks-extra/scheduling-email-assistant/tests/verifier-skills/gmail-skill/package.json"}, "properties": {"repobilityId": "b119edfa5a111502", "scanner": "scanner-primary", "fingerprint": "782671a9fe1516e6", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks-extra/scheduling-email-assistant/tests/verifier-skills/gmail-skill/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7e9c61bbd7e9314c", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: tasks-extra/scheduling-email-assistant/environment/skills/gmail-skill/package.json"}, "properties": {"repobilityId": "4c57a13d47a96e64", "scanner": "scanner-primary", "fingerprint": "7e9c61bbd7e9314c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks-extra/scheduling-email-assistant/environment/skills/gmail-skill/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f075dc47e5723d50", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: tasks-extra/scheduling-email-assistant/environment/skills/google-calendar-skill/package.json"}, "properties": {"repobilityId": "4c79636d2f160207", "scanner": "scanner-primary", "fingerprint": "f075dc47e5723d50", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks-extra/scheduling-email-assistant/environment/skills/google-calendar-skill/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e40f9b4c562a8e0f", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: tasks/fix-visual-stability/environment/api-server/package.json"}, "properties": {"repobilityId": "45f3c24fad54fa7a", "scanner": "scanner-primary", "fingerprint": "e40f9b4c562a8e0f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/fix-visual-stability/environment/api-server/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "841fd9e72c4667f6", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-72b2a6250083a784", "level": "warning", "message": {"text": "Placeholder or mock-heavy implementation detected"}, "properties": {"repobilityId": "ff13ddd3624d1be6", "scanner": "scanner-primary", "fingerprint": "72b2a6250083a784", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "incomplete", "generated-repo-pattern"]}}, {"ruleId": "scanner-2d0c7b7ab8f8aacf", "level": "warning", "message": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "properties": {"repobilityId": "5ac3deac9d6e67b1", "scanner": "scanner-primary", "fingerprint": "2d0c7b7ab8f8aacf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "critical-flow", "generated-repo-pattern"]}}, {"ruleId": "scanner-749d4bc1bd66df5f", "level": "warning", "message": {"text": "Agent instructions exist but release-hardening basics are missing"}, "properties": {"repobilityId": "92112705d1d39be8", "scanner": "scanner-primary", "fingerprint": "749d4bc1bd66df5f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-73961fcf41732ff9", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: tasks-extra/nda-playbook-review/environment/skills/contract-playbook-review/SKILL.md"}, "properties": {"repobilityId": "7a1c30a6ce15f627", "scanner": "scanner-primary", "fingerprint": "73961fcf41732ff9", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks-extra/nda-playbook-review/environment/skills/contract-playbook-review/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-97ca95b7d65b0d13", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: tasks-extra/gpu-cluster-online-scheduling/environment/skills/multi-resource-allocation-validation/SKILL.md"}, "properties": {"repobilityId": "ba4e261d662eaef5", "scanner": "scanner-primary", "fingerprint": "97ca95b7d65b0d13", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks-extra/gpu-cluster-online-scheduling/environment/skills/multi-resource-allocation-validation/SKILL.md"}, "region": {"startLine": 67}}}]}, {"ruleId": "scanner-933a47655959f99a", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: tasks-extra/pedestrian-traffic-counting/environment/skills/gpt-multimodal/SKILL.md"}, "properties": {"repobilityId": "8237a4cedc4c1f2d", "scanner": "scanner-primary", "fingerprint": "933a47655959f99a", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks-extra/pedestrian-traffic-counting/environment/skills/gpt-multimodal/SKILL.md"}, "region": {"startLine": 85}}}]}, {"ruleId": "scanner-ca38ecb505a6e562", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: tasks-extra/find-topk-similiar-chemicals/environment/skills/pubchem-database/SKILL.md"}, "properties": {"repobilityId": "0fe59957b845b359", "scanner": "scanner-primary", "fingerprint": "ca38ecb505a6e562", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks-extra/find-topk-similiar-chemicals/environment/skills/pubchem-database/SKILL.md"}, "region": {"startLine": 178}}}]}, {"ruleId": "scanner-e9b3332843545890", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: tasks-extra/pg-essay-to-audiobook/environment/skills/openai-tts/SKILL.md"}, "properties": {"repobilityId": "dcc7b5ee416787b9", "scanner": "scanner-primary", "fingerprint": "e9b3332843545890", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks-extra/pg-essay-to-audiobook/environment/skills/openai-tts/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-76cb2d437ce189a1", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: tasks-extra/pg-essay-to-audiobook/environment/skills/elevenlabs-tts/SKILL.md"}, "properties": {"repobilityId": "67d50acf2355c3ce", "scanner": "scanner-primary", "fingerprint": "76cb2d437ce189a1", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks-extra/pg-essay-to-audiobook/environment/skills/elevenlabs-tts/SKILL.md"}, "region": {"startLine": 56}}}]}, {"ruleId": "scanner-959c2217b4691662", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: tasks-extra/pg-essay-to-audiobook/environment/skills/elevenlabs-tts/SKILL.md"}, "properties": {"repobilityId": "7762124371cc7601", "scanner": "scanner-primary", "fingerprint": "959c2217b4691662", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks-extra/pg-essay-to-audiobook/environment/skills/elevenlabs-tts/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9c0f053e2a3bb554", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: tasks-extra/pg-essay-to-audiobook/environment/skills/audiobook/SKILL.md"}, "properties": {"repobilityId": "5627f72acdb33179", "scanner": "scanner-primary", "fingerprint": "9c0f053e2a3bb554", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks-extra/pg-essay-to-audiobook/environment/skills/audiobook/SKILL.md"}, "region": {"startLine": 152}}}]}, {"ruleId": "scanner-09a8a405378d0dab", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: tasks-extra/pg-essay-to-audiobook/environment/skills/gtts/SKILL.md"}, "properties": {"repobilityId": "d2659b7f11c28289", "scanner": "scanner-primary", "fingerprint": "09a8a405378d0dab", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks-extra/pg-essay-to-audiobook/environment/skills/gtts/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-33d4a0eb6348c84f", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: tasks-extra/gh-repo-analytics/environment/skills/gh-cli/SKILL.md"}, "properties": {"repobilityId": "375173804c22e8ff", "scanner": "scanner-primary", "fingerprint": "33d4a0eb6348c84f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks-extra/gh-repo-analytics/environment/skills/gh-cli/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-61588ac10efa2c68", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: tasks-extra/diff-transformer_impl/environment/skills/modal-gpu/SKILL.md"}, "properties": {"repobilityId": "d82462afdd43819c", "scanner": "scanner-primary", "fingerprint": "61588ac10efa2c68", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks-extra/diff-transformer_impl/environment/skills/modal-gpu/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-87182a1189de789d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: tasks-extra/video-filler-word-remover/environment/skills/ffmpeg-video-editing/SKILL.md"}, "properties": {"repobilityId": "0caf1d426a6a3dcf", "scanner": "scanner-primary", "fingerprint": "87182a1189de789d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks-extra/video-filler-word-remover/environment/skills/ffmpeg-video-editing/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f50924b5fba739df", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: tasks-extra/video-filler-word-remover/environment/skills/whisper-transcription/SKILL.md"}, "properties": {"repobilityId": "34a417e9647a2bb7", "scanner": "scanner-primary", "fingerprint": "f50924b5fba739df", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks-extra/video-filler-word-remover/environment/skills/whisper-transcription/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7491faf6424740b7", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: tasks-extra/video-tutorial-indexer/environment/skills/speech-to-text/SKILL.md"}, "properties": {"repobilityId": "6e1b1f98f330a575", "scanner": "scanner-primary", "fingerprint": "7491faf6424740b7", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks-extra/video-tutorial-indexer/environment/skills/speech-to-text/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-620f6960e70ca600", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: tasks-extra/speaker-diarization-subtitles/environment/skills/automatic-speech-recognition/SKILL.md"}, "properties": {"repobilityId": "07463471740a8c1d", "scanner": "scanner-primary", "fingerprint": "620f6960e70ca600", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks-extra/speaker-diarization-subtitles/environment/skills/automatic-speech-recognition/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-09e18b3cb928f0c8", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: tasks-extra/speaker-diarization-subtitles/environment/skills/voice-activity-detection/SKILL.md"}, "properties": {"repobilityId": "58782608689c7731", "scanner": "scanner-primary", "fingerprint": "09e18b3cb928f0c8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks-extra/speaker-diarization-subtitles/environment/skills/voice-activity-detection/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e359f90b519a22f3", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: tasks-extra/speaker-diarization-subtitles/environment/skills/multimodal-fusion/SKILL.md"}, "properties": {"repobilityId": "a1dd85cf185d053b", "scanner": "scanner-primary", "fingerprint": "e359f90b519a22f3", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks-extra/speaker-diarization-subtitles/environment/skills/multimodal-fusion/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-09467b21674ac780", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: tasks-extra/mhc-layer-impl/environment/skills/modal-gpu/SKILL.md"}, "properties": {"repobilityId": "dab874983a48df7b", "scanner": "scanner-primary", "fingerprint": "09467b21674ac780", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks-extra/mhc-layer-impl/environment/skills/modal-gpu/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-662653a7a7025286", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: tasks/dapt-intrusion-detection/environment/skills/pcap-analysis/SKILL.md"}, "properties": {"repobilityId": "da79c29acc9c4778", "scanner": "scanner-primary", "fingerprint": "662653a7a7025286", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/dapt-intrusion-detection/environment/skills/pcap-analysis/SKILL.md"}, "region": {"startLine": 318}}}]}, {"ruleId": "scanner-8f225882009a6e08", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: tasks/dapt-intrusion-detection/environment/skills/threat-detection/SKILL.md"}, "properties": {"repobilityId": "ba69ab67126393a1", "scanner": "scanner-primary", "fingerprint": "8f225882009a6e08", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/dapt-intrusion-detection/environment/skills/threat-detection/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7ae1135fde9f115b", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: tasks/lake-warming-attribution/environment/skills/contribution-analysis/SKILL.md"}, "properties": {"repobilityId": "a310c00f734b49e2", "scanner": "scanner-primary", "fingerprint": "7ae1135fde9f115b", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/lake-warming-attribution/environment/skills/contribution-analysis/SKILL.md"}, "region": {"startLine": 71}}}]}, {"ruleId": "scanner-fc4e00eb369362ad", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: tasks/lake-warming-attribution/environment/skills/contribution-analysis/SKILL.md"}, "properties": {"repobilityId": "bf1072451fdcf836", "scanner": "scanner-primary", "fingerprint": "fc4e00eb369362ad", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/lake-warming-attribution/environment/skills/contribution-analysis/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-27df5cc8031570db", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: tasks/lake-warming-attribution/environment/skills/pca-decomposition/SKILL.md"}, "properties": {"repobilityId": "3e1be33c100ba9b1", "scanner": "scanner-primary", "fingerprint": "27df5cc8031570db", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/lake-warming-attribution/environment/skills/pca-decomposition/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8161bc8f079706ff", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: tasks/earthquake-phase-association/environment/skills/seismic-picker-selection/SKILL.md"}, "properties": {"repobilityId": "a90d49e9fc2b9764", "scanner": "scanner-primary", "fingerprint": "8161bc8f079706ff", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/earthquake-phase-association/environment/skills/seismic-picker-selection/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cffd7d3d4fbd1180", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: tasks/earthquake-phase-association/environment/skills/seisbench-model-api/SKILL.md"}, "properties": {"repobilityId": "5709a54caacc39ff", "scanner": "scanner-primary", "fingerprint": "cffd7d3d4fbd1180", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/earthquake-phase-association/environment/skills/seisbench-model-api/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-036af6949bfaff9b", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: tasks/earthquake-phase-association/environment/skills/gamma-phase-associator/SKILL.md"}, "properties": {"repobilityId": "4894a8f780d4b4a5", "scanner": "scanner-primary", "fingerprint": "036af6949bfaff9b", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/earthquake-phase-association/environment/skills/gamma-phase-associator/SKILL.md"}, "region": {"startLine": 18}}}]}, {"ruleId": "scanner-f4c4d5fc8fa89e8c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: tasks/simpo-code-reproduction/environment/skills/nlp-research-repo-package-installment/SKILL.md"}, "properties": {"repobilityId": "327782c7ea9a0014", "scanner": "scanner-primary", "fingerprint": "f4c4d5fc8fa89e8c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/simpo-code-reproduction/environment/skills/nlp-research-repo-package-installment/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1cce8639930dd751", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: tasks/simpo-code-reproduction/environment/skills/nlp-research-repo-package-installment/SKILL.md"}, "properties": {"repobilityId": "0a6ff087c675dcc9", "scanner": "scanner-primary", "fingerprint": "1cce8639930dd751", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/simpo-code-reproduction/environment/skills/nlp-research-repo-package-installment/SKILL.md"}, "region": {"startLine": 31}}}]}, {"ruleId": "scanner-88e5476171d1e416", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: tasks/exoplanet-detection-period/environment/skills/lomb-scargle-periodogram/SKILL.md"}, "properties": {"repobilityId": "272060db321b5b85", "scanner": "scanner-primary", "fingerprint": "88e5476171d1e416", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/exoplanet-detection-period/environment/skills/lomb-scargle-periodogram/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cd616cd02039344f", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: tasks/exoplanet-detection-period/environment/skills/transit-least-squares/SKILL.md"}, "properties": {"repobilityId": "8f183db8c528de48", "scanner": "scanner-primary", "fingerprint": "cd616cd02039344f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/exoplanet-detection-period/environment/skills/transit-least-squares/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f58ec17ad4effcb2", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: tasks/syzkaller-ppdev-syzlang/environment/skills/syzlang-ioctl-basics/SKILL.md"}, "properties": {"repobilityId": "abc21a0eb37f5981", "scanner": "scanner-primary", "fingerprint": "f58ec17ad4effcb2", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/syzkaller-ppdev-syzlang/environment/skills/syzlang-ioctl-basics/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e89f6e9b1eca9390", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: tasks/seismic-phase-picking/environment/skills/seismic-picker-selection/SKILL.md"}, "properties": {"repobilityId": "0716051cbda3dbd1", "scanner": "scanner-primary", "fingerprint": "e89f6e9b1eca9390", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/seismic-phase-picking/environment/skills/seismic-picker-selection/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6a5e59c46e8ca914", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: tasks/seismic-phase-picking/environment/skills/seisbench-model-api/SKILL.md"}, "properties": {"repobilityId": "6bd06e3220e99bab", "scanner": "scanner-primary", "fingerprint": "6a5e59c46e8ca914", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/seismic-phase-picking/environment/skills/seisbench-model-api/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-90c713342265b2b2", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: tasks/fix-build-google-auto/environment/skills/maven-plugin-configuration/SKILL.md"}, "properties": {"repobilityId": "462cee0ba95e026d", "scanner": "scanner-primary", "fingerprint": "90c713342265b2b2", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/fix-build-google-auto/environment/skills/maven-plugin-configuration/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3506fb9b45f66eaf", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: tasks/fix-build-google-auto/environment/skills/maven-build-lifecycle/SKILL.md"}, "properties": {"repobilityId": "856c37243678d179", "scanner": "scanner-primary", "fingerprint": "3506fb9b45f66eaf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/fix-build-google-auto/environment/skills/maven-build-lifecycle/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2d4fe0a6f824d43a", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: tasks/debug-trl-grpo/environment/skills/rl-post-training/SKILL.md"}, "properties": {"repobilityId": "3bf7834cda0c8e8b", "scanner": "scanner-primary", "fingerprint": "2d4fe0a6f824d43a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/debug-trl-grpo/environment/skills/rl-post-training/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fcb736b694ce2a6f", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: tasks/video-silence-remover/environment/skills/audio-extractor/SKILL.md"}, "properties": {"repobilityId": "b74c26db5d2764e9", "scanner": "scanner-primary", "fingerprint": "fcb736b694ce2a6f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/video-silence-remover/environment/skills/audio-extractor/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7f76680aac84325b", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: tasks/video-silence-remover/environment/skills/silence-detector/SKILL.md"}, "properties": {"repobilityId": "47bbbd3835f56f07", "scanner": "scanner-primary", "fingerprint": "7f76680aac84325b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/video-silence-remover/environment/skills/silence-detector/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e8ea72e26b5a54ed", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: tasks/video-silence-remover/environment/skills/pause-detector/SKILL.md"}, "properties": {"repobilityId": "6499bba71f77e9d0", "scanner": "scanner-primary", "fingerprint": "e8ea72e26b5a54ed", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/video-silence-remover/environment/skills/pause-detector/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b7be310e3d61406a", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: tasks/video-silence-remover/environment/skills/energy-calculator/SKILL.md"}, "properties": {"repobilityId": "f12f34e76bb063eb", "scanner": "scanner-primary", "fingerprint": "b7be310e3d61406a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/video-silence-remover/environment/skills/energy-calculator/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-299b37a91841182d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: tasks/video-silence-remover/environment/skills/report-generator/SKILL.md"}, "properties": {"repobilityId": "a42ab4d695b207f5", "scanner": "scanner-primary", "fingerprint": "299b37a91841182d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/video-silence-remover/environment/skills/report-generator/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3269b6e108dd1fc2", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: tasks/video-silence-remover/environment/skills/segment-combiner/SKILL.md"}, "properties": {"repobilityId": "397b1eb83c2f9823", "scanner": "scanner-primary", "fingerprint": "3269b6e108dd1fc2", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/video-silence-remover/environment/skills/segment-combiner/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e9916dfe3d2ad953", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: tasks/exceltable-in-ppt/environment/skills/pptx/SKILL.md"}, "properties": {"repobilityId": "c6d07717e7aff863", "scanner": "scanner-primary", "fingerprint": "e9916dfe3d2ad953", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/exceltable-in-ppt/environment/skills/pptx/SKILL.md"}, "region": {"startLine": 478}}}]}, {"ruleId": "scanner-f22cc84608230c27", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: tasks/suricata-custom-exfil/environment/skills/pcap-triage-tshark/SKILL.md"}, "properties": {"repobilityId": "cd6348e8dc8c22ed", "scanner": "scanner-primary", "fingerprint": "f22cc84608230c27", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/suricata-custom-exfil/environment/skills/pcap-triage-tshark/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-13fc9e4525a1aabe", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: tasks/suricata-custom-exfil/environment/skills/suricata-offline-evejson/SKILL.md"}, "properties": {"repobilityId": "414ca5451ff2e04b", "scanner": "scanner-primary", "fingerprint": "13fc9e4525a1aabe", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/suricata-custom-exfil/environment/skills/suricata-offline-evejson/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e81f186627671a3c", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: tasks/python-scala-translation/environment/skills/python-scala-collections/SKILL.md"}, "properties": {"repobilityId": "e62300a71d90e45e", "scanner": "scanner-primary", "fingerprint": "e81f186627671a3c", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/python-scala-translation/environment/skills/python-scala-collections/SKILL.md"}, "region": {"startLine": 188}}}]}, {"ruleId": "scanner-75a3ede4e92b9def", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: tasks/manufacturing-equipment-maintenance/environment/skills/reflow-machine-maintenance-guidance/SKILL.md"}, "properties": {"repobilityId": "d83a96b03f5d4a5b", "scanner": "scanner-primary", "fingerprint": "75a3ede4e92b9def", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/manufacturing-equipment-maintenance/environment/skills/reflow-machine-maintenance-guidance/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2fb53972d64ca660", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: tasks/fix-erlang-ssh-cve/environment/skills/find-bugs/SKILL.md"}, "properties": {"repobilityId": "f86fec38795bceed", "scanner": "scanner-primary", "fingerprint": "2fb53972d64ca660", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/fix-erlang-ssh-cve/environment/skills/find-bugs/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bad409628bb2cfdd", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: tasks/fix-erlang-ssh-cve/environment/skills/erlang-distribution/SKILL.md"}, "properties": {"repobilityId": "ad4db3201035242a", "scanner": "scanner-primary", "fingerprint": "bad409628bb2cfdd", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/fix-erlang-ssh-cve/environment/skills/erlang-distribution/SKILL.md"}, "region": {"startLine": 295}}}]}, {"ruleId": "scanner-645f8e909505bbf0", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: tasks/hvac-control/environment/skills/safety-interlocks/SKILL.md"}, "properties": {"repobilityId": "59fe256a2cc06991", "scanner": "scanner-primary", "fingerprint": "645f8e909505bbf0", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/hvac-control/environment/skills/safety-interlocks/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2ac9d32e763b348f", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: tasks/latex-formula-extraction/environment/skills/marker/SKILL.md"}, "properties": {"repobilityId": "352bb69375806f43", "scanner": "scanner-primary", "fingerprint": "2ac9d32e763b348f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/latex-formula-extraction/environment/skills/marker/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-63f375e09d42049b", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: tasks/multilingual-video-dubbing/environment/skills/ffmpeg-audio-processing/SKILL.md"}, "properties": {"repobilityId": "e775a4cdfe5d5c51", "scanner": "scanner-primary", "fingerprint": "63f375e09d42049b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/multilingual-video-dubbing/environment/skills/ffmpeg-audio-processing/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3074e506fd3eed8c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: tasks/multilingual-video-dubbing/environment/skills/ffmpeg-video-filters/SKILL.md"}, "properties": {"repobilityId": "ed5fecaba80357db", "scanner": "scanner-primary", "fingerprint": "3074e506fd3eed8c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/multilingual-video-dubbing/environment/skills/ffmpeg-video-filters/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c8525704e8626129", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: tasks/multilingual-video-dubbing/environment/skills/ffmpeg-format-conversion/SKILL.md"}, "properties": {"repobilityId": "fab0a9a963cc4970", "scanner": "scanner-primary", "fingerprint": "c8525704e8626129", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/multilingual-video-dubbing/environment/skills/ffmpeg-format-conversion/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4241131a2779ce36", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: tasks/multilingual-video-dubbing/environment/skills/ffmpeg-video-editing/SKILL.md"}, "properties": {"repobilityId": "51fbfb1c0e277211", "scanner": "scanner-primary", "fingerprint": "4241131a2779ce36", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/multilingual-video-dubbing/environment/skills/ffmpeg-video-editing/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-efeff2fe62bea712", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: tasks/pptx-reference-formatting/environment/skills/pptx/SKILL.md"}, "properties": {"repobilityId": "68a0da17b7535ab0", "scanner": "scanner-primary", "fingerprint": "efeff2fe62bea712", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/pptx-reference-formatting/environment/skills/pptx/SKILL.md"}, "region": {"startLine": 478}}}]}, {"ruleId": "scanner-08ceb6a6050570aa", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: tasks/mario-coin-counting/environment/skills/image-editing/SKILL.md"}, "properties": {"repobilityId": "8cc9d3eb93bfec7d", "scanner": "scanner-primary", "fingerprint": "08ceb6a6050570aa", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/mario-coin-counting/environment/skills/image-editing/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5da4c4e0b21f9548", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: tasks/mario-coin-counting/environment/skills/ffmpeg-keyframe-extraction/SKILL.md"}, "properties": {"repobilityId": "873e106f5cfbeefb", "scanner": "scanner-primary", "fingerprint": "5da4c4e0b21f9548", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/mario-coin-counting/environment/skills/ffmpeg-keyframe-extraction/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2225cfc3b02d1e81", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: tasks/mario-coin-counting/environment/skills/object-counter/SKILL.md"}, "properties": {"repobilityId": "4b7a162ad6ca4dba", "scanner": "scanner-primary", "fingerprint": "2225cfc3b02d1e81", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/mario-coin-counting/environment/skills/object-counter/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-dfa68e5b2d51da22", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: tasks/threejs-to-obj/environment/skills/obj-exporter/SKILL.md"}, "properties": {"repobilityId": "5cefb50f012ae599", "scanner": "scanner-primary", "fingerprint": "dfa68e5b2d51da22", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/threejs-to-obj/environment/skills/obj-exporter/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-193fa82ec941b982", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: tasks/fix-build-agentops/environment/skills/testing-python/SKILL.md"}, "properties": {"repobilityId": "bd2964a7c310add6", "scanner": "scanner-primary", "fingerprint": "193fa82ec941b982", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/fix-build-agentops/environment/skills/testing-python/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-18ed6201ded5d0ed", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: tasks/fix-build-agentops/environment/skills/uv-package-manager/SKILL.md"}, "properties": {"repobilityId": "999b6251ffa22755", "scanner": "scanner-primary", "fingerprint": "18ed6201ded5d0ed", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/fix-build-agentops/environment/skills/uv-package-manager/SKILL.md"}, "region": {"startLine": 55}}}]}, {"ruleId": "scanner-d9d19f29783265ba", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: tasks/glm-lake-mendota/environment/skills/glm-calibration/SKILL.md"}, "properties": {"repobilityId": "cd4f21feb3bd4525", "scanner": "scanner-primary", "fingerprint": "d9d19f29783265ba", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/glm-lake-mendota/environment/skills/glm-calibration/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-934d086fb68e2e61", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: tasks/setup-fuzzing-py/environment/skills/discover-important-function/SKILL.md"}, "properties": {"repobilityId": "9ab6a4feab7a4bbc", "scanner": "scanner-primary", "fingerprint": "934d086fb68e2e61", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/setup-fuzzing-py/environment/skills/discover-important-function/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f2588c519f81b76d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: tasks/setup-fuzzing-py/environment/skills/fuzzing-python/SKILL.md"}, "properties": {"repobilityId": "593af49f0dadbdb6", "scanner": "scanner-primary", "fingerprint": "f2588c519f81b76d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/setup-fuzzing-py/environment/skills/fuzzing-python/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-472124452a253986", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: tasks/organize-messy-files/environment/skills/pptx/SKILL.md"}, "properties": {"repobilityId": "eb172e111be4dd79", "scanner": "scanner-primary", "fingerprint": "472124452a253986", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/organize-messy-files/environment/skills/pptx/SKILL.md"}, "region": {"startLine": 478}}}]}, {"ruleId": "scanner-09233a97c7749d78", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: tasks/organize-messy-files/environment/skills/docx/SKILL.md"}, "properties": {"repobilityId": "428ed76409839253", "scanner": "scanner-primary", "fingerprint": "09233a97c7749d78", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/organize-messy-files/environment/skills/docx/SKILL.md"}, "region": {"startLine": 194}}}]}, {"ruleId": "scanner-5e7ee66d971b5460", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: tasks/flood-risk-analysis/environment/skills/usgs-data-download/SKILL.md"}, "properties": {"repobilityId": "d527358f51e0b56c", "scanner": "scanner-primary", "fingerprint": "5e7ee66d971b5460", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/flood-risk-analysis/environment/skills/usgs-data-download/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-57fb65c118cf2abf", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: tasks/sec-financial-report/environment/skills/fuzzy-name-search/SKILL.md"}, "properties": {"repobilityId": "d2812b19abed718e", "scanner": "scanner-primary", "fingerprint": "57fb65c118cf2abf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/sec-financial-report/environment/skills/fuzzy-name-search/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-216dbe5744f5f676", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: tasks/sec-financial-report/environment/skills/13f-analyzer/SKILL.md"}, "properties": {"repobilityId": "b87cf8b7b0bf2138", "scanner": "scanner-primary", "fingerprint": "216dbe5744f5f676", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/sec-financial-report/environment/skills/13f-analyzer/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-be35f32819a070bc", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: tasks/econ-detrending-correlation/environment/skills/timeseries-detrending/SKILL.md"}, "properties": {"repobilityId": "4e9ec19d9aa08380", "scanner": "scanner-primary", "fingerprint": "be35f32819a070bc", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/econ-detrending-correlation/environment/skills/timeseries-detrending/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-41e52767170b66ba", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: tasks/r2r-mpc-control/environment/skills/mpc-horizon-tuning/SKILL.md"}, "properties": {"repobilityId": "0be355623a1086a0", "scanner": "scanner-primary", "fingerprint": "41e52767170b66ba", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/r2r-mpc-control/environment/skills/mpc-horizon-tuning/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f5a7387bb381205c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: tasks/jax-computing-basics/environment/skills/jax-skills/SKILL.md"}, "properties": {"repobilityId": "4bad5881ada180ad", "scanner": "scanner-primary", "fingerprint": "f5a7387bb381205c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/jax-computing-basics/environment/skills/jax-skills/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c455b320601c5699", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: tasks/threejs-structure-parser/environment/skills/obj-exporter/SKILL.md"}, "properties": {"repobilityId": "41edd9c6f6618ea5", "scanner": "scanner-primary", "fingerprint": "c455b320601c5699", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/threejs-structure-parser/environment/skills/obj-exporter/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-dd3d423c554cfa24", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: tasks/travel-planning/environment/skills/search-driving-distance/SKILL.md"}, "properties": {"repobilityId": "004b25913b6c34b7", "scanner": "scanner-primary", "fingerprint": "dd3d423c554cfa24", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/travel-planning/environment/skills/search-driving-distance/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0c1277c1e9980d22", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: tasks/travel-planning/environment/skills/search-attractions/SKILL.md"}, "properties": {"repobilityId": "11022e606c391e1c", "scanner": "scanner-primary", "fingerprint": "0c1277c1e9980d22", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/travel-planning/environment/skills/search-attractions/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-432de74d2b256b4e", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: tasks/travel-planning/environment/skills/search-accommodations/SKILL.md"}, "properties": {"repobilityId": "8a9b5167ded000f7", "scanner": "scanner-primary", "fingerprint": "432de74d2b256b4e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/travel-planning/environment/skills/search-accommodations/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2559c5af79d67ccd", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: tasks/travel-planning/environment/skills/search-restaurants/SKILL.md"}, "properties": {"repobilityId": "d532b86c3bb44e8a", "scanner": "scanner-primary", "fingerprint": "2559c5af79d67ccd", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/travel-planning/environment/skills/search-restaurants/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-203e3ae92fc2c4c5", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: tasks/travel-planning/environment/skills/search-cities/SKILL.md"}, "properties": {"repobilityId": "177d75e4d994e0ef", "scanner": "scanner-primary", "fingerprint": "203e3ae92fc2c4c5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/travel-planning/environment/skills/search-cities/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-675e9cca0374ce21", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: tasks/travel-planning/environment/skills/search-flights/SKILL.md"}, "properties": {"repobilityId": "6fb0daee3e89770b", "scanner": "scanner-primary", "fingerprint": "675e9cca0374ce21", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/travel-planning/environment/skills/search-flights/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a2a4448f30c18a54", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: tasks/radar-vital-signs/environment/skills/vital-sign-extraction/SKILL.md"}, "properties": {"repobilityId": "692a3ebf24c39261", "scanner": "scanner-primary", "fingerprint": "a2a4448f30c18a54", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/radar-vital-signs/environment/skills/vital-sign-extraction/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-37f7f0f9e5b2bb35", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: tasks/radar-vital-signs/environment/skills/radar-vital-signs/SKILL.md"}, "properties": {"repobilityId": "ffe64267ac03aaae", "scanner": "scanner-primary", "fingerprint": "37f7f0f9e5b2bb35", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/radar-vital-signs/environment/skills/radar-vital-signs/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5f6514847b07d3be", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: tasks/quantum-numerical-simulation/environment/skills/qutip/SKILL.md"}, "properties": {"repobilityId": "26476c6b00555af3", "scanner": "scanner-primary", "fingerprint": "5f6514847b07d3be", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/quantum-numerical-simulation/environment/skills/qutip/SKILL.md"}, "region": {"startLine": 312}}}]}, {"ruleId": "scanner-28e6e36fe91dde64", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: tasks/drone-planning-control/environment/skills/plot-quadrotor/SKILL.md"}, "properties": {"repobilityId": "00a05ffb9a042018", "scanner": "scanner-primary", "fingerprint": "28e6e36fe91dde64", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/drone-planning-control/environment/skills/plot-quadrotor/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b43ed29ce7326aa5", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: tasks/drone-planning-control/environment/skills/flight-plan-parser/SKILL.md"}, "properties": {"repobilityId": "bd742d8ec2e80937", "scanner": "scanner-primary", "fingerprint": "b43ed29ce7326aa5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/drone-planning-control/environment/skills/flight-plan-parser/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f933386a03723159", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: tasks/drone-planning-control/environment/skills/stepinfo-3d/SKILL.md"}, "properties": {"repobilityId": "4be49f5fd7ffec36", "scanner": "scanner-primary", "fingerprint": "f933386a03723159", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tasks/drone-planning-control/environment/skills/stepinfo-3d/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ecb0d2c55ed6875d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/settings.local.json"}, "properties": {"repobilityId": "d8bae33a6d517bf0", "scanner": "scanner-primary", "fingerprint": "ecb0d2c55ed6875d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/settings.local.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d977acc21e8e0f7b", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 experiments/scripts/run_opencode_daytona_ablation.py:142"}, "properties": {"repobilityId": "e9856ee1092b7670", "scanner": "scanner-primary", "fingerprint": "d977acc21e8e0f7b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-be03e34701dd1156", "level": "note", "message": {"text": "Legacy-named symbol `hardlink_or_copy` in experiments/scripts/run_benchflow_integration.py:228"}, "properties": {"repobilityId": "7fa7a1d9a86721a5", "scanner": "scanner-primary", "fingerprint": "be03e34701dd1156", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-9f18cedb60945cdd", "level": "note", "message": {"text": "Legacy-named symbol `hardlink_or_copy` in experiments/scripts/open_model_scripts/run_opencode_bench_docker_open_models.py:450"}, "properties": {"repobilityId": "b90816e1d41c7692", "scanner": "scanner-primary", "fingerprint": "9f18cedb60945cdd", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-9826e921243c64d2", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 experiments/scripts/open_model_scripts/run_opencode_bench_docker_open_models.py:324"}, "properties": {"repobilityId": "8218124c447106e3", "scanner": "scanner-primary", "fingerprint": "9826e921243c64d2", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-6a7b578782e62d31", "level": "note", "message": {"text": "Legacy-named symbol `hardlink_or_copy` in experiments/scripts/open_model_scripts/run_opencode_bench_daytona_open_models.py:468"}, "properties": {"repobilityId": "eeac0e6c3198e068", "scanner": "scanner-primary", "fingerprint": "6a7b578782e62d31", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-699fb0c83ae2c33a", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 experiments/scripts/open_model_scripts/run_opencode_bench_daytona_open_models.py:329"}, "properties": {"repobilityId": "4796602f5bea9b15", "scanner": "scanner-primary", "fingerprint": "699fb0c83ae2c33a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-5b5fb59b8f0a04b5", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 experiments/scripts/open_model_scripts/export_leaderboard_submission.py:96"}, "properties": {"repobilityId": "ff48ff751bb1a69b", "scanner": "scanner-primary", "fingerprint": "5b5fb59b8f0a04b5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-17fc799babba7edc", "level": "note", "message": {"text": "Legacy-named symbol `hardlink_or_copy` in experiments/scripts/gcp_setup/run_opencode_gcp_docker_ablation.py:253"}, "properties": {"repobilityId": "3ca885811072cfca", "scanner": "scanner-primary", "fingerprint": "17fc799babba7edc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-3990bf4f5b76f897", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 experiments/scripts/gcp_setup/run_opencode_gcp_docker_ablation.py:168"}, "properties": {"repobilityId": "111a8f069a021dcb", "scanner": "scanner-primary", "fingerprint": "3990bf4f5b76f897", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-51ffb437579a0e2e", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 experiments/metrics-dashboard/src/App.tsx:718"}, "properties": {"repobilityId": "389bdbe26ed1c55f", "scanner": "scanner-primary", "fingerprint": "51ffb437579a0e2e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-b27392e9f22b0db1", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 experiments/metrics-dashboard/src/components/SystemInfoPanel.tsx:91"}, "properties": {"repobilityId": "346326a55fd55a23", "scanner": "scanner-primary", "fingerprint": "b27392e9f22b0db1", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-3ccff3d4bd39faf3", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 experiments/metrics-dashboard/src/components/TrialFilesPanel.tsx:92"}, "properties": {"repobilityId": "bf332c37d85836e4", "scanner": "scanner-primary", "fingerprint": "3ccff3d4bd39faf3", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-e25e7e1e584442bc", "level": "none", "message": {"text": "Commented-code block (8 lines) in website/scripts/generate-tasks-registry.ts:75"}, "properties": {"repobilityId": "2be40e63a5d31119", "scanner": "scanner-primary", "fingerprint": "e25e7e1e584442bc", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-fad664c319bd8de1", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 website/src/app/opengraph-image.tsx:19"}, "properties": {"repobilityId": "3bd3549bcd52f32e", "scanner": "scanner-primary", "fingerprint": "fad664c319bd8de1", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-0df5abbaea26db62", "level": "none", "message": {"text": "Commented-code block (7 lines) in website/src/components/GradientBlinds.tsx:315"}, "properties": {"repobilityId": "b817ee48ced27398", "scanner": "scanner-primary", "fingerprint": "0df5abbaea26db62", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-297b7ba97973861a", "level": "none", "message": {"text": "Commented-code block (8 lines) in website/src/components/Squares.tsx:72"}, "properties": {"repobilityId": "092ed6103f548fc8", "scanner": "scanner-primary", "fingerprint": "297b7ba97973861a", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-4009a75351594800", "level": "none", "message": {"text": "Commented-code block (5 lines) in tasks-extra/nda-playbook-review/tests/test_outputs.py:32"}, "properties": {"repobilityId": "60609b7e2d828a82", "scanner": "scanner-primary", "fingerprint": "4009a75351594800", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-0a5acaf83ef9964e", "level": "none", "message": {"text": "Commented-code block (5 lines) in tasks-extra/find-topk-similiar-chemicals/environment/skills/pdf/scripts/extract_form_field_info.py:56"}, "properties": {"repobilityId": "893abcd4dd9cedfa", "scanner": "scanner-primary", "fingerprint": "0a5acaf83ef9964e", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-e468dcb1c77b7e0e", "level": "none", "message": {"text": "Commented-code block (6 lines) in tasks-extra/cobol-gl-batch-reconcile/scripts/regenerate_fixtures.py:41"}, "properties": {"repobilityId": "b7b838de01210333", "scanner": "scanner-primary", "fingerprint": "e468dcb1c77b7e0e", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-d7ce313c9e3841b7", "level": "none", "message": {"text": "Commented-code block (5 lines) in tasks-extra/taxonomy-tree-merge/tests/test_outputs.py:270"}, "properties": {"repobilityId": "d6e885282d3abb62", "scanner": "scanner-primary", "fingerprint": "d7ce313c9e3841b7", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-eaf3c5852ae1bb10", "level": "none", "message": {"text": "Commented-code block (8 lines) in tasks-extra/taxonomy-tree-merge/environment/skills/hierarchical-taxonomy-clustering/scripts/step1_preprocessing_and_merge.py:75"}, "properties": {"repobilityId": "85afa54888565daf", "scanner": "scanner-primary", "fingerprint": "eaf3c5852ae1bb10", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-8c9f0c1ae769286a", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 tasks-extra/video-tutorial-indexer/environment/skills/speech-to-text/scripts/transcribe.py:40"}, "properties": {"repobilityId": "b9b6c690569569fc", "scanner": "scanner-primary", "fingerprint": "8c9f0c1ae769286a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-0897b8ba0f8a4e8f", "level": "none", "message": {"text": "Commented-code block (7 lines) in tasks-extra/speaker-diarization-subtitles/tests/test_outputs.py:15"}, "properties": {"repobilityId": "81ce6152d74f165a", "scanner": "scanner-primary", "fingerprint": "0897b8ba0f8a4e8f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-844cb06a2cf6d707", "level": "none", "message": {"text": "Commented-code block (5 lines) in tasks/dialogue-parser/tests/test_outputs.py:253"}, "properties": {"repobilityId": "85686e95757ec18a", "scanner": "scanner-primary", "fingerprint": "844cb06a2cf6d707", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-190a316e51b17721", "level": "none", "message": {"text": "Commented-code block (6 lines) in tasks/dialogue-parser/solution/solution.py:118"}, "properties": {"repobilityId": "1aac8a8dd0bcd1e3", "scanner": "scanner-primary", "fingerprint": "190a316e51b17721", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-79ce9e4459a7e899", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 tasks/protein-expression-analysis/environment/skills/xlsx/recalc.py:94"}, "properties": {"repobilityId": "0d229e7322f520e8", "scanner": "scanner-primary", "fingerprint": "79ce9e4459a7e899", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-5186b4aa41984b5f", "level": "none", "message": {"text": "Commented-code block (12 lines) in tasks/simpo-code-reproduction/environment/SimPO/scripts/run_simpo.py:224"}, "properties": {"repobilityId": "ad8146261ad1f159", "scanner": "scanner-primary", "fingerprint": "5186b4aa41984b5f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-05e91f352ea0507e", "level": "none", "message": {"text": "Commented-code block (10 lines) in tasks/simpo-code-reproduction/environment/SimPO/scripts/simpo_trainer.py:96"}, "properties": {"repobilityId": "65d54fab4079c644", "scanner": "scanner-primary", "fingerprint": "05e91f352ea0507e", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-dc03323385670073", "level": "none", "message": {"text": "Commented-code block (5 lines) in tasks/simpo-code-reproduction/environment/SimPO/alignment/data.py:159"}, "properties": {"repobilityId": "a23a9d4c8ad4343f", "scanner": "scanner-primary", "fingerprint": "dc03323385670073", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-03415c9026f174b6", "level": "none", "message": {"text": "Commented-code block (5 lines) in tasks/simpo-code-reproduction/environment/skills/pdf/scripts/extract_form_field_info.py:56"}, "properties": {"repobilityId": "eb805595d55dfe16", "scanner": "scanner-primary", "fingerprint": "03415c9026f174b6", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-6cadba0ec0058fc7", "level": "none", "message": {"text": "Commented-code block (5 lines) in tasks/software-dependency-audit/solution/solution.py:34"}, "properties": {"repobilityId": "25a1a948780886f0", "scanner": "scanner-primary", "fingerprint": "6cadba0ec0058fc7", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-41b2d3204a289542", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 tasks/xlsx-recover-data/environment/skills/xlsx/recalc.py:94"}, "properties": {"repobilityId": "948c43f9c33e2e57", "scanner": "scanner-primary", "fingerprint": "41b2d3204a289542", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-b525cd6883b4ae50", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 tasks/react-performance-debugging/environment/website/src/services/api-client.ts:8"}, "properties": {"repobilityId": "659fc16f9f5a8983", "scanner": "scanner-primary", "fingerprint": "b525cd6883b4ae50", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-38f4d5641d46e114", "level": "none", "message": {"text": "Commented-code block (6 lines) in tasks/react-performance-debugging/environment/skills/browser-testing/measure.ts:53"}, "properties": {"repobilityId": "907cc8c3bfdfeef6", "scanner": "scanner-primary", "fingerprint": "38f4d5641d46e114", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-557199907273fd50", "level": "none", "message": {"text": "Commented-code block (5 lines) in tasks/court-form-filling/tests/test_outputs.py:219"}, "properties": {"repobilityId": "40b1d0754d663db8", "scanner": "scanner-primary", "fingerprint": "557199907273fd50", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-36dd4d4f079cf829", "level": "none", "message": {"text": "Commented-code block (5 lines) in tasks/court-form-filling/environment/skills/pdf/scripts/extract_form_field_info.py:60"}, "properties": {"repobilityId": "4bbd63cc5025cfa2", "scanner": "scanner-primary", "fingerprint": "36dd4d4f079cf829", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-46e65b3f6ca4ce76", "level": "note", "message": {"text": "Legacy-named symbol `exp_old` in tasks/pdf-excel-diff/tests/test_outputs.py:150"}, "properties": {"repobilityId": "b18176be8d991dbc", "scanner": "scanner-primary", "fingerprint": "46e65b3f6ca4ce76", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-c2de9de4267232bf", "level": "none", "message": {"text": "Commented-code block (5 lines) in tasks/pdf-excel-diff/environment/skills/pdf/scripts/extract_form_field_info.py:60"}, "properties": {"repobilityId": "ee7064ebf4e29baf", "scanner": "scanner-primary", "fingerprint": "c2de9de4267232bf", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-61fcb13dbd8be6fb", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 tasks/pdf-excel-diff/environment/skills/xlsx/recalc.py:94"}, "properties": {"repobilityId": "9cc800ac44a703be", "scanner": "scanner-primary", "fingerprint": "61fcb13dbd8be6fb", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-3e3b6b4a5e554839", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 tasks/fix-visual-stability/environment/app/src/components/SidePane.tsx:11"}, "properties": {"repobilityId": "9af5e30479e0b84e", "scanner": "scanner-primary", "fingerprint": "3e3b6b4a5e554839", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-9b3045baa7cfde89", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 tasks/fix-visual-stability/environment/app/src/components/ResultsBar.tsx:19"}, "properties": {"repobilityId": "ece4f9cfb6e95299", "scanner": "scanner-primary", "fingerprint": "9b3045baa7cfde89", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-a8a7ecc845109613", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 tasks/fix-visual-stability/environment/app/src/components/ProductList.tsx:20"}, "properties": {"repobilityId": "11886de4800f5f85", "scanner": "scanner-primary", "fingerprint": "a8a7ecc845109613", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-365d2f436567aa21", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 tasks/fix-visual-stability/environment/app/src/components/Banner.tsx:11"}, "properties": {"repobilityId": "eec644e66784d2d5", "scanner": "scanner-primary", "fingerprint": "365d2f436567aa21", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-dadb9c4ecf229cae", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 tasks/fix-visual-stability/environment/app/src/components/LateBanner.tsx:11"}, "properties": {"repobilityId": "4d59c9b8bff171d8", "scanner": "scanner-primary", "fingerprint": "dadb9c4ecf229cae", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-d59882a3c8b103bf", "level": "none", "message": {"text": "Commented-code block (6 lines) in tasks/fix-visual-stability/environment/skills/browser-testing/measure.ts:53"}, "properties": {"repobilityId": "dfeb13a1dfa195c9", "scanner": "scanner-primary", "fingerprint": "d59882a3c8b103bf", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-0a6c909961cf62a3", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 tasks/video-silence-remover/environment/skills/audio-extractor/scripts/extract_audio.py:31"}, "properties": {"repobilityId": "6727e4fbe64e09ce", "scanner": "scanner-primary", "fingerprint": "0a6c909961cf62a3", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-70cbdaeb49bbf15c", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 tasks/video-silence-remover/environment/skills/report-generator/scripts/generate_report.py:13"}, "properties": {"repobilityId": "e57dcf36d5f5acf0", "scanner": "scanner-primary", "fingerprint": "70cbdaeb49bbf15c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-c5bd2eb3ec7c514b", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 tasks/video-silence-remover/environment/skills/video-processor/scripts/process_video.py:14"}, "properties": {"repobilityId": "4b8d0dabc20d99de", "scanner": "scanner-primary", "fingerprint": "c5bd2eb3ec7c514b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-fd8325df42794f18", "level": "none", "message": {"text": "Commented-code block (6 lines) in tasks/exceltable-in-ppt/environment/skills/pptx/scripts/thumbnail.py:32"}, "properties": {"repobilityId": "7898d2372928a164", "scanner": "scanner-primary", "fingerprint": "fd8325df42794f18", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-7e855f9f15c7a1ac", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 tasks/exceltable-in-ppt/environment/skills/pptx/scripts/thumbnail.py:219"}, "properties": {"repobilityId": "06684e9ba8c4df7e", "scanner": "scanner-primary", "fingerprint": "7e855f9f15c7a1ac", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-498b7f6900b85343", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 tasks/exceltable-in-ppt/environment/skills/pptx/ooxml/scripts/validation/redlining.py:153"}, "properties": {"repobilityId": "382b49a5fe54af3e", "scanner": "scanner-primary", "fingerprint": "498b7f6900b85343", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-1c6324f3d18b37a5", "level": "note", "message": {"text": "Legacy-named symbol `xml_copy` in tasks/exceltable-in-ppt/environment/skills/pptx/ooxml/scripts/validation/base.py:769"}, "properties": {"repobilityId": "a69373b789bfa5de", "scanner": "scanner-primary", "fingerprint": "1c6324f3d18b37a5", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-af58d4060aa77a83", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 tasks/exceltable-in-ppt/environment/skills/xlsx/recalc.py:92"}, "properties": {"repobilityId": "2a9d08534c8049b0", "scanner": "scanner-primary", "fingerprint": "af58d4060aa77a83", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-65a8dba355b82320", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 tasks/reserves-at-risk-calc/environment/skills/xlsx/recalc.py:94"}, "properties": {"repobilityId": "fb46e39a63f01ed5", "scanner": "scanner-primary", "fingerprint": "65a8dba355b82320", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-fa97040e822bffef", "level": "none", "message": {"text": "Commented-code block (5 lines) in tasks/financial-modeling-qa/environment/skills/pdf/scripts/extract_form_field_info.py:56"}, "properties": {"repobilityId": "8758b55d75b9e1dd", "scanner": "scanner-primary", "fingerprint": "fa97040e822bffef", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-97821a7396dba939", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 tasks/financial-modeling-qa/environment/skills/xlsx/recalc.py:92"}, "properties": {"repobilityId": "de0ccad74391f9be", "scanner": "scanner-primary", "fingerprint": "97821a7396dba939", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-a7a82cf6d8b64194", "level": "none", "message": {"text": "Commented-code block (7 lines) in tasks/pddl-airport-planning/tests/test_outputs.py:44"}, "properties": {"repobilityId": "8644acf0a67e2c00", "scanner": "scanner-primary", "fingerprint": "a7a82cf6d8b64194", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a35d86f040ffdedf", "level": "none", "message": {"text": "Commented-code block (6 lines) in tasks/pddl-airport-planning/environment/validate.py:20"}, "properties": {"repobilityId": "b4682529667396ea", "scanner": "scanner-primary", "fingerprint": "a35d86f040ffdedf", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-8ba76c52ff38a3f1", "level": "none", "message": {"text": "Commented-code block (5 lines) in tasks/manufacturing-equipment-maintenance/tests/test_outputs.py:30"}, "properties": {"repobilityId": "6289f9729f930d39", "scanner": "scanner-primary", "fingerprint": "8ba76c52ff38a3f1", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-90b754e06000bc2d", "level": "none", "message": {"text": "Commented-code block (5 lines) in tasks/jpg-ocr-stat/environment/skills/pdf/scripts/extract_form_field_info.py:60"}, "properties": {"repobilityId": "d2f0e92c9436103c", "scanner": "scanner-primary", "fingerprint": "90b754e06000bc2d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a29f029feae88531", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 tasks/jpg-ocr-stat/environment/skills/xlsx/recalc.py:94"}, "properties": {"repobilityId": "d46165d6eba5e94c", "scanner": "scanner-primary", "fingerprint": "a29f029feae88531", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-eca942ca29780dc5", "level": "note", "message": {"text": "Legacy-named symbol `exactly_once_v2` in tasks/flink-query/environment/skills/senior-data-engineer/scripts/kafka_config_generator.py:481"}, "properties": {"repobilityId": "5787878695d729b3", "scanner": "scanner-primary", "fingerprint": "eca942ca29780dc5", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-fbbd098a811faa60", "level": "none", "message": {"text": "Commented-code block (5 lines) in tasks/flink-query/environment/skills/pdf/scripts/extract_form_field_info.py:60"}, "properties": {"repobilityId": "6e344decdae0b205", "scanner": "scanner-primary", "fingerprint": "fbbd098a811faa60", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-865f2fad57a28b03", "level": "none", "message": {"text": "Commented-code block (5 lines) in tasks/latex-formula-extraction/environment/skills/pdf/scripts/extract_form_field_info.py:60"}, "properties": {"repobilityId": "25130fbb6d28fbc2", "scanner": "scanner-primary", "fingerprint": "865f2fad57a28b03", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-60bada3955519392", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 tasks/shock-analysis-supply/environment/skills/xlsx/recalc.py:94"}, "properties": {"repobilityId": "844eae61a2cae034", "scanner": "scanner-primary", "fingerprint": "60bada3955519392", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-43ee8a514128d3bb", "level": "none", "message": {"text": "Commented-code block (6 lines) in tasks/pptx-reference-formatting/environment/skills/pptx/scripts/thumbnail.py:32"}, "properties": {"repobilityId": "eee9e1d3ed95fb39", "scanner": "scanner-primary", "fingerprint": "43ee8a514128d3bb", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-f01790ccc582cacf", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 tasks/pptx-reference-formatting/environment/skills/pptx/scripts/thumbnail.py:211"}, "properties": {"repobilityId": "ff024119f1a86597", "scanner": "scanner-primary", "fingerprint": "f01790ccc582cacf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-e876591740bb1afb", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 tasks/pptx-reference-formatting/environment/skills/pptx/ooxml/scripts/validation/redlining.py:139"}, "properties": {"repobilityId": "fe2f56e87370e8a2", "scanner": "scanner-primary", "fingerprint": "e876591740bb1afb", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-25aee4a773ffa2a5", "level": "note", "message": {"text": "Legacy-named symbol `xml_copy` in tasks/pptx-reference-formatting/environment/skills/pptx/ooxml/scripts/validation/base.py:693"}, "properties": {"repobilityId": "0c392e5bef9144ea", "scanner": "scanner-primary", "fingerprint": "25aee4a773ffa2a5", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-26a1f81191d97ba6", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 tasks/shock-analysis-demand/environment/skills/xlsx/recalc.py:94"}, "properties": {"repobilityId": "3e17d43bc8b63bff", "scanner": "scanner-primary", "fingerprint": "26a1f81191d97ba6", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-f348e3070ee81150", "level": "none", "message": {"text": "Commented-code block (5 lines) in tasks/organize-messy-files/environment/skills/pdf/scripts/extract_form_field_info.py:60"}, "properties": {"repobilityId": "6a5ac0b7ff33572c", "scanner": "scanner-primary", "fingerprint": "f348e3070ee81150", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-99e9c7f045997f14", "level": "none", "message": {"text": "Commented-code block (6 lines) in tasks/organize-messy-files/environment/skills/pptx/scripts/thumbnail.py:32"}, "properties": {"repobilityId": "50498e9eae9e4fe9", "scanner": "scanner-primary", "fingerprint": "99e9c7f045997f14", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-04630ad6535d3a14", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 tasks/organize-messy-files/environment/skills/pptx/scripts/thumbnail.py:211"}, "properties": {"repobilityId": "06619635a1e159a2", "scanner": "scanner-primary", "fingerprint": "04630ad6535d3a14", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-4057e3cf7574e24e", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 tasks/organize-messy-files/environment/skills/pptx/ooxml/scripts/validation/redlining.py:139"}, "properties": {"repobilityId": "bd4cb101be62f7ce", "scanner": "scanner-primary", "fingerprint": "4057e3cf7574e24e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-fa1b1aabd3ebb8c5", "level": "note", "message": {"text": "Legacy-named symbol `xml_copy` in tasks/organize-messy-files/environment/skills/pptx/ooxml/scripts/validation/base.py:696"}, "properties": {"repobilityId": "10518ae584955c12", "scanner": "scanner-primary", "fingerprint": "fa1b1aabd3ebb8c5", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-f1bf7f04cb865651", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 tasks/organize-messy-files/environment/skills/docx/ooxml/scripts/validation/redlining.py:139"}, "properties": {"repobilityId": "24dc99a7f29c42df", "scanner": "scanner-primary", "fingerprint": "f1bf7f04cb865651", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-06d3cdaae183ee44", "level": "note", "message": {"text": "Legacy-named symbol `xml_copy` in tasks/organize-messy-files/environment/skills/docx/ooxml/scripts/validation/base.py:696"}, "properties": {"repobilityId": "ced2c3d60cdd3bbd", "scanner": "scanner-primary", "fingerprint": "06d3cdaae183ee44", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-238c82f1d28d6a2e", "level": "none", "message": {"text": "Commented-code block (7 lines) in tasks/azure-bgp-oscillation-route-leak/environment/generate_data.py:11"}, "properties": {"repobilityId": "f2edccaf81df5274", "scanner": "scanner-primary", "fingerprint": "238c82f1d28d6a2e", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-6ed80810064cd232", "level": "none", "message": {"text": "Commented-code block (5 lines) in tasks/civ6-adjacency-optimizer/tests/tools/civ6map_to_scenario.py:176"}, "properties": {"repobilityId": "76c61e0442676378", "scanner": "scanner-primary", "fingerprint": "6ed80810064cd232", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-dccd9be58674710a", "level": "none", "message": {"text": "Commented-code block (5 lines) in tasks/citation-check/tests/test_outputs.py:15"}, "properties": {"repobilityId": "c0abb3f278a33b65", "scanner": "scanner-primary", "fingerprint": "dccd9be58674710a", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-9606e7ad020ac9f7", "level": "none", "message": {"text": "Commented-code block (5 lines) in tasks/invoice-fraud-detection/environment/skills/pdf/scripts/extract_form_field_info.py:60"}, "properties": {"repobilityId": "7e22ec964993a09a", "scanner": "scanner-primary", "fingerprint": "9606e7ad020ac9f7", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-d9828ba131e65533", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 tasks/invoice-fraud-detection/environment/skills/xlsx/recalc.py:94"}, "properties": {"repobilityId": "d59ba8ed6813823b", "scanner": "scanner-primary", "fingerprint": "d9828ba131e65533", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-2d476587c6976c6e", "level": "note", "message": {"text": "Legacy-named symbol `tuning_backup` in tasks/adaptive-cruise-control/tests/test_outputs.py:329"}, "properties": {"repobilityId": "ec7e3b2807d88649", "scanner": "scanner-primary", "fingerprint": "2d476587c6976c6e", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-04956c49d3263646", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 tasks/powerlifting-coef-calc/environment/skills/xlsx/recalc.py:94"}, "properties": {"repobilityId": "24150d114ac0b197", "scanner": "scanner-primary", "fingerprint": "04956c49d3263646", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-1171307c74e9d772", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 tasks/weighted-gdp-calc/environment/skills/xlsx/recalc.py:94"}, "properties": {"repobilityId": "b177091a33a93c8a", "scanner": "scanner-primary", "fingerprint": "1171307c74e9d772", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-1ab7c793e4421d70", "level": "none", "message": {"text": "Commented-code block (5 lines) in tasks/radar-vital-signs/_generate_data.py:50"}, "properties": {"repobilityId": "7dffc8ff7b123580", "scanner": "scanner-primary", "fingerprint": "1ab7c793e4421d70", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-49c98f7cedd9c977", "level": "note", "message": {"text": "Near-duplicate function bodies in 4 places"}, "properties": {"repobilityId": "eb64197c74aed805", "scanner": "scanner-primary", "fingerprint": "49c98f7cedd9c977", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-49c98f7cedd9c977", "level": "note", "message": {"text": "Near-duplicate function bodies in 4 places"}, "properties": {"repobilityId": "0fc47a9d0941ad37", "scanner": "scanner-primary", "fingerprint": "49c98f7cedd9c977", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-49c98f7cedd9c977", "level": "note", "message": {"text": "Near-duplicate function bodies in 4 places"}, "properties": {"repobilityId": "96cb7328fbbe0955", "scanner": "scanner-primary", "fingerprint": "49c98f7cedd9c977", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-49c98f7cedd9c977", "level": "note", "message": {"text": "Near-duplicate function bodies in 4 places"}, "properties": {"repobilityId": "8cb47147ee168936", "scanner": "scanner-primary", "fingerprint": "49c98f7cedd9c977", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-49c98f7cedd9c977", "level": "note", "message": {"text": "Near-duplicate function bodies in 4 places"}, "properties": {"repobilityId": "33638d0a7aaf1063", "scanner": "scanner-primary", "fingerprint": "49c98f7cedd9c977", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-49c98f7cedd9c977", "level": "note", "message": {"text": "Near-duplicate function bodies in 4 places"}, "properties": {"repobilityId": "cca8200cec9701d7", "scanner": "scanner-primary", "fingerprint": "49c98f7cedd9c977", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-49c98f7cedd9c977", "level": "note", "message": {"text": "Near-duplicate function bodies in 4 places"}, "properties": {"repobilityId": "b4e69137187b3ed3", "scanner": "scanner-primary", "fingerprint": "49c98f7cedd9c977", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-49c98f7cedd9c977", "level": "note", "message": {"text": "Near-duplicate function bodies in 4 places"}, "properties": {"repobilityId": "311548b225313c75", "scanner": "scanner-primary", "fingerprint": "49c98f7cedd9c977", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-49c98f7cedd9c977", "level": "note", "message": {"text": "Near-duplicate function bodies in 4 places"}, "properties": {"repobilityId": "eba42d23c62a2594", "scanner": "scanner-primary", "fingerprint": "49c98f7cedd9c977", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-49c98f7cedd9c977", "level": "note", "message": {"text": "Near-duplicate function bodies in 4 places"}, "properties": {"repobilityId": "cb743656b1a05dfa", "scanner": "scanner-primary", "fingerprint": "49c98f7cedd9c977", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-49c98f7cedd9c977", "level": "note", "message": {"text": "Near-duplicate function bodies in 4 places"}, "properties": {"repobilityId": "dac9d2921cbd208e", "scanner": "scanner-primary", "fingerprint": "49c98f7cedd9c977", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "74bbcb13d1c16048", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "517a8241f864850e", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "63a0abead6439f4b", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-49c98f7cedd9c977", "level": "note", "message": {"text": "Near-duplicate function bodies in 4 places"}, "properties": {"repobilityId": "94c4ec3687301b98", "scanner": "scanner-primary", "fingerprint": "49c98f7cedd9c977", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "ba16b6dee0f367f5", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-02525d39071dd2c7", "level": "note", "message": {"text": "Near-duplicate function bodies in 5 places"}, "properties": {"repobilityId": "56d743ba82f74ea1", "scanner": "scanner-primary", "fingerprint": "02525d39071dd2c7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-49c98f7cedd9c977", "level": "note", "message": {"text": "Near-duplicate function bodies in 4 places"}, "properties": {"repobilityId": "e36fa4dfbf956615", "scanner": "scanner-primary", "fingerprint": "49c98f7cedd9c977", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-49c98f7cedd9c977", "level": "note", "message": {"text": "Near-duplicate function bodies in 4 places"}, "properties": {"repobilityId": "6cfdf175987028f2", "scanner": "scanner-primary", "fingerprint": "49c98f7cedd9c977", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-49c98f7cedd9c977", "level": "note", "message": {"text": "Near-duplicate function bodies in 4 places"}, "properties": {"repobilityId": "2a63d98145f2dab5", "scanner": "scanner-primary", "fingerprint": "49c98f7cedd9c977", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-b695a5b67fb4fb96", "level": "note", "message": {"text": "Unused endpoint: GET /api/products"}, "properties": {"repobilityId": "90af7b1aa3fd172f", "scanner": "scanner-primary", "fingerprint": "b695a5b67fb4fb96", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-d1a7636dc1745278", "level": "note", "message": {"text": "Unused endpoint: GET /api/banner"}, "properties": {"repobilityId": "ce9a624914f5b15b", "scanner": "scanner-primary", "fingerprint": "d1a7636dc1745278", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-df8ff9da7425d546", "level": "note", "message": {"text": "Unused endpoint: GET /api/late-banner"}, "properties": {"repobilityId": "6a72588a9aa1961c", "scanner": "scanner-primary", "fingerprint": "df8ff9da7425d546", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-2621fa5025e6e7e8", "level": "note", "message": {"text": "Unused endpoint: GET /api/side-pane"}, "properties": {"repobilityId": "44c43d3558e96051", "scanner": "scanner-primary", "fingerprint": "2621fa5025e6e7e8", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-cf35a1f528952045", "level": "note", "message": {"text": "Unused endpoint: GET /api/results-bar"}, "properties": {"repobilityId": "e8d040c14dfeed58", "scanner": "scanner-primary", "fingerprint": "cf35a1f528952045", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-30ebd8b02a460b20", "level": "note", "message": {"text": "Unused endpoint: GET /api/metrics"}, "properties": {"repobilityId": "4eafecb812f1e134", "scanner": "scanner-primary", "fingerprint": "30ebd8b02a460b20", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-77a21e69b379a5bf", "level": "note", "message": {"text": "Unused endpoint: GET /{*path}"}, "properties": {"repobilityId": "41003a8b1abe0955", "scanner": "scanner-primary", "fingerprint": "77a21e69b379a5bf", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-da52492b1893958b", "level": "note", "message": {"text": "Unused endpoint: GET /api/user"}, "properties": {"repobilityId": "a4b6e867539033c8", "scanner": "scanner-primary", "fingerprint": "da52492b1893958b", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-8cbf6af853ff55b8", "level": "note", "message": {"text": "Unused endpoint: GET /api/reviews"}, "properties": {"repobilityId": "585411c0d06a583b", "scanner": "scanner-primary", "fingerprint": "8cbf6af853ff55b8", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-7aa4b2518cbbbfa2", "level": "note", "message": {"text": "Unused endpoint: GET /api/config"}, "properties": {"repobilityId": "b2bf267551bad10e", "scanner": "scanner-primary", "fingerprint": "7aa4b2518cbbbfa2", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-9c180560f2059bc1", "level": "note", "message": {"text": "Unused endpoint: GET /api/profile/:userId"}, "properties": {"repobilityId": "b8e612aa6bd0b47c", "scanner": "scanner-primary", "fingerprint": "9c180560f2059bc1", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-4baf56668e48d3b2", "level": "note", "message": {"text": "Unused endpoint: POST /api/analytics"}, "properties": {"repobilityId": "c2ed4735a1904f4c", "scanner": "scanner-primary", "fingerprint": "4baf56668e48d3b2", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}]}]}