{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-5abffd7b36087e40", "name": "Possibly dead Python function: secret_constructor", "shortDescription": {"text": "Possibly dead Python function: secret_constructor"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5bd7fedd929ee85e", "name": "Possibly dead Python function: secret_representer", "shortDescription": {"text": "Possibly dead Python function: secret_representer"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c7256e13e0281f50", "name": "Possibly dead Python function: terminate", "shortDescription": {"text": "Possibly dead Python function: terminate"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-533806e7310f9875", "name": "Possibly dead Python function: terminate", "shortDescription": {"text": "Possibly dead Python function: terminate"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7d74b84248de5bd5", "name": "Possibly dead Python function: terminate", "shortDescription": {"text": "Possibly dead Python function: terminate"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f91400faa50d5a97", "name": "Possibly dead Python function: terminate", "shortDescription": {"text": "Possibly dead Python function: terminate"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-08dd384fa13aaa27", "name": "Possibly dead Python function: terminate", "shortDescription": {"text": "Possibly dead Python function: terminate"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a554f3ec5a339629", "name": "Possibly dead Python function: terminate", "shortDescription": {"text": "Possibly dead Python function: terminate"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8514b1836f688558", "name": "Possibly dead Python function: terminate", "shortDescription": {"text": "Possibly dead Python function: terminate"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-629e52f03d4c99ce", "name": "Possibly dead Python function: resolve_people_names", "shortDescription": {"text": "Possibly dead Python function: resolve_people_names"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9444e5c165620a1e", "name": "Possibly dead Python function: build_data_provider", "shortDescription": {"text": "Possibly dead Python function: build_data_provider"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cc00cdee7fa6b95f", "name": "Possibly dead Python function: data_provider_config_from_appdaemon_args", "shortDescription": {"text": "Possibly dead Python function: data_provider_config_from_appdaemon_args"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bead75b0f9233e05", "name": "No API endpoints detected", "shortDescription": {"text": "No API endpoints detected"}, "fullDescription": {"text": "The scanner did not find FastAPI/Flask/Express/NestJS/GraphQL/gRPC routes. If this repo exposes APIs, the framework may be unsupported."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b91adfab67482d86", "name": "Stray `console.log` in TS/JS \u2014 appdaemon/apps/vestaboard_apps/vestaboard_configuration/vestaboard-configuration-card.js:", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 appdaemon/apps/vestaboard_apps/vestaboard_configuration/vestaboard-configuration-card.js:1607"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5fcb58bea961cee1", "name": "Privileged port 20 in use", "shortDescription": {"text": "Privileged port 20 in use"}, "fullDescription": {"text": "Port 20 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fe06b911bc8d0fc9", "name": "Privileged port 30 in use", "shortDescription": {"text": "Privileged port 30 in use"}, "fullDescription": {"text": "Port 30 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-91d4632a2b27c144", "name": "Privileged port 15 in use", "shortDescription": {"text": "Privileged port 15 in use"}, "fullDescription": {"text": "Port 15 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c0c0d7beaae58b54", "name": "Privileged port 21 in use", "shortDescription": {"text": "Privileged port 21 in use"}, "fullDescription": {"text": "Port 21 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2fa213ddc06e1835", "name": "Privileged port 45 in use", "shortDescription": {"text": "Privileged port 45 in use"}, "fullDescription": {"text": "Port 45 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-79b672762f17af2c", "name": "Privileged port 12 in use", "shortDescription": {"text": "Privileged port 12 in use"}, "fullDescription": {"text": "Port 12 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2d02d0607696d93d", "name": "Privileged port 23 in use", "shortDescription": {"text": "Privileged port 23 in use"}, "fullDescription": {"text": "Port 23 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-27ddcb636f08b55a", "name": "Privileged port 115 in use", "shortDescription": {"text": "Privileged port 115 in use"}, "fullDescription": {"text": "Port 115 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-97208425a43afa50", "name": "Privileged port 111 in use", "shortDescription": {"text": "Privileged port 111 in use"}, "fullDescription": {"text": "Port 111 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a4a61038da149f6f", "name": "Privileged port 110 in use", "shortDescription": {"text": "Privileged port 110 in use"}, "fullDescription": {"text": "Port 110 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-365b3f8414c06611", "name": "Privileged port 93 in use", "shortDescription": {"text": "Privileged port 93 in use"}, "fullDescription": {"text": "Port 93 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-61832e3bb524f697", "name": "Privileged port 10 in use", "shortDescription": {"text": "Privileged port 10 in use"}, "fullDescription": {"text": "Port 10 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-47636e33caef255d", "name": "Dockerfile runs as root: docker/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: docker/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f1f17229d69bb891", "name": "Docker base image uses a mutable or implicit tag: acockburn/appdaemon:latest", "shortDescription": {"text": "Docker base image uses a mutable or implicit tag: acockburn/appdaemon:latest"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-aa5acaa49eb8315b", "name": "Containers defined but no K8s/orchestration manifest found", "shortDescription": {"text": "Containers defined but no K8s/orchestration manifest found"}, "fullDescription": {"text": "Repo has Dockerfiles/compose but no Kubernetes/Nomad manifests. If the target deployment is K8s, the manifests may live in a separate ops repo."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9710c8d059e53154", "name": "No frontend routes/components detected", "shortDescription": {"text": "No frontend routes/components detected"}, "fullDescription": {"text": "No React/Vue/Next routes were found. This is fine for backend-only repos."}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-6e72bfbf016abcf0", "name": "Insecure pattern 'direct_innerhtml_assignment' in appdaemon/apps/vestaboard_apps/vestaboard_configuration/vestaboard-con", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in appdaemon/apps/vestaboard_apps/vestaboard_configuration/vestaboard-configuration-card.js:699"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-390d2fec680a67f9", "name": "Insecure pattern 'direct_innerhtml_assignment' in appdaemon/apps/media_dashboard_app/cards/media-dashboard-card.js:190", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in appdaemon/apps/media_dashboard_app/cards/media-dashboard-card.js:190"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-18749d7bcae8bab4", "name": "Insecure pattern 'direct_innerhtml_assignment' in appdaemon/apps/media_dashboard_app/cards/media-dashboard-detail-card.j", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in appdaemon/apps/media_dashboard_app/cards/media-dashboard-detail-card.js:200"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-52e815016e163032", "name": "Insecure pattern 'direct_innerhtml_assignment' in appdaemon/apps/photo_frame_viewer/photo-display-card.js:225", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in appdaemon/apps/photo_frame_viewer/photo-display-card.js:225"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7e2480bdd1c92ede", "name": "Insecure pattern 'direct_innerhtml_assignment' in appdaemon/apps/photo_frame_viewer/photo-frame-viewer-card.js:142", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in appdaemon/apps/photo_frame_viewer/photo-frame-viewer-card.js:142"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b5e4caebe16cc258", "name": "Insecure pattern 'direct_innerhtml_assignment' in appdaemon/apps/health_checks/cards/health-check-card.js:262", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in appdaemon/apps/health_checks/cards/health-check-card.js:262"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7ae3d3a9b808cd39", "name": "Insecure pattern 'direct_innerhtml_assignment' in appdaemon/apps/health_checks/cards/health-check-detail-card.js:302", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in appdaemon/apps/health_checks/cards/health-check-detail-card.js:302"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-682c01beb7fa2dba", "name": "Insecure pattern 'direct_innerhtml_assignment' in appdaemon/apps/immich_fetcher/immich-fetcher-card.js:283", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in appdaemon/apps/immich_fetcher/immich-fetcher-card.js:283"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5fabdf2e85f3302c", "name": "Insecure pattern 'direct_innerhtml_assignment' in appdaemon/apps/dashboard_notify/dashboard-notify-card.js:319", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in appdaemon/apps/dashboard_notify/dashboard-notify-card.js:319"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-78e3ebe41cf423c7", "name": "Insecure pattern 'direct_innerhtml_assignment' in appdaemon/apps/countdown_app/cards/countdown-config-card.js:432", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in appdaemon/apps/countdown_app/cards/countdown-config-card.js:432"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d4d7605994ea8d52", "name": "Insecure pattern 'direct_innerhtml_assignment' in appdaemon/apps/countdown_app/cards/countdown-card.js:123", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in appdaemon/apps/countdown_app/cards/countdown-card.js:123"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-51b9c07bd8de06ed", "name": "Insecure pattern 'direct_innerhtml_assignment' in appdaemon/apps/school_lunch_app/school-lunch-card.js:269", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in appdaemon/apps/school_lunch_app/school-lunch-card.js:269"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-daa70660bff95cab", "name": "Insecure pattern 'direct_innerhtml_assignment' in appdaemon/apps/school_lunch_app/school-lunch-detail-card.js:389", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in appdaemon/apps/school_lunch_app/school-lunch-detail-card.js:389"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8abdf90d102cede5", "name": "Insecure pattern 'direct_innerhtml_assignment' in home-assistant/cards/downstairs/mudroom/vestaboard-preview-card.js:24", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in home-assistant/cards/downstairs/mudroom/vestaboard-preview-card.js:24"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6372cebde0220094", "name": "No auth library detected", "shortDescription": {"text": "No auth library detected"}, "fullDescription": {"text": "The scanner did not find any standard auth library (JWT, OAuth, NextAuth, Auth0, etc.). The repo has auth/admin/session surface indicators, so auth may live in custom code, in a separate service, or be missing."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-38db9605f605f29c", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-72bc0418158993ca", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-53a71db1f9d7dd8f", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-38239c291b4b45aa", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-811c6bb9468a4998", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bc31468c9a12a9ea", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8f4c232b4aa78fc9", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-77166cbd46fcd8e4", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fbff37c0cc3996c0", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-68efebb527acde33", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-de53ac274e5b4ecf", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-37716d9c0a33ad5c", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3345532e49ae8640", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-47b0515c3860ca68", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d1c6635644eadee1", "name": "Very large file: appdaemon/tests/test_vestaboard_controller_app.py (2968 lines)", "shortDescription": {"text": "Very large file: appdaemon/tests/test_vestaboard_controller_app.py (2968 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e10fbc9f96953d28", "name": "Very large file: appdaemon/tests/test_vestaboard_frame_queue.py (1477 lines)", "shortDescription": {"text": "Very large file: appdaemon/tests/test_vestaboard_frame_queue.py (1477 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e8bb48c8a145a0bf", "name": "Very large file: appdaemon/tests/test_dashboard_notify_app.py (1408 lines)", "shortDescription": {"text": "Very large file: appdaemon/tests/test_dashboard_notify_app.py (1408 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e3c2882cf2273e70", "name": "Very large file: appdaemon/tests/test_protect_health_checker.py (1758 lines)", "shortDescription": {"text": "Very large file: appdaemon/tests/test_protect_health_checker.py (1758 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-688e5518b01db742", "name": "Very large file: appdaemon/tests/test_health_check_controller.py (2302 lines)", "shortDescription": {"text": "Very large file: appdaemon/tests/test_health_check_controller.py (2302 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6172e91de0f14a09", "name": "Very large file: appdaemon/tests/test_immich_fetcher.py (1623 lines)", "shortDescription": {"text": "Very large file: appdaemon/tests/test_immich_fetcher.py (1623 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1b784860f345d865", "name": "Very large file: appdaemon/apps/vestaboard_apps/vestaboard_configuration/vestaboard-configuration-card.js (3601 lines)", "shortDescription": {"text": "Very large file: appdaemon/apps/vestaboard_apps/vestaboard_configuration/vestaboard-configuration-card.js (3601 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5f9cd5ca2fbf60f7", "name": "Very large file: appdaemon/apps/media_dashboard_app/cards/media-dashboard-detail-card.js (1590 lines)", "shortDescription": {"text": "Very large file: appdaemon/apps/media_dashboard_app/cards/media-dashboard-detail-card.js (1590 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0101878cb1722c4b", "name": "Very large file: appdaemon/apps/detection_summary_app/manager.py (1290 lines)", "shortDescription": {"text": "Very large file: appdaemon/apps/detection_summary_app/manager.py (1290 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5b39176ef6978bab", "name": "Very large file: appdaemon/apps/health_checks/checker_apps/protect_health_checker/protect_health_checker.py (1564 lines)", "shortDescription": {"text": "Very large file: appdaemon/apps/health_checks/checker_apps/protect_health_checker/protect_health_checker.py (1564 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-55e546a706f07913", "name": "Very large file: appdaemon/apps/immich_fetcher/immich-fetcher-card.js (1751 lines)", "shortDescription": {"text": "Very large file: appdaemon/apps/immich_fetcher/immich-fetcher-card.js (1751 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3ab5d313dda8e5f9", "name": "Debug logging residue appears in source files", "shortDescription": {"text": "Debug logging residue appears in source files"}, "fullDescription": {"text": "Found 10 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-72b2a6250083a784", "name": "Placeholder or mock-heavy implementation detected", "shortDescription": {"text": "Placeholder or mock-heavy implementation detected"}, "fullDescription": {"text": "Found 62 placeholder/mock markers across 11 source files. This often means the repo looks complete while core flows still use generated scaffolding or fake data."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9d79c4077342a7d0", "name": "Runtime service client appears to use placeholder configuration", "shortDescription": {"text": "Runtime service client appears to use placeholder configuration"}, "fullDescription": {"text": "A runtime source file appears to wire Supabase/Firebase/AI/payment-style clients to placeholder URLs, keys, or fallback values. In the Fable corpus this often means the UI/API shape is present while the backend service is not actually configured."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2d0c7b7ab8f8aacf", "name": "Critical user flow still appears backed by mock or placeholder data", "shortDescription": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "fullDescription": {"text": "A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ea8f3013f588db25", "name": "Shallow git history limits provenance confidence", "shortDescription": {"text": "Shallow git history limits provenance confidence"}, "fullDescription": {"text": "The repository is a shallow clone. Origin/evolution analysis cannot distinguish fresh generation, imported legacy code, or long-lived human code with high confidence."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8424db9c75e04ba4", "name": "Very short observed git history", "shortDescription": {"text": "Very short observed git history"}, "fullDescription": {"text": "The repo has multiple source files but two or fewer visible commits. This is not a failure by itself, but it lowers confidence in evolution-based diagnosis."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2c5f98b152cddb6d", "name": "Agent authority lacks a verifier contract: .claude/launch.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/launch.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3a0650c9cff79662", "name": "Agent instruction/config may expose a secret: .claude/rules/security.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/rules/security.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-08402e7a260a7619", "name": "Agent authority lacks a verifier contract: .claude/rules/custom-cards.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/rules/custom-cards.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ef20f047a21cce88", "name": "Legacy-named symbol `test_get_effective_config_returns_copy` in appdaemon/tests/test_vestaboard_controller_app.py:225", "shortDescription": {"text": "Legacy-named symbol `test_get_effective_config_returns_copy` in appdaemon/tests/test_vestaboard_controller_app.py:225"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0ebda3c4a989fc6c", "name": "Commented-code block (5 lines) in appdaemon/tests/test_vestaboard_controller_app.py:2895", "shortDescription": {"text": "Commented-code block (5 lines) in appdaemon/tests/test_vestaboard_controller_app.py:2895"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-27550123b82d708e", "name": "Legacy-named symbol `test_get_existing_returns_copy` in appdaemon/tests/test_automation_config_store.py:83", "shortDescription": {"text": "Legacy-named symbol `test_get_existing_returns_copy` in appdaemon/tests/test_automation_config_store.py:83"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d4834f6f029add58", "name": "Commented-code block (6 lines) in appdaemon/tests/test_vestaboard_frame_queue.py:447", "shortDescription": {"text": "Commented-code block (6 lines) in appdaemon/tests/test_vestaboard_frame_queue.py:447"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-535c9e1f7497a180", "name": "Legacy-named symbol `stale_old` in appdaemon/tests/test_dashboard_notify_app.py:1006", "shortDescription": {"text": "Legacy-named symbol `stale_old` in appdaemon/tests/test_dashboard_notify_app.py:1006"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2c6f9cc945646db1", "name": "Legacy-named symbol `app_data_v2` in appdaemon/tests/test_ha_provisioner.py:63", "shortDescription": {"text": "Legacy-named symbol `app_data_v2` in appdaemon/tests/test_ha_provisioner.py:63"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b202b3745cad1241", "name": "Legacy-named symbol `args_legacy` in appdaemon/tests/test_ai_provider_registry.py:69", "shortDescription": {"text": "Legacy-named symbol `args_legacy` in appdaemon/tests/test_ai_provider_registry.py:69"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5ea844203bd18acd", "name": "Legacy-named symbol `_atomic_copy` in appdaemon/tests/test_detection_summary_viewer_selected_materialize.py:112", "shortDescription": {"text": "Legacy-named symbol `_atomic_copy` in appdaemon/tests/test_detection_summary_viewer_selected_materialize.py:112"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b43b0d8e86fd5bfc", "name": "Legacy-named symbol `_resolved_copy` in appdaemon/tests/test_alertmanager_bridge.py:193", "shortDescription": {"text": "Legacy-named symbol `_resolved_copy` in appdaemon/tests/test_alertmanager_bridge.py:193"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1a5fb1689d61cea1", "name": "Commented-code block (5 lines) in appdaemon/apps/vestaboard_apps/_shared/frame_queue.py:18", "shortDescription": {"text": "Commented-code block (5 lines) in appdaemon/apps/vestaboard_apps/_shared/frame_queue.py:18"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f7c505119245dd86", "name": "Commented-code block (8 lines) in appdaemon/apps/photo_frame_viewer/photo_frame_viewer_app.py:169", "shortDescription": {"text": "Commented-code block (8 lines) in appdaemon/apps/photo_frame_viewer/photo_frame_viewer_app.py:169"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1e718970b0a151f3", "name": "Commented-code block (5 lines) in appdaemon/apps/door_notify/door_notify.py:503", "shortDescription": {"text": "Commented-code block (5 lines) in appdaemon/apps/door_notify/door_notify.py:503"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-6fb4b3cc55d260e4", "name": "Legacy-named symbol `_resolved_copy` in appdaemon/apps/health_checks/shared/alertmanager_bridge.py:112", "shortDescription": {"text": "Legacy-named symbol `_resolved_copy` in appdaemon/apps/health_checks/shared/alertmanager_bridge.py:112"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9b7b26c4da549680", "name": "Commented-code block (5 lines) in appdaemon/apps/health_checks/checker_apps/imagegen_health_checker/imagegen_health_chec", "shortDescription": {"text": "Commented-code block (5 lines) in appdaemon/apps/health_checks/checker_apps/imagegen_health_checker/imagegen_health_checker.py:301"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b1d1b0d1ae11a6ac", "name": "Commented-code block (5 lines) in appdaemon/apps/health_checks/checker_apps/protect_health_checker/protect_health_checke", "shortDescription": {"text": "Commented-code block (5 lines) in appdaemon/apps/health_checks/checker_apps/protect_health_checker/protect_health_checker.py:294"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b60be6687fbfd6c9", "name": "Commented-code block (6 lines) in appdaemon/apps/immich_fetcher/immich-fetcher-card.js:688", "shortDescription": {"text": "Commented-code block (6 lines) in appdaemon/apps/immich_fetcher/immich-fetcher-card.js:688"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c45879e30c280a7a", "name": "Legacy-named symbol `_atomic_copy` in appdaemon/apps/detection_summary_viewer/detection_summary_viewer_app.py:868", "shortDescription": {"text": "Legacy-named symbol `_atomic_copy` in appdaemon/apps/detection_summary_viewer/detection_summary_viewer_app.py:868"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1b5a76780c3df9aa", "name": "1 env vars used in code but missing from .env.example", "shortDescription": {"text": "1 env vars used in code but missing from .env.example"}, "fullDescription": {"text": "Drift between code and config docs. The first few: `DETECTION_SUMMARY_STATE_PATH`. Add them (with a placeholder/comment) to .env.example so onboarding doesn't break."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2c04133e54348533", "name": "Near-duplicate function bodies in 2 places", "shortDescription": {"text": "Near-duplicate function bodies in 2 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nappdaemon/apps/vestaboard_apps/vestaboard_controller/automation_registry.py:get_config_schema, appdaemon/apps/vestaboard_apps/vestaboard_controller/automation_registry.py:get\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-49c98f7cedd9c977", "name": "Near-duplicate function bodies in 4 places", "shortDescription": {"text": "Near-duplicate function bodies in 4 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nappdaemon/apps/vestaboard_apps/automations/art_from_library/art_from_library_app.py:set_enabled, appdaemon/apps/vestaboard_apps/automations/ai_art_generator/ai_art_generator_app.py:set_enabled, appdaemon/apps/vestaboard_apps/automations/ai_message_generator/ai_message_generator_app.py:set_enabled, appdaemon/apps/vestaboard_apps/automations/messages_from_library/messages_from_library_app.py:set_enabled\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-be46ea126aa5d8dc", "name": "Near-duplicate function bodies in 3 places", "shortDescription": {"text": "Near-duplicate function bodies in 3 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nappdaemon/apps/vestaboard_apps/automations/ai_art_generator/ai_art_generator_app.py:terminate, appdaemon/apps/vestaboard_apps/automations/ai_message_generator/ai_message_generator_app.py:terminate, appdaemon/apps/vestaboard_apps/automations/messages_from_library/messages_from_library_app.py:terminate\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-02525d39071dd2c7", "name": "Near-duplicate function bodies in 5 places", "shortDescription": {"text": "Near-duplicate function bodies in 5 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nappdaemon/providers/ai_providers/image_generation_provider.py:edit_image, appdaemon/providers/ai_providers/openai/openai_image_generation_provider.py:edit_image, appdaemon/providers/ai_providers/comfyui/comfyui_image_generation_provider.py:edit_image, appdaemon/providers/ai_providers/gemini/gemini_image_generation_provider.py:edit_image\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/21069"}, "properties": {"repository": "thaynes43/hass-sandbox", "repoUrl": "https://github.com/thaynes43/hass-sandbox", "branch": "main"}, "results": [{"ruleId": "scanner-5abffd7b36087e40", "level": "note", "message": {"text": "Possibly dead Python function: secret_constructor"}, "properties": {"repobilityId": "6cb468e8bd46f9ff", "scanner": "scanner-primary", "fingerprint": "5abffd7b36087e40", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docker/process-apps-yaml.py:24"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5bd7fedd929ee85e", "level": "note", "message": {"text": "Possibly dead Python function: secret_representer"}, "properties": {"repobilityId": "ecb0d14476670e9a", "scanner": "scanner-primary", "fingerprint": "5bd7fedd929ee85e", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docker/process-apps-yaml.py:28"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c7256e13e0281f50", "level": "note", "message": {"text": "Possibly dead Python function: terminate"}, "properties": {"repobilityId": "23b9cac3e587104f", "scanner": "scanner-primary", "fingerprint": "c7256e13e0281f50", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "appdaemon/apps/vestaboard_apps/automations/art_from_library/art_from_library_app.py:68"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-533806e7310f9875", "level": "note", "message": {"text": "Possibly dead Python function: terminate"}, "properties": {"repobilityId": "23b9cac3e587104f", "scanner": "scanner-primary", "fingerprint": "533806e7310f9875", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "appdaemon/apps/vestaboard_apps/automations/ai_art_generator/ai_art_generator_app.py:149"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7d74b84248de5bd5", "level": "note", "message": {"text": "Possibly dead Python function: terminate"}, "properties": {"repobilityId": "23b9cac3e587104f", "scanner": "scanner-primary", "fingerprint": "7d74b84248de5bd5", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "appdaemon/apps/vestaboard_apps/automations/calendar_summary/calendar_summary_app.py:310"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f91400faa50d5a97", "level": "note", "message": {"text": "Possibly dead Python function: terminate"}, "properties": {"repobilityId": "23b9cac3e587104f", "scanner": "scanner-primary", "fingerprint": "f91400faa50d5a97", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "appdaemon/apps/vestaboard_apps/automations/weather_schedule/weather_schedule_app.py:275"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-08dd384fa13aaa27", "level": "note", "message": {"text": "Possibly dead Python function: terminate"}, "properties": {"repobilityId": "23b9cac3e587104f", "scanner": "scanner-primary", "fingerprint": "08dd384fa13aaa27", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "appdaemon/apps/vestaboard_apps/automations/calendar_clock/calendar_clock_app.py:148"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a554f3ec5a339629", "level": "note", "message": {"text": "Possibly dead Python function: terminate"}, "properties": {"repobilityId": "23b9cac3e587104f", "scanner": "scanner-primary", "fingerprint": "a554f3ec5a339629", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "appdaemon/apps/vestaboard_apps/automations/ai_message_generator/ai_message_generator_app.py:162"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8514b1836f688558", "level": "note", "message": {"text": "Possibly dead Python function: terminate"}, "properties": {"repobilityId": "23b9cac3e587104f", "scanner": "scanner-primary", "fingerprint": "8514b1836f688558", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "appdaemon/apps/vestaboard_apps/automations/messages_from_library/messages_from_library_app.py:126"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-629e52f03d4c99ce", "level": "note", "message": {"text": "Possibly dead Python function: resolve_people_names"}, "properties": {"repobilityId": "f1bc5005807fed17", "scanner": "scanner-primary", "fingerprint": "629e52f03d4c99ce", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "appdaemon/providers/photo_providers/immich_client.py:127"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9444e5c165620a1e", "level": "note", "message": {"text": "Possibly dead Python function: build_data_provider"}, "properties": {"repobilityId": "4ea506b638b7725f", "scanner": "scanner-primary", "fingerprint": "9444e5c165620a1e", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "appdaemon/providers/ai_providers/registry.py:434"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cc00cdee7fa6b95f", "level": "note", "message": {"text": "Possibly dead Python function: data_provider_config_from_appdaemon_args"}, "properties": {"repobilityId": "8cac864a949006a4", "scanner": "scanner-primary", "fingerprint": "cc00cdee7fa6b95f", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "appdaemon/providers/ai_providers/registry.py:449"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bead75b0f9233e05", "level": "none", "message": {"text": "No API endpoints detected"}, "properties": {"repobilityId": "0f8bb852027c38f8", "scanner": "scanner-primary", "fingerprint": "bead75b0f9233e05", "layer": "api", "severity": "info", "confidence": 1.0, "tags": ["coverage"]}}, {"ruleId": "scanner-b91adfab67482d86", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 appdaemon/apps/vestaboard_apps/vestaboard_configuration/vestaboard-configuration-card.js:1607"}, "properties": {"repobilityId": "ed78dc1b64cbf8aa", "scanner": "scanner-primary", "fingerprint": "b91adfab67482d86", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-5fcb58bea961cee1", "level": "warning", "message": {"text": "Privileged port 20 in use"}, "properties": {"repobilityId": "a59f3e53d617e0f8", "scanner": "scanner-primary", "fingerprint": "5fcb58bea961cee1", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "appdaemon/apps/apps-prod.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fe06b911bc8d0fc9", "level": "warning", "message": {"text": "Privileged port 30 in use"}, "properties": {"repobilityId": "54f172e7d16fc662", "scanner": "scanner-primary", "fingerprint": "fe06b911bc8d0fc9", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "appdaemon/apps/apps-prod.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-91d4632a2b27c144", "level": "warning", "message": {"text": "Privileged port 15 in use"}, "properties": {"repobilityId": "3340f9a170f285cd", "scanner": "scanner-primary", "fingerprint": "91d4632a2b27c144", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "appdaemon/apps/apps-prod.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c0c0d7beaae58b54", "level": "warning", "message": {"text": "Privileged port 21 in use"}, "properties": {"repobilityId": "d920b7cd1b1a16dc", "scanner": "scanner-primary", "fingerprint": "c0c0d7beaae58b54", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "appdaemon/apps/apps-prod.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2fa213ddc06e1835", "level": "warning", "message": {"text": "Privileged port 45 in use"}, "properties": {"repobilityId": "73cf64d92574d41c", "scanner": "scanner-primary", "fingerprint": "2fa213ddc06e1835", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "appdaemon/apps/apps-prod.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-79b672762f17af2c", "level": "warning", "message": {"text": "Privileged port 12 in use"}, "properties": {"repobilityId": "65e7eefa33f2def4", "scanner": "scanner-primary", "fingerprint": "79b672762f17af2c", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "appdaemon/apps/apps-prod.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2d02d0607696d93d", "level": "warning", "message": {"text": "Privileged port 23 in use"}, "properties": {"repobilityId": "a1230e3dfc4becfa", "scanner": "scanner-primary", "fingerprint": "2d02d0607696d93d", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "appdaemon/apps/apps-prod.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-27ddcb636f08b55a", "level": "warning", "message": {"text": "Privileged port 115 in use"}, "properties": {"repobilityId": "2087ba4d6ed87551", "scanner": "scanner-primary", "fingerprint": "27ddcb636f08b55a", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "appdaemon/providers/ai_providers/model_settings/comfyui.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-97208425a43afa50", "level": "warning", "message": {"text": "Privileged port 111 in use"}, "properties": {"repobilityId": "d81f552c50a9c0f3", "scanner": "scanner-primary", "fingerprint": "97208425a43afa50", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "appdaemon/providers/ai_providers/model_settings/comfyui.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a4a61038da149f6f", "level": "warning", "message": {"text": "Privileged port 110 in use"}, "properties": {"repobilityId": "871c6fcc22f39f02", "scanner": "scanner-primary", "fingerprint": "a4a61038da149f6f", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "appdaemon/providers/ai_providers/model_settings/comfyui.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-365b3f8414c06611", "level": "warning", "message": {"text": "Privileged port 93 in use"}, "properties": {"repobilityId": "a2801129f16a1ead", "scanner": "scanner-primary", "fingerprint": "365b3f8414c06611", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "appdaemon/providers/ai_providers/model_settings/comfyui.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-61832e3bb524f697", "level": "warning", "message": {"text": "Privileged port 10 in use"}, "properties": {"repobilityId": "735372d6b5594915", "scanner": "scanner-primary", "fingerprint": "61832e3bb524f697", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "home-assistant/helpers/zone_name_occupancy_off_delay.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-47636e33caef255d", "level": "warning", "message": {"text": "Dockerfile runs as root: docker/Dockerfile"}, "properties": {"repobilityId": "8a345ba4198453bd", "scanner": "scanner-primary", "fingerprint": "47636e33caef255d", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-f1f17229d69bb891", "level": "warning", "message": {"text": "Docker base image uses a mutable or implicit tag: acockburn/appdaemon:latest"}, "properties": {"repobilityId": "23367bc68e0f067c", "scanner": "scanner-primary", "fingerprint": "f1f17229d69bb891", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docker/Dockerfile"}, "region": {"startLine": 9}}}]}, {"ruleId": "scanner-aa5acaa49eb8315b", "level": "note", "message": {"text": "Containers defined but no K8s/orchestration manifest found"}, "properties": {"repobilityId": "b230ea9b68736081", "scanner": "scanner-primary", "fingerprint": "aa5acaa49eb8315b", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["coverage", "deployment"]}}, {"ruleId": "scanner-9710c8d059e53154", "level": "none", "message": {"text": "No frontend routes/components detected"}, "properties": {"repobilityId": "44ca61485762e494", "scanner": "scanner-primary", "fingerprint": "9710c8d059e53154", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["coverage"]}}, {"ruleId": "scanner-6e72bfbf016abcf0", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in appdaemon/apps/vestaboard_apps/vestaboard_configuration/vestaboard-configuration-card.js:699"}, "properties": {"repobilityId": "798c6131a7d44006", "scanner": "scanner-primary", "fingerprint": "6e72bfbf016abcf0", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "appdaemon/apps/vestaboard_apps/vestaboard_configuration/vestaboard-configuration-card.js"}, "region": {"startLine": 699}}}]}, {"ruleId": "scanner-390d2fec680a67f9", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in appdaemon/apps/media_dashboard_app/cards/media-dashboard-card.js:190"}, "properties": {"repobilityId": "67035e2f6431048d", "scanner": "scanner-primary", "fingerprint": "390d2fec680a67f9", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "appdaemon/apps/media_dashboard_app/cards/media-dashboard-card.js"}, "region": {"startLine": 190}}}]}, {"ruleId": "scanner-18749d7bcae8bab4", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in appdaemon/apps/media_dashboard_app/cards/media-dashboard-detail-card.js:200"}, "properties": {"repobilityId": "51a1590240e46c0e", "scanner": "scanner-primary", "fingerprint": "18749d7bcae8bab4", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "appdaemon/apps/media_dashboard_app/cards/media-dashboard-detail-card.js"}, "region": {"startLine": 200}}}]}, {"ruleId": "scanner-52e815016e163032", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in appdaemon/apps/photo_frame_viewer/photo-display-card.js:225"}, "properties": {"repobilityId": "d981140c2d8793ce", "scanner": "scanner-primary", "fingerprint": "52e815016e163032", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "appdaemon/apps/photo_frame_viewer/photo-display-card.js"}, "region": {"startLine": 225}}}]}, {"ruleId": "scanner-7e2480bdd1c92ede", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in appdaemon/apps/photo_frame_viewer/photo-frame-viewer-card.js:142"}, "properties": {"repobilityId": "2a22a2fc0c7324c7", "scanner": "scanner-primary", "fingerprint": "7e2480bdd1c92ede", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "appdaemon/apps/photo_frame_viewer/photo-frame-viewer-card.js"}, "region": {"startLine": 142}}}]}, {"ruleId": "scanner-b5e4caebe16cc258", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in appdaemon/apps/health_checks/cards/health-check-card.js:262"}, "properties": {"repobilityId": "5120ce728c474831", "scanner": "scanner-primary", "fingerprint": "b5e4caebe16cc258", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "appdaemon/apps/health_checks/cards/health-check-card.js"}, "region": {"startLine": 262}}}]}, {"ruleId": "scanner-7ae3d3a9b808cd39", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in appdaemon/apps/health_checks/cards/health-check-detail-card.js:302"}, "properties": {"repobilityId": "f19a0254566ef02a", "scanner": "scanner-primary", "fingerprint": "7ae3d3a9b808cd39", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "appdaemon/apps/health_checks/cards/health-check-detail-card.js"}, "region": {"startLine": 302}}}]}, {"ruleId": "scanner-682c01beb7fa2dba", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in appdaemon/apps/immich_fetcher/immich-fetcher-card.js:283"}, "properties": {"repobilityId": "0c2cb324bcb1d18c", "scanner": "scanner-primary", "fingerprint": "682c01beb7fa2dba", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "appdaemon/apps/immich_fetcher/immich-fetcher-card.js"}, "region": {"startLine": 283}}}]}, {"ruleId": "scanner-5fabdf2e85f3302c", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in appdaemon/apps/dashboard_notify/dashboard-notify-card.js:319"}, "properties": {"repobilityId": "9bd49bb8268b8a7c", "scanner": "scanner-primary", "fingerprint": "5fabdf2e85f3302c", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "appdaemon/apps/dashboard_notify/dashboard-notify-card.js"}, "region": {"startLine": 319}}}]}, {"ruleId": "scanner-78e3ebe41cf423c7", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in appdaemon/apps/countdown_app/cards/countdown-config-card.js:432"}, "properties": {"repobilityId": "e97c49daab6b191c", "scanner": "scanner-primary", "fingerprint": "78e3ebe41cf423c7", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "appdaemon/apps/countdown_app/cards/countdown-config-card.js"}, "region": {"startLine": 432}}}]}, {"ruleId": "scanner-d4d7605994ea8d52", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in appdaemon/apps/countdown_app/cards/countdown-card.js:123"}, "properties": {"repobilityId": "ca5a159f9231c3fd", "scanner": "scanner-primary", "fingerprint": "d4d7605994ea8d52", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "appdaemon/apps/countdown_app/cards/countdown-card.js"}, "region": {"startLine": 123}}}]}, {"ruleId": "scanner-51b9c07bd8de06ed", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in appdaemon/apps/school_lunch_app/school-lunch-card.js:269"}, "properties": {"repobilityId": "e0445357ae5d3c85", "scanner": "scanner-primary", "fingerprint": "51b9c07bd8de06ed", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "appdaemon/apps/school_lunch_app/school-lunch-card.js"}, "region": {"startLine": 269}}}]}, {"ruleId": "scanner-daa70660bff95cab", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in appdaemon/apps/school_lunch_app/school-lunch-detail-card.js:389"}, "properties": {"repobilityId": "dbfc5207a9212b54", "scanner": "scanner-primary", "fingerprint": "daa70660bff95cab", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "appdaemon/apps/school_lunch_app/school-lunch-detail-card.js"}, "region": {"startLine": 389}}}]}, {"ruleId": "scanner-8abdf90d102cede5", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in home-assistant/cards/downstairs/mudroom/vestaboard-preview-card.js:24"}, "properties": {"repobilityId": "4dbdbe3bb317cff3", "scanner": "scanner-primary", "fingerprint": "8abdf90d102cede5", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "home-assistant/cards/downstairs/mudroom/vestaboard-preview-card.js"}, "region": {"startLine": 24}}}]}, {"ruleId": "scanner-6372cebde0220094", "level": "warning", "message": {"text": "No auth library detected"}, "properties": {"repobilityId": "a5b6035a5bbf8054", "scanner": "scanner-primary", "fingerprint": "6372cebde0220094", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["coverage", "auth"]}}, {"ruleId": "scanner-38db9605f605f29c", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "c7d764fbdafbafd2", "scanner": "scanner-primary", "fingerprint": "38db9605f605f29c", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci-auto-fix.yml"}, "region": {"startLine": 25}}}]}, {"ruleId": "scanner-38db9605f605f29c", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "3f5c70b255222111", "scanner": "scanner-primary", "fingerprint": "38db9605f605f29c", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci-auto-fix.yml"}, "region": {"startLine": 32}}}]}, {"ruleId": "scanner-38db9605f605f29c", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "e91cf8a6f73562dd", "scanner": "scanner-primary", "fingerprint": "38db9605f605f29c", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci-auto-fix.yml"}, "region": {"startLine": 43}}}]}, {"ruleId": "scanner-38db9605f605f29c", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "9658ccdc20ee5e18", "scanner": "scanner-primary", "fingerprint": "38db9605f605f29c", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci-auto-fix.yml"}, "region": {"startLine": 81}}}]}, {"ruleId": "scanner-72bc0418158993ca", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "08bf021c930b4316", "scanner": "scanner-primary", "fingerprint": "72bc0418158993ca", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci-auto-fix.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-53a71db1f9d7dd8f", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "0d37bab7e779a889", "scanner": "scanner-primary", "fingerprint": "53a71db1f9d7dd8f", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/docs-site-audit.yml"}, "region": {"startLine": 18}}}]}, {"ruleId": "scanner-53a71db1f9d7dd8f", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "acac3c60f2e763ec", "scanner": "scanner-primary", "fingerprint": "53a71db1f9d7dd8f", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/docs-site-audit.yml"}, "region": {"startLine": 35}}}]}, {"ruleId": "scanner-38239c291b4b45aa", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "1ff03bbcaee34cf4", "scanner": "scanner-primary", "fingerprint": "38239c291b4b45aa", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/docs-site-audit.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-811c6bb9468a4998", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "b8c4817823d69f9b", "scanner": "scanner-primary", "fingerprint": "811c6bb9468a4998", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/build-appdaemon.yml"}, "region": {"startLine": 28}}}]}, {"ruleId": "scanner-811c6bb9468a4998", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "8be5cc505c0333f0", "scanner": "scanner-primary", "fingerprint": "811c6bb9468a4998", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/build-appdaemon.yml"}, "region": {"startLine": 96}}}]}, {"ruleId": "scanner-811c6bb9468a4998", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "948cd55ff5790257", "scanner": "scanner-primary", "fingerprint": "811c6bb9468a4998", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/build-appdaemon.yml"}, "region": {"startLine": 104}}}]}, {"ruleId": "scanner-bc31468c9a12a9ea", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "33c6aaa92b88fda3", "scanner": "scanner-primary", "fingerprint": "bc31468c9a12a9ea", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/build-appdaemon.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8f4c232b4aa78fc9", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "979e3b58c19faf5e", "scanner": "scanner-primary", "fingerprint": "8f4c232b4aa78fc9", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/claude-code-review.yml"}, "region": {"startLine": 20}}}]}, {"ruleId": "scanner-8f4c232b4aa78fc9", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "7572d8d133564421", "scanner": "scanner-primary", "fingerprint": "8f4c232b4aa78fc9", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/claude-code-review.yml"}, "region": {"startLine": 25}}}]}, {"ruleId": "scanner-77166cbd46fcd8e4", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "50f3b563ffac10e9", "scanner": "scanner-primary", "fingerprint": "77166cbd46fcd8e4", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/claude-code-review.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fbff37c0cc3996c0", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "badb88e68a782669", "scanner": "scanner-primary", "fingerprint": "fbff37c0cc3996c0", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/agent-docs-audit.yml"}, "region": {"startLine": 18}}}]}, {"ruleId": "scanner-fbff37c0cc3996c0", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "4a8ceaea4d90c1ef", "scanner": "scanner-primary", "fingerprint": "fbff37c0cc3996c0", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/agent-docs-audit.yml"}, "region": {"startLine": 35}}}]}, {"ruleId": "scanner-68efebb527acde33", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "330ac3f1450d6f43", "scanner": "scanner-primary", "fingerprint": "68efebb527acde33", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/agent-docs-audit.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-de53ac274e5b4ecf", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "02600186fc092bd4", "scanner": "scanner-primary", "fingerprint": "de53ac274e5b4ecf", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/claude.yml"}, "region": {"startLine": 29}}}]}, {"ruleId": "scanner-de53ac274e5b4ecf", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "8ead6a2c2bfe167b", "scanner": "scanner-primary", "fingerprint": "de53ac274e5b4ecf", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/claude.yml"}, "region": {"startLine": 35}}}]}, {"ruleId": "scanner-37716d9c0a33ad5c", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "abfb5752158cf655", "scanner": "scanner-primary", "fingerprint": "37716d9c0a33ad5c", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/claude.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3345532e49ae8640", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "32c4cca348173c51", "scanner": "scanner-primary", "fingerprint": "3345532e49ae8640", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/deploy-docs.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-47b0515c3860ca68", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "4994b7eec2bbb3b4", "scanner": "scanner-primary", "fingerprint": "47b0515c3860ca68", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/unit-tests.yml"}, "region": {"startLine": 17}}}]}, {"ruleId": "scanner-47b0515c3860ca68", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "c4804932e1c2778c", "scanner": "scanner-primary", "fingerprint": "47b0515c3860ca68", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/unit-tests.yml"}, "region": {"startLine": 38}}}]}, {"ruleId": "scanner-47b0515c3860ca68", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "0796eb27cd8b16e3", "scanner": "scanner-primary", "fingerprint": "47b0515c3860ca68", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/unit-tests.yml"}, "region": {"startLine": 55}}}]}, {"ruleId": "scanner-d1c6635644eadee1", "level": "note", "message": {"text": "Very large file: appdaemon/tests/test_vestaboard_controller_app.py (2968 lines)"}, "properties": {"repobilityId": "1aa92e21690cab7b", "scanner": "scanner-primary", "fingerprint": "d1c6635644eadee1", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-e10fbc9f96953d28", "level": "note", "message": {"text": "Very large file: appdaemon/tests/test_vestaboard_frame_queue.py (1477 lines)"}, "properties": {"repobilityId": "da5ec70f03681394", "scanner": "scanner-primary", "fingerprint": "e10fbc9f96953d28", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-e8bb48c8a145a0bf", "level": "note", "message": {"text": "Very large file: appdaemon/tests/test_dashboard_notify_app.py (1408 lines)"}, "properties": {"repobilityId": "58834cd2d4bea50d", "scanner": "scanner-primary", "fingerprint": "e8bb48c8a145a0bf", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-e3c2882cf2273e70", "level": "note", "message": {"text": "Very large file: appdaemon/tests/test_protect_health_checker.py (1758 lines)"}, "properties": {"repobilityId": "7922c1a3863caa3b", "scanner": "scanner-primary", "fingerprint": "e3c2882cf2273e70", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-688e5518b01db742", "level": "note", "message": {"text": "Very large file: appdaemon/tests/test_health_check_controller.py (2302 lines)"}, "properties": {"repobilityId": "3c1d350e4ee87640", "scanner": "scanner-primary", "fingerprint": "688e5518b01db742", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-6172e91de0f14a09", "level": "note", "message": {"text": "Very large file: appdaemon/tests/test_immich_fetcher.py (1623 lines)"}, "properties": {"repobilityId": "4cd06c23374d0232", "scanner": "scanner-primary", "fingerprint": "6172e91de0f14a09", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-1b784860f345d865", "level": "note", "message": {"text": "Very large file: appdaemon/apps/vestaboard_apps/vestaboard_configuration/vestaboard-configuration-card.js (3601 lines)"}, "properties": {"repobilityId": "814ebc991fd3d3ce", "scanner": "scanner-primary", "fingerprint": "1b784860f345d865", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-5f9cd5ca2fbf60f7", "level": "note", "message": {"text": "Very large file: appdaemon/apps/media_dashboard_app/cards/media-dashboard-detail-card.js (1590 lines)"}, "properties": {"repobilityId": "dad1653e4e733556", "scanner": "scanner-primary", "fingerprint": "5f9cd5ca2fbf60f7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-0101878cb1722c4b", "level": "note", "message": {"text": "Very large file: appdaemon/apps/detection_summary_app/manager.py (1290 lines)"}, "properties": {"repobilityId": "d48ddf755516ee61", "scanner": "scanner-primary", "fingerprint": "0101878cb1722c4b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-5b39176ef6978bab", "level": "note", "message": {"text": "Very large file: appdaemon/apps/health_checks/checker_apps/protect_health_checker/protect_health_checker.py (1564 lines)"}, "properties": {"repobilityId": "bab6eb0b66475ed6", "scanner": "scanner-primary", "fingerprint": "5b39176ef6978bab", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-55e546a706f07913", "level": "note", "message": {"text": "Very large file: appdaemon/apps/immich_fetcher/immich-fetcher-card.js (1751 lines)"}, "properties": {"repobilityId": "99fad20c94ee287d", "scanner": "scanner-primary", "fingerprint": "55e546a706f07913", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "f4a404a115ac69b6", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-72b2a6250083a784", "level": "warning", "message": {"text": "Placeholder or mock-heavy implementation detected"}, "properties": {"repobilityId": "4a2ed93bee9d7917", "scanner": "scanner-primary", "fingerprint": "72b2a6250083a784", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "incomplete", "generated-repo-pattern"]}}, {"ruleId": "scanner-9d79c4077342a7d0", "level": "warning", "message": {"text": "Runtime service client appears to use placeholder configuration"}, "properties": {"repobilityId": "bf3f9a9b3ee6d13e", "scanner": "scanner-primary", "fingerprint": "9d79c4077342a7d0", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "runtime-config", "service-client", "generated-repo-pattern"]}}, {"ruleId": "scanner-2d0c7b7ab8f8aacf", "level": "warning", "message": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "properties": {"repobilityId": "2bcaf6017e403018", "scanner": "scanner-primary", "fingerprint": "2d0c7b7ab8f8aacf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "critical-flow", "generated-repo-pattern"]}}, {"ruleId": "scanner-ea8f3013f588db25", "level": "note", "message": {"text": "Shallow git history limits provenance confidence"}, "properties": {"repobilityId": "0922c998191e8688", "scanner": "scanner-primary", "fingerprint": "ea8f3013f588db25", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-8424db9c75e04ba4", "level": "none", "message": {"text": "Very short observed git history"}, "properties": {"repobilityId": "1d1e4229752c7325", "scanner": "scanner-primary", "fingerprint": "8424db9c75e04ba4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-2c5f98b152cddb6d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/launch.json"}, "properties": {"repobilityId": "0de48c0f4ab303d8", "scanner": "scanner-primary", "fingerprint": "2c5f98b152cddb6d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/launch.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3a0650c9cff79662", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/rules/security.md"}, "properties": {"repobilityId": "efba7acaba5bb572", "scanner": "scanner-primary", "fingerprint": "3a0650c9cff79662", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/rules/security.md"}, "region": {"startLine": 7}}}]}, {"ruleId": "scanner-08402e7a260a7619", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/rules/custom-cards.md"}, "properties": {"repobilityId": "7963f531c5439cc6", "scanner": "scanner-primary", "fingerprint": "08402e7a260a7619", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/rules/custom-cards.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ef20f047a21cce88", "level": "note", "message": {"text": "Legacy-named symbol `test_get_effective_config_returns_copy` in appdaemon/tests/test_vestaboard_controller_app.py:225"}, "properties": {"repobilityId": "73a4af685521113d", "scanner": "scanner-primary", "fingerprint": "ef20f047a21cce88", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-0ebda3c4a989fc6c", "level": "none", "message": {"text": "Commented-code block (5 lines) in appdaemon/tests/test_vestaboard_controller_app.py:2895"}, "properties": {"repobilityId": "fb459efa07d3429e", "scanner": "scanner-primary", "fingerprint": "0ebda3c4a989fc6c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-27550123b82d708e", "level": "note", "message": {"text": "Legacy-named symbol `test_get_existing_returns_copy` in appdaemon/tests/test_automation_config_store.py:83"}, "properties": {"repobilityId": "7a8a00451386d187", "scanner": "scanner-primary", "fingerprint": "27550123b82d708e", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-d4834f6f029add58", "level": "none", "message": {"text": "Commented-code block (6 lines) in appdaemon/tests/test_vestaboard_frame_queue.py:447"}, "properties": {"repobilityId": "b8bdc7b489693b3f", "scanner": "scanner-primary", "fingerprint": "d4834f6f029add58", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-535c9e1f7497a180", "level": "note", "message": {"text": "Legacy-named symbol `stale_old` in appdaemon/tests/test_dashboard_notify_app.py:1006"}, "properties": {"repobilityId": "a770bd9cca4190e2", "scanner": "scanner-primary", "fingerprint": "535c9e1f7497a180", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-2c6f9cc945646db1", "level": "note", "message": {"text": "Legacy-named symbol `app_data_v2` in appdaemon/tests/test_ha_provisioner.py:63"}, "properties": {"repobilityId": "306a1d19ad17bc1c", "scanner": "scanner-primary", "fingerprint": "2c6f9cc945646db1", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-b202b3745cad1241", "level": "note", "message": {"text": "Legacy-named symbol `args_legacy` in appdaemon/tests/test_ai_provider_registry.py:69"}, "properties": {"repobilityId": "6370775d665eb8db", "scanner": "scanner-primary", "fingerprint": "b202b3745cad1241", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-5ea844203bd18acd", "level": "note", "message": {"text": "Legacy-named symbol `_atomic_copy` in appdaemon/tests/test_detection_summary_viewer_selected_materialize.py:112"}, "properties": {"repobilityId": "d5050d8693597836", "scanner": "scanner-primary", "fingerprint": "5ea844203bd18acd", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-b43b0d8e86fd5bfc", "level": "note", "message": {"text": "Legacy-named symbol `_resolved_copy` in appdaemon/tests/test_alertmanager_bridge.py:193"}, "properties": {"repobilityId": "5c42ae61ac2879f2", "scanner": "scanner-primary", "fingerprint": "b43b0d8e86fd5bfc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-1a5fb1689d61cea1", "level": "none", "message": {"text": "Commented-code block (5 lines) in appdaemon/apps/vestaboard_apps/_shared/frame_queue.py:18"}, "properties": {"repobilityId": "a9f83d700f620b7a", "scanner": "scanner-primary", "fingerprint": "1a5fb1689d61cea1", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-f7c505119245dd86", "level": "none", "message": {"text": "Commented-code block (8 lines) in appdaemon/apps/photo_frame_viewer/photo_frame_viewer_app.py:169"}, "properties": {"repobilityId": "b8c85cb0539225d1", "scanner": "scanner-primary", "fingerprint": "f7c505119245dd86", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-1e718970b0a151f3", "level": "none", "message": {"text": "Commented-code block (5 lines) in appdaemon/apps/door_notify/door_notify.py:503"}, "properties": {"repobilityId": "7046e9fa05869950", "scanner": "scanner-primary", "fingerprint": "1e718970b0a151f3", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-6fb4b3cc55d260e4", "level": "note", "message": {"text": "Legacy-named symbol `_resolved_copy` in appdaemon/apps/health_checks/shared/alertmanager_bridge.py:112"}, "properties": {"repobilityId": "ef5338a5a11feb79", "scanner": "scanner-primary", "fingerprint": "6fb4b3cc55d260e4", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-9b7b26c4da549680", "level": "none", "message": {"text": "Commented-code block (5 lines) in appdaemon/apps/health_checks/checker_apps/imagegen_health_checker/imagegen_health_checker.py:301"}, "properties": {"repobilityId": "cd19c4b483092a6a", "scanner": "scanner-primary", "fingerprint": "9b7b26c4da549680", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b1d1b0d1ae11a6ac", "level": "none", "message": {"text": "Commented-code block (5 lines) in appdaemon/apps/health_checks/checker_apps/protect_health_checker/protect_health_checker.py:294"}, "properties": {"repobilityId": "d14a7a598421ff4a", "scanner": "scanner-primary", "fingerprint": "b1d1b0d1ae11a6ac", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b60be6687fbfd6c9", "level": "none", "message": {"text": "Commented-code block (6 lines) in appdaemon/apps/immich_fetcher/immich-fetcher-card.js:688"}, "properties": {"repobilityId": "bae37e6794916490", "scanner": "scanner-primary", "fingerprint": "b60be6687fbfd6c9", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-c45879e30c280a7a", "level": "note", "message": {"text": "Legacy-named symbol `_atomic_copy` in appdaemon/apps/detection_summary_viewer/detection_summary_viewer_app.py:868"}, "properties": {"repobilityId": "58daf6e39d6e41e7", "scanner": "scanner-primary", "fingerprint": "c45879e30c280a7a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-1b5a76780c3df9aa", "level": "none", "message": {"text": "1 env vars used in code but missing from .env.example"}, "properties": {"repobilityId": "d04379b337b44a15", "scanner": "scanner-primary", "fingerprint": "1b5a76780c3df9aa", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "config-drift"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "c1fcdf8f21711699", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "434fb5cd8665a3c9", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-49c98f7cedd9c977", "level": "note", "message": {"text": "Near-duplicate function bodies in 4 places"}, "properties": {"repobilityId": "a12c2a84aa1e5d04", "scanner": "scanner-primary", "fingerprint": "49c98f7cedd9c977", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-49c98f7cedd9c977", "level": "note", "message": {"text": "Near-duplicate function bodies in 4 places"}, "properties": {"repobilityId": "3931465f34c05f5c", "scanner": "scanner-primary", "fingerprint": "49c98f7cedd9c977", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "80073acc34fdfc54", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "d1d19f7a2d4b214b", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "1e145bf00259bb00", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "a2e9c9e54d61d308", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "1eac476b173433f8", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-49c98f7cedd9c977", "level": "note", "message": {"text": "Near-duplicate function bodies in 4 places"}, "properties": {"repobilityId": "53065cfa985fb6b1", "scanner": "scanner-primary", "fingerprint": "49c98f7cedd9c977", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "6e268f97d7686300", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "b132f03aec2f34ca", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "4c374107748eebb9", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "6b8d6d72aebf8e99", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "a17195eae9a64768", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "9963fc409ba5d816", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-02525d39071dd2c7", "level": "note", "message": {"text": "Near-duplicate function bodies in 5 places"}, "properties": {"repobilityId": "fd2f889d0dcfe4a8", "scanner": "scanner-primary", "fingerprint": "02525d39071dd2c7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-49c98f7cedd9c977", "level": "note", "message": {"text": "Near-duplicate function bodies in 4 places"}, "properties": {"repobilityId": "84c073590e4588b7", "scanner": "scanner-primary", "fingerprint": "49c98f7cedd9c977", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-49c98f7cedd9c977", "level": "note", "message": {"text": "Near-duplicate function bodies in 4 places"}, "properties": {"repobilityId": "ad9db67cb4c457d8", "scanner": "scanner-primary", "fingerprint": "49c98f7cedd9c977", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "4f203db6852bef54", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}]}]}