{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-166fdc3a7d4635be", "name": "Possibly dead Python function: save_metadata", "shortDescription": {"text": "Possibly dead Python function: save_metadata"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ed8f8fb46a7b5a63", "name": "Possibly dead Python function: save_concepts", "shortDescription": {"text": "Possibly dead Python function: save_concepts"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b764e6ffe269e86f", "name": "Possibly dead Python function: generate_summary", "shortDescription": {"text": "Possibly dead Python function: generate_summary"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4a1b824f9277e2ff", "name": "Possibly dead Python function: load_checkpoint_from_path", "shortDescription": {"text": "Possibly dead Python function: load_checkpoint_from_path"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d43682dc04c15e36", "name": "Insecure pattern 'eval_used' in plugins/personal-plugin/skills/security-analysis/SKILL.md:142", "shortDescription": {"text": "Insecure pattern 'eval_used' in plugins/personal-plugin/skills/security-analysis/SKILL.md:142"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ed224f2fd2cc2795", "name": "Insecure pattern 'exec_used' in plugins/personal-plugin/skills/security-analysis/SKILL.md:142", "shortDescription": {"text": "Insecure pattern 'exec_used' in plugins/personal-plugin/skills/security-analysis/SKILL.md:142"}, "fullDescription": {"text": "Found a known-risky pattern (exec_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6372cebde0220094", "name": "No auth library detected", "shortDescription": {"text": "No auth library detected"}, "fullDescription": {"text": "The scanner did not find any standard auth library (JWT, OAuth, NextAuth, Auth0, etc.). The repo has auth/admin/session surface indicators, so auth may live in custom code, in a separate service, or be missing."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e5b09dab12a4e2c0", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7efbda965f283c17", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-44fbe640a648f012", "name": "Very large file: plugins/bpmn-plugin/tools/bpmn2drawio/tests/test_coverage_gaps.py (1512 lines)", "shortDescription": {"text": "Very large file: plugins/bpmn-plugin/tools/bpmn2drawio/tests/test_coverage_gaps.py (1512 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a5b2a1a6d26b0d8b", "name": "Very large file: plugins/personal-plugin/tools/visual-explainer/src/visual_explainer/cli.py (1792 lines)", "shortDescription": {"text": "Very large file: plugins/personal-plugin/tools/visual-explainer/src/visual_explainer/cli.py (1792 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3ab5d313dda8e5f9", "name": "Debug logging residue appears in source files", "shortDescription": {"text": "Debug logging residue appears in source files"}, "fullDescription": {"text": "Found 62 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bea357a6497a2d5d", "name": "Agent authority lacks a verifier contract: CLAUDE.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: CLAUDE.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0a51ca86141f14f1", "name": "Agent authority lacks a verifier contract: plugins/slide-gen/skills/sg-optimize/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: plugins/slide-gen/skills/sg-optimize/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ee889d98ed3395f6", "name": "Agent authority lacks a verifier contract: plugins/personal-plugin/references/templates/skill.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: plugins/personal-plugin/references/templates/skill.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a099c99c42b43eda", "name": "Agent authority lacks a verifier contract: plugins/personal-plugin/skills/ship/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: plugins/personal-plugin/skills/ship/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c08aa48fd89c2323", "name": "Agent authority lacks a verifier contract: plugins/personal-plugin/skills/ultra-plan/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: plugins/personal-plugin/skills/ultra-plan/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5310dfd3170e7425", "name": "Agent instruction/config may expose a secret: plugins/personal-plugin/skills/jetson-audit/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: plugins/personal-plugin/skills/jetson-audit/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e83e473f302b5b75", "name": "Agent authority lacks a verifier contract: plugins/personal-plugin/skills/spec-to-prototype/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: plugins/personal-plugin/skills/spec-to-prototype/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-153aee81c0c02b2c", "name": "Agent authority lacks a verifier contract: plugins/personal-plugin/skills/lab-notebook/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: plugins/personal-plugin/skills/lab-notebook/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-07207282a9b9fa80", "name": "Agent authority lacks a verifier contract: plugins/personal-plugin/skills/accessibility-annotator/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: plugins/personal-plugin/skills/accessibility-annotator/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-dcb377c5e2755bee", "name": "Agent instruction contains unpinned remote install: plugins/personal-plugin/skills/arch-review/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: plugins/personal-plugin/skills/arch-review/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6daa4e6003c97dc8", "name": "Agent authority lacks a verifier contract: plugins/personal-plugin/skills/brain-entry/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: plugins/personal-plugin/skills/brain-entry/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-755d93a855380d80", "name": "Agent authority lacks a verifier contract: plugins/personal-plugin/skills/spark-recon/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: plugins/personal-plugin/skills/spark-recon/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8a894b4f60ec62b5", "name": "Agent authority lacks a verifier contract: plugins/personal-plugin/skills/security-analysis/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: plugins/personal-plugin/skills/security-analysis/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9923155e5893cf38", "name": "Agent instruction/config may expose a secret: plugins/personal-plugin/skills/spark-audit/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: plugins/personal-plugin/skills/spark-audit/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-81576370f502daa1", "name": "Agent authority lacks a verifier contract: tests/fixtures/valid-plugin/skills/help/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: tests/fixtures/valid-plugin/skills/help/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0354e90acc713317", "name": "Agent authority lacks a verifier contract: .claude/agents/sonnet-implementer.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/agents/sonnet-implementer.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3476fc164ca4c1af", "name": "Commented-code block (9 lines) in plugins/bpmn-plugin/tools/bpmn2drawio/tests/test_waypoints.py:87", "shortDescription": {"text": "Commented-code block (9 lines) in plugins/bpmn-plugin/tools/bpmn2drawio/tests/test_waypoints.py:87"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c753bb6cf6bade93", "name": "Commented-code block (6 lines) in plugins/bpmn-plugin/tools/bpmn2drawio/tests/test_icons.py:426", "shortDescription": {"text": "Commented-code block (6 lines) in plugins/bpmn-plugin/tools/bpmn2drawio/tests/test_icons.py:426"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-3994065bc87bb65b", "name": "Legacy-named symbol `test_returns_copy` in plugins/personal-plugin/tools/visual-explainer/tests/test_page_templates.py:1", "shortDescription": {"text": "Legacy-named symbol `test_returns_copy` in plugins/personal-plugin/tools/visual-explainer/tests/test_page_templates.py:111"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-be46ea126aa5d8dc", "name": "Near-duplicate function bodies in 3 places", "shortDescription": {"text": "Near-duplicate function bodies in 3 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nplugins/bpmn-plugin/tools/bpmn2drawio/src/bpmn2drawio/models.py:has_coordinates, plugins/bpmn-plugin/tools/bpmn2drawio/src/bpmn2drawio/models.py:has_coordinates, plugins/bpmn-plugin/tools/bpmn2drawio/src/bpmn2drawio/models.py:has_coordinates\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2c04133e54348533", "name": "Near-duplicate function bodies in 2 places", "shortDescription": {"text": "Near-duplicate function bodies in 2 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nplugins/personal-plugin/tools/visual-explainer/src/visual_explainer/cli.py:is_interactive, plugins/personal-plugin/tools/visual-explainer/src/visual_explainer/api_setup.py:is_interactive\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-49c98f7cedd9c977", "name": "Near-duplicate function bodies in 4 places", "shortDescription": {"text": "Near-duplicate function bodies in 4 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nplugins/personal-plugin/tools/visual-explainer/src/visual_explainer/prompt_generator.py:generate_prompts, plugins/personal-plugin/tools/visual-explainer/src/visual_explainer/prompt_generator.py:generate_infographic_prompts, plugins/personal-plugin/tools/visual-explainer/src/visual_explainer/prompt_generator.py:generate_prompts, plugins/personal-plugin/tools/visual-explainer/src/visual_explainer/prompt_generator.py:generate_infographic_prompts\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/25286"}, "properties": {"repository": "davistroy/claude-marketplace", "repoUrl": "https://github.com/davistroy/claude-marketplace", "branch": "main"}, "results": [{"ruleId": "scanner-166fdc3a7d4635be", "level": "note", "message": {"text": "Possibly dead Python function: save_metadata"}, "properties": {"repobilityId": "9d8c9ee2d6e44ffd", "scanner": "scanner-primary", "fingerprint": "166fdc3a7d4635be", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/personal-plugin/tools/visual-explainer/src/visual_explainer/output.py:396"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ed8f8fb46a7b5a63", "level": "note", "message": {"text": "Possibly dead Python function: save_concepts"}, "properties": {"repobilityId": "f24369060f95949e", "scanner": "scanner-primary", "fingerprint": "ed8f8fb46a7b5a63", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/personal-plugin/tools/visual-explainer/src/visual_explainer/output.py:416"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b764e6ffe269e86f", "level": "note", "message": {"text": "Possibly dead Python function: generate_summary"}, "properties": {"repobilityId": "280a537f4e11f021", "scanner": "scanner-primary", "fingerprint": "b764e6ffe269e86f", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/personal-plugin/tools/visual-explainer/src/visual_explainer/output.py:436"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4a1b824f9277e2ff", "level": "note", "message": {"text": "Possibly dead Python function: load_checkpoint_from_path"}, "properties": {"repobilityId": "0a0e019a1aa9c54e", "scanner": "scanner-primary", "fingerprint": "4a1b824f9277e2ff", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/personal-plugin/tools/visual-explainer/src/visual_explainer/output.py:878"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d43682dc04c15e36", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in plugins/personal-plugin/skills/security-analysis/SKILL.md:142"}, "properties": {"repobilityId": "d9a387ea8eaa238a", "scanner": "scanner-primary", "fingerprint": "d43682dc04c15e36", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/personal-plugin/skills/security-analysis/SKILL.md"}, "region": {"startLine": 142}}}]}, {"ruleId": "scanner-ed224f2fd2cc2795", "level": "error", "message": {"text": "Insecure pattern 'exec_used' in plugins/personal-plugin/skills/security-analysis/SKILL.md:142"}, "properties": {"repobilityId": "c927103fd67b38e1", "scanner": "scanner-primary", "fingerprint": "ed224f2fd2cc2795", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "exec_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/personal-plugin/skills/security-analysis/SKILL.md"}, "region": {"startLine": 142}}}]}, {"ruleId": "scanner-6372cebde0220094", "level": "warning", "message": {"text": "No auth library detected"}, "properties": {"repobilityId": "a5b6035a5bbf8054", "scanner": "scanner-primary", "fingerprint": "6372cebde0220094", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["coverage", "auth"]}}, {"ruleId": "scanner-e5b09dab12a4e2c0", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "2358fda99a16c0a0", "scanner": "scanner-primary", "fingerprint": "e5b09dab12a4e2c0", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/validate.yml"}, "region": {"startLine": 16}}}]}, {"ruleId": "scanner-e5b09dab12a4e2c0", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "b6313a095f585d32", "scanner": "scanner-primary", "fingerprint": "e5b09dab12a4e2c0", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/validate.yml"}, "region": {"startLine": 19}}}]}, {"ruleId": "scanner-e5b09dab12a4e2c0", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "2358fda99a16c0a0", "scanner": "scanner-primary", "fingerprint": "e5b09dab12a4e2c0", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/validate.yml"}, "region": {"startLine": 206}}}]}, {"ruleId": "scanner-e5b09dab12a4e2c0", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "2358fda99a16c0a0", "scanner": "scanner-primary", "fingerprint": "e5b09dab12a4e2c0", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/validate.yml"}, "region": {"startLine": 225}}}]}, {"ruleId": "scanner-e5b09dab12a4e2c0", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "27e2aaffd9d55086", "scanner": "scanner-primary", "fingerprint": "e5b09dab12a4e2c0", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/validate.yml"}, "region": {"startLine": 228}}}]}, {"ruleId": "scanner-7efbda965f283c17", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "56929525eac9a554", "scanner": "scanner-primary", "fingerprint": "7efbda965f283c17", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/test.yml"}, "region": {"startLine": 21}}}]}, {"ruleId": "scanner-7efbda965f283c17", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "cd843b74d3963b06", "scanner": "scanner-primary", "fingerprint": "7efbda965f283c17", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/test.yml"}, "region": {"startLine": 24}}}]}, {"ruleId": "scanner-7efbda965f283c17", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "56929525eac9a554", "scanner": "scanner-primary", "fingerprint": "7efbda965f283c17", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/test.yml"}, "region": {"startLine": 56}}}]}, {"ruleId": "scanner-7efbda965f283c17", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "cd843b74d3963b06", "scanner": "scanner-primary", "fingerprint": "7efbda965f283c17", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/test.yml"}, "region": {"startLine": 59}}}]}, {"ruleId": "scanner-7efbda965f283c17", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "56929525eac9a554", "scanner": "scanner-primary", "fingerprint": "7efbda965f283c17", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/test.yml"}, "region": {"startLine": 91}}}]}, {"ruleId": "scanner-7efbda965f283c17", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "cd843b74d3963b06", "scanner": "scanner-primary", "fingerprint": "7efbda965f283c17", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/test.yml"}, "region": {"startLine": 94}}}]}, {"ruleId": "scanner-7efbda965f283c17", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "56929525eac9a554", "scanner": "scanner-primary", "fingerprint": "7efbda965f283c17", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/test.yml"}, "region": {"startLine": 126}}}]}, {"ruleId": "scanner-7efbda965f283c17", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "cd843b74d3963b06", "scanner": "scanner-primary", "fingerprint": "7efbda965f283c17", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/test.yml"}, "region": {"startLine": 129}}}]}, {"ruleId": "scanner-7efbda965f283c17", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "56929525eac9a554", "scanner": "scanner-primary", "fingerprint": "7efbda965f283c17", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/test.yml"}, "region": {"startLine": 155}}}]}, {"ruleId": "scanner-7efbda965f283c17", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "cd843b74d3963b06", "scanner": "scanner-primary", "fingerprint": "7efbda965f283c17", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/test.yml"}, "region": {"startLine": 158}}}]}, {"ruleId": "scanner-7efbda965f283c17", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "56929525eac9a554", "scanner": "scanner-primary", "fingerprint": "7efbda965f283c17", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/test.yml"}, "region": {"startLine": 184}}}]}, {"ruleId": "scanner-7efbda965f283c17", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "cd843b74d3963b06", "scanner": "scanner-primary", "fingerprint": "7efbda965f283c17", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/test.yml"}, "region": {"startLine": 187}}}]}, {"ruleId": "scanner-44fbe640a648f012", "level": "note", "message": {"text": "Very large file: plugins/bpmn-plugin/tools/bpmn2drawio/tests/test_coverage_gaps.py (1512 lines)"}, "properties": {"repobilityId": "be320f7f2f5940c1", "scanner": "scanner-primary", "fingerprint": "44fbe640a648f012", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-a5b2a1a6d26b0d8b", "level": "note", "message": {"text": "Very large file: plugins/personal-plugin/tools/visual-explainer/src/visual_explainer/cli.py (1792 lines)"}, "properties": {"repobilityId": "edec6a3784fe19c8", "scanner": "scanner-primary", "fingerprint": "a5b2a1a6d26b0d8b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "b6d26487f52b3591", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-bea357a6497a2d5d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: CLAUDE.md"}, "properties": {"repobilityId": "aae72df3934829ac", "scanner": "scanner-primary", "fingerprint": "bea357a6497a2d5d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "CLAUDE.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0a51ca86141f14f1", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: plugins/slide-gen/skills/sg-optimize/SKILL.md"}, "properties": {"repobilityId": "9abd396984faf1d7", "scanner": "scanner-primary", "fingerprint": "0a51ca86141f14f1", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/slide-gen/skills/sg-optimize/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ee889d98ed3395f6", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: plugins/personal-plugin/references/templates/skill.md"}, "properties": {"repobilityId": "707f968b1915098a", "scanner": "scanner-primary", "fingerprint": "ee889d98ed3395f6", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/personal-plugin/references/templates/skill.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a099c99c42b43eda", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: plugins/personal-plugin/skills/ship/SKILL.md"}, "properties": {"repobilityId": "75c7326e9a37df4a", "scanner": "scanner-primary", "fingerprint": "a099c99c42b43eda", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/personal-plugin/skills/ship/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c08aa48fd89c2323", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: plugins/personal-plugin/skills/ultra-plan/SKILL.md"}, "properties": {"repobilityId": "06309560ceb51cda", "scanner": "scanner-primary", "fingerprint": "c08aa48fd89c2323", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/personal-plugin/skills/ultra-plan/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5310dfd3170e7425", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: plugins/personal-plugin/skills/jetson-audit/SKILL.md"}, "properties": {"repobilityId": "4d638486f3ebb7e4", "scanner": "scanner-primary", "fingerprint": "5310dfd3170e7425", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/personal-plugin/skills/jetson-audit/SKILL.md"}, "region": {"startLine": 61}}}]}, {"ruleId": "scanner-e83e473f302b5b75", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: plugins/personal-plugin/skills/spec-to-prototype/SKILL.md"}, "properties": {"repobilityId": "e0c82dc305e026a5", "scanner": "scanner-primary", "fingerprint": "e83e473f302b5b75", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/personal-plugin/skills/spec-to-prototype/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-153aee81c0c02b2c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: plugins/personal-plugin/skills/lab-notebook/SKILL.md"}, "properties": {"repobilityId": "1eaa07b8ab8e16fd", "scanner": "scanner-primary", "fingerprint": "153aee81c0c02b2c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/personal-plugin/skills/lab-notebook/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-07207282a9b9fa80", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: plugins/personal-plugin/skills/accessibility-annotator/SKILL.md"}, "properties": {"repobilityId": "1d71642bdb0455b5", "scanner": "scanner-primary", "fingerprint": "07207282a9b9fa80", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/personal-plugin/skills/accessibility-annotator/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-dcb377c5e2755bee", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: plugins/personal-plugin/skills/arch-review/SKILL.md"}, "properties": {"repobilityId": "239acbae5baac3af", "scanner": "scanner-primary", "fingerprint": "dcb377c5e2755bee", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/personal-plugin/skills/arch-review/SKILL.md"}, "region": {"startLine": 286}}}]}, {"ruleId": "scanner-6daa4e6003c97dc8", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: plugins/personal-plugin/skills/brain-entry/SKILL.md"}, "properties": {"repobilityId": "bea958e095755435", "scanner": "scanner-primary", "fingerprint": "6daa4e6003c97dc8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/personal-plugin/skills/brain-entry/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-755d93a855380d80", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: plugins/personal-plugin/skills/spark-recon/SKILL.md"}, "properties": {"repobilityId": "8b190e0af69a5441", "scanner": "scanner-primary", "fingerprint": "755d93a855380d80", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/personal-plugin/skills/spark-recon/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8a894b4f60ec62b5", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: plugins/personal-plugin/skills/security-analysis/SKILL.md"}, "properties": {"repobilityId": "77277e8c4c628fdf", "scanner": "scanner-primary", "fingerprint": "8a894b4f60ec62b5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/personal-plugin/skills/security-analysis/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9923155e5893cf38", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: plugins/personal-plugin/skills/spark-audit/SKILL.md"}, "properties": {"repobilityId": "59caa9bbd370a4bf", "scanner": "scanner-primary", "fingerprint": "9923155e5893cf38", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "plugins/personal-plugin/skills/spark-audit/SKILL.md"}, "region": {"startLine": 110}}}]}, {"ruleId": "scanner-81576370f502daa1", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: tests/fixtures/valid-plugin/skills/help/SKILL.md"}, "properties": {"repobilityId": "d02c6e9b2d54cc89", "scanner": "scanner-primary", "fingerprint": "81576370f502daa1", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/fixtures/valid-plugin/skills/help/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0354e90acc713317", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/agents/sonnet-implementer.md"}, "properties": {"repobilityId": "b5158bc46cacbdc2", "scanner": "scanner-primary", "fingerprint": "0354e90acc713317", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/agents/sonnet-implementer.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3476fc164ca4c1af", "level": "none", "message": {"text": "Commented-code block (9 lines) in plugins/bpmn-plugin/tools/bpmn2drawio/tests/test_waypoints.py:87"}, "properties": {"repobilityId": "813cacb863413c5e", "scanner": "scanner-primary", "fingerprint": "3476fc164ca4c1af", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-c753bb6cf6bade93", "level": "none", "message": {"text": "Commented-code block (6 lines) in plugins/bpmn-plugin/tools/bpmn2drawio/tests/test_icons.py:426"}, "properties": {"repobilityId": "24a5000ed2fd4868", "scanner": "scanner-primary", "fingerprint": "c753bb6cf6bade93", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-3994065bc87bb65b", "level": "note", "message": {"text": "Legacy-named symbol `test_returns_copy` in plugins/personal-plugin/tools/visual-explainer/tests/test_page_templates.py:111"}, "properties": {"repobilityId": "93b8361daf937c8f", "scanner": "scanner-primary", "fingerprint": "3994065bc87bb65b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "57b0c649e3d859be", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "b0b5dbae439f8a86", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "8689fb8ed1fcd434", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "c702a7298c52cc9f", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "073c2f9cb69d9ce4", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-49c98f7cedd9c977", "level": "note", "message": {"text": "Near-duplicate function bodies in 4 places"}, "properties": {"repobilityId": "ee7b1adac62f8cd9", "scanner": "scanner-primary", "fingerprint": "49c98f7cedd9c977", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "3490498ec0cd574f", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "f1116ef22389529f", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "b75a84d065d121f7", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "87642d57df476f18", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "ec3bb94d4803b76d", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}]}]}