{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "SEC045", "name": "[SEC045] eval()/exec() on stored or user-supplied data: eval() and exec() on data \u2014 even admin-stored data \u2014 is a latera", "shortDescription": {"text": "[SEC045] eval()/exec() on stored or user-supplied data: eval() and exec() on data \u2014 even admin-stored data \u2014 is a lateral-movement vector after any one credential compromise. Sandboxes (__builtins__ cleared) are escapable: attackers use obj"}, "fullDescription": {"text": "For literal data structures: use ast.literal_eval(text) \u2014 only parses literals, raises on code.\nFor formula evaluation: use asteval or simpleeval (purpose-built sandboxes with allow-lists).\nFor Odoo: use odoo.tools.safe_eval(expr, locals_dict, mode='exec').\nIf you genuinely need to execute admin-stored code: require explicit super-admin permission AND log every execution with a stack trace."}, "properties": {"scanner": "repobility-threat-engine", "category": "injection", "severity": "medium", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "MINED111", "name": "Bare except continues silently", "shortDescription": {"text": "Bare except continues silently"}, "fullDescription": {"text": "Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"scanner": "repobility-ast-engine", "category": "quality", "severity": "medium", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "COMP001", "name": "[COMP001] High cognitive complexity: Function `run_lldb_for_tests` has cognitive complexity 10 (SonarSource scale). Cogn", "shortDescription": {"text": "[COMP001] High cognitive complexity: Function `run_lldb_for_tests` has cognitive complexity 10 (SonarSource scale). Cognitive complexity measures how hard the function is for a human to understand \u2014 nested branches, boolean chains, and recu"}, "fullDescription": {"text": "Extract nested branches into named helper functions; flatten early-return / guard clauses; replace long if/elif chains with dispatch dicts or polymorphism. SonarQube's threshold for 'should refactor' is 15 \u2014 yours is 10."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "low", "confidence": 0.95, "cwe": "", "owasp": ""}}, {"id": "AIC003", "name": "Duplicated implementation block across source files", "shortDescription": {"text": "Duplicated implementation block across source files"}, "fullDescription": {"text": "Duplicated blocks are a common artifact when generated code is pasted or recreated instead of reused. They increase maintenance cost because every future bug fix must be found in multiple locations."}, "properties": {"scanner": "repobility-ai-code-hygiene", "category": "quality", "severity": "low", "confidence": 0.86, "cwe": "", "owasp": ""}}, {"id": "MINED064", "name": "[MINED064] Python Input Call: input() blocks for stdin. Inappropriate in services.", "shortDescription": {"text": "[MINED064] Python Input Call: input() blocks for stdin. Inappropriate in services."}, "fullDescription": {"text": "Review and fix per the pattern semantics."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "MINED080", "name": "[MINED080] Cpp Using Namespace Std (and 3 more): Same pattern found in 3 additional files. Review if needed.", "shortDescription": {"text": "[MINED080] Cpp Using Namespace Std (and 3 more): Same pattern found in 3 additional files. Review if needed."}, "fullDescription": {"text": "Review and fix per the pattern semantics."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 0.2, "cwe": "", "owasp": ""}}, {"id": "MINED042", "name": "[MINED042] Cpp New Without Delete: C++ raw new without RAII / unique_ptr \u2014 memory leak risk.", "shortDescription": {"text": "[MINED042] Cpp New Without Delete: C++ raw new without RAII / unique_ptr \u2014 memory leak risk."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-401 /  for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "MINED108", "name": "`self._decode_posix_signal` used but never assigned in __init__", "shortDescription": {"text": "`self._decode_posix_signal` used but never assigned in __init__"}, "fullDescription": {"text": "Method `run_test_once` of class `TestRunner` reads `self._decode_posix_signal`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"scanner": "repobility-ast-engine", "category": "quality", "severity": "high", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "MINED116", "name": "Workflow uses `secrets.GIST_SECRET` on a `pull_request` trigger", "shortDescription": {"text": "Workflow uses `secrets.GIST_SECRET` on a `pull_request` trigger"}, "fullDescription": {"text": "This workflow triggers on `pull_request`, which checks out the FORK's code. Referencing `${ secrets.GIST_SECRET }` lets a PR from any fork exfiltrate the secret (modify a script, log the value, etc.). Use `pull_request_target` ONLY with strict checkout discipline (no fork code in the trusted context)."}, "properties": {"scanner": "repobility-supply-chain", "category": "dependency", "severity": "critical", "confidence": 0.9, "cwe": "", "owasp": ""}}]}}, "automationDetails": {"id": "repobility/537"}, "properties": {"repository": "imakris/sintra", "repoUrl": "http://github.com/imakris/sintra.git", "branch": "master"}, "results": [{"ruleId": "SEC045", "level": "warning", "message": {"text": "[SEC045] eval()/exec() on stored or user-supplied data: eval() and exec() on data \u2014 even admin-stored data \u2014 is a lateral-movement vector after any one credential compromise. Sandboxes (__builtins__ cleared) are escapable: attackers use object introspection (().__class__.__mro__[-1].__subclasses__()) to reach os.system. CWE-95 (eval injection)."}, "properties": {"repobilityId": 33144, "scanner": "repobility-threat-engine", "fingerprint": "5dced3f04265a57ac81dab22e64638e6175bbd32d706f7b4bbdf5abc30c12239", "category": "injection", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": ".exec(", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC045", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "code|injection|token|130|sec045"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "example/qt_basic/cursor_sync_sender.cpp"}, "region": {"startLine": 130}}}]}, {"ruleId": "SEC045", "level": "warning", "message": {"text": "[SEC045] eval()/exec() on stored or user-supplied data: eval() and exec() on data \u2014 even admin-stored data \u2014 is a lateral-movement vector after any one credential compromise. Sandboxes (__builtins__ cleared) are escapable: attackers use object introspection (().__class__.__mro__[-1].__subclasses__()) to reach os.system. CWE-95 (eval injection)."}, "properties": {"repobilityId": 33143, "scanner": "repobility-threat-engine", "fingerprint": "55041d72971f3d592d2a523357c71856448dc43049fe91624fd35190fc2b9130", "category": "injection", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": ".exec(", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC045", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "code|injection|token|148|sec045"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "example/qt_basic/cursor_sync_receiver.cpp"}, "region": {"startLine": 148}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 33135, "scanner": "repobility-ast-engine", "fingerprint": "5b541958788f405522e2b6537b9d8bbad66d1c066bb58c679af0cefd021cec5f", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|5b541958788f405522e2b6537b9d8bbad66d1c066bb58c679af0cefd021cec5f"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/runner/platform/windows.py"}, "region": {"startLine": 220}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 33134, "scanner": "repobility-ast-engine", "fingerprint": "09fd992eb3bf3199d15b2e76f6f2dd18ae1fc394f00f4fe72755b9027cbae823", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|09fd992eb3bf3199d15b2e76f6f2dd18ae1fc394f00f4fe72755b9027cbae823"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/runner/platform/windows.py"}, "region": {"startLine": 212}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 33133, "scanner": "repobility-ast-engine", "fingerprint": "217c9ec84039d8c0cbb0b7edf1463a8478eba6306af75196f12da62f26cfdbed", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|217c9ec84039d8c0cbb0b7edf1463a8478eba6306af75196f12da62f26cfdbed"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/runner/platform/windows.py"}, "region": {"startLine": 198}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 33132, "scanner": "repobility-ast-engine", "fingerprint": "7ade515eae26f6a0a1cd19a30b028858209bac8725ad9411b6e4647fdd273f92", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|7ade515eae26f6a0a1cd19a30b028858209bac8725ad9411b6e4647fdd273f92"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/runner/platform/windows.py"}, "region": {"startLine": 90}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 33131, "scanner": "repobility-ast-engine", "fingerprint": "d913e46af866ebafd25381ae499eb2017c360bbd399822ee2362e8d64fae341f", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|d913e46af866ebafd25381ae499eb2017c360bbd399822ee2362e8d64fae341f"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/runner/platform/windows.py"}, "region": {"startLine": 40}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 33130, "scanner": "repobility-ast-engine", "fingerprint": "c5e7f59b4524944da94c6a64233a4745147a27bde5069dacd4d88cc75687bda4", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|c5e7f59b4524944da94c6a64233a4745147a27bde5069dacd4d88cc75687bda4"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/runner/platform/posix.py"}, "region": {"startLine": 327}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 33129, "scanner": "repobility-ast-engine", "fingerprint": "4039b53b688172e66044a36aae0d93b69a38e8173e6c5fa4ea7394fff2d1ffd6", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|4039b53b688172e66044a36aae0d93b69a38e8173e6c5fa4ea7394fff2d1ffd6"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/runner/platform/posix.py"}, "region": {"startLine": 322}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 33128, "scanner": "repobility-ast-engine", "fingerprint": "ad8480a50a0596cc69acb4da8f102e93e59f10b798c28760ceee5b46280dfb9d", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|ad8480a50a0596cc69acb4da8f102e93e59f10b798c28760ceee5b46280dfb9d"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/runner/platform/posix.py"}, "region": {"startLine": 314}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 33127, "scanner": "repobility-ast-engine", "fingerprint": "1fe29860103404f7a563daeab0ea6a3301f8592cfe8b2f67682b5251f2961bf2", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|1fe29860103404f7a563daeab0ea6a3301f8592cfe8b2f67682b5251f2961bf2"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/runner/platform/posix.py"}, "region": {"startLine": 296}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 33126, "scanner": "repobility-ast-engine", "fingerprint": "e806a875602283c55837e1942b3aeda6f80ec4048fbe979b82d44c93ef6be16e", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|e806a875602283c55837e1942b3aeda6f80ec4048fbe979b82d44c93ef6be16e"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/runner/platform/posix.py"}, "region": {"startLine": 187}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 33125, "scanner": "repobility-ast-engine", "fingerprint": "ff0591bfc062d47ff71971afa11af988ffe98cbf27586e9f8e51d63661cab5cc", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|ff0591bfc062d47ff71971afa11af988ffe98cbf27586e9f8e51d63661cab5cc"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/runner/platform/posix.py"}, "region": {"startLine": 122}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 33124, "scanner": "repobility-ast-engine", "fingerprint": "6f42d7d955297f8ec33a29dbcf5e5e53cc475c0d74d3cdb2e4e9c842a023dacf", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|6f42d7d955297f8ec33a29dbcf5e5e53cc475c0d74d3cdb2e4e9c842a023dacf"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/runner/platform/posix.py"}, "region": {"startLine": 51}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 33123, "scanner": "repobility-ast-engine", "fingerprint": "6cebe1d526871069737426457d806112844377a7072c91199f57dbf1e0ff7de5", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|6cebe1d526871069737426457d806112844377a7072c91199f57dbf1e0ff7de5"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/runner/utils.py"}, "region": {"startLine": 94}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 33122, "scanner": "repobility-ast-engine", "fingerprint": "443821da2aefb3813f9086c7f4ef3cb11a7f6901d6e870a4168e218b1553bed6", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|443821da2aefb3813f9086c7f4ef3cb11a7f6901d6e870a4168e218b1553bed6"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/runner/utils.py"}, "region": {"startLine": 51}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 33121, "scanner": "repobility-ast-engine", "fingerprint": "dde53689284fba772fae854016727dbc99e9a91adeb5138b946f565fc5fd27c1", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|dde53689284fba772fae854016727dbc99e9a91adeb5138b946f565fc5fd27c1"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/debuggers/unix.py"}, "region": {"startLine": 61}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 33120, "scanner": "repobility-ast-engine", "fingerprint": "1ee76f4f917662323123eee68aafe512a6502628ba767d55a8d5fd6d2e716db7", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|1ee76f4f917662323123eee68aafe512a6502628ba767d55a8d5fd6d2e716db7"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/run_tests.py"}, "region": {"startLine": 1806}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 33119, "scanner": "repobility-ast-engine", "fingerprint": "96c02c21f044624522db4e78b6e511d36dc5510a314ce8ff3a4ea65a4661365e", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|96c02c21f044624522db4e78b6e511d36dc5510a314ce8ff3a4ea65a4661365e"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/run_tests.py"}, "region": {"startLine": 1795}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 33118, "scanner": "repobility-ast-engine", "fingerprint": "d94e9427da914ba058d062a0f91e09252138b020d0f3b4ee093770afd9e79102", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|d94e9427da914ba058d062a0f91e09252138b020d0f3b4ee093770afd9e79102"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/run_tests.py"}, "region": {"startLine": 1740}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 33117, "scanner": "repobility-ast-engine", "fingerprint": "d8c3680f4f4f9d7acc5b5656aa82a279e08320fe0f060e789e1dfa47cdeee6a0", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|d8c3680f4f4f9d7acc5b5656aa82a279e08320fe0f060e789e1dfa47cdeee6a0"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/run_tests.py"}, "region": {"startLine": 1734}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 33116, "scanner": "repobility-ast-engine", "fingerprint": "57070303df7b1199288e2488d5a659dae5eb32c70cebb2dea60f83970c967fb5", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|57070303df7b1199288e2488d5a659dae5eb32c70cebb2dea60f83970c967fb5"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/run_tests.py"}, "region": {"startLine": 1345}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 33115, "scanner": "repobility-ast-engine", "fingerprint": "0cba8eaffa0858a09054b6f85a6859d281dfc1df891233660578b7d1c4015d76", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|0cba8eaffa0858a09054b6f85a6859d281dfc1df891233660578b7d1c4015d76"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/run_tests.py"}, "region": {"startLine": 1044}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 33114, "scanner": "repobility-ast-engine", "fingerprint": "cf6162d874691471ff75588a4d55ee418f579044a6be7d36f8cd1336646e3794", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|cf6162d874691471ff75588a4d55ee418f579044a6be7d36f8cd1336646e3794"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/run_tests.py"}, "region": {"startLine": 460}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 33113, "scanner": "repobility-ast-engine", "fingerprint": "e60f344ae25d98084e66acb0bf8d94fdfa9a034a0b909f60d71c0e479ea93641", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|e60f344ae25d98084e66acb0bf8d94fdfa9a034a0b909f60d71c0e479ea93641"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/run_tests.py"}, "region": {"startLine": 2067}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 33112, "scanner": "repobility-ast-engine", "fingerprint": "99e019fd9fc0d69bf345902d2519fa1b660cb57cdd23082ce5508e1eb6bc291f", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|99e019fd9fc0d69bf345902d2519fa1b660cb57cdd23082ce5508e1eb6bc291f"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/run_tests.py"}, "region": {"startLine": 2011}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 33111, "scanner": "repobility-ast-engine", "fingerprint": "6bcd80fa5b2a9e9fff7ce0523359c4739bf51ab1ad190a8b4d43a8fbfcf038fa", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|6bcd80fa5b2a9e9fff7ce0523359c4739bf51ab1ad190a8b4d43a8fbfcf038fa"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/run_tests.py"}, "region": {"startLine": 543}}}]}, {"ruleId": "COMP001", "level": "note", "message": {"text": "[COMP001] High cognitive complexity: Function `run_lldb_for_tests` has cognitive complexity 10 (SonarSource scale). Cognitive complexity measures how hard the function is for a human to understand \u2014 nested branches, boolean chains, and recursion all weigh in. Breakdown: continue=1, except=1, for=2, if=2, nested_bonus=3, ternary=1."}, "properties": {"repobilityId": 33153, "scanner": "repobility-threat-engine", "fingerprint": "f74a537de0133e12185668d200ae87df409635ed6359194a0b6686476a78d5eb", "category": "quality", "severity": "low", "confidence": 0.95, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "AST-derived cognitive complexity score = 10 (severity threshold for low: 8+).", "evidence": {"scanner": "repobility-threat-engine", "function": "run_lldb_for_tests", "breakdown": {"if": 2, "for": 2, "except": 1, "ternary": 1, "continue": 1, "nested_bonus": 3}, "complexity": 10, "correlation_key": "fp|f74a537de0133e12185668d200ae87df409635ed6359194a0b6686476a78d5eb"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/collect_lldb_backtraces.py"}, "region": {"startLine": 96}}}]}, {"ruleId": "COMP001", "level": "note", "message": {"text": "[COMP001] High cognitive complexity: Function `collect_ctest_metadata` has cognitive complexity 10 (SonarSource scale). Cognitive complexity measures how hard the function is for a human to understand \u2014 nested branches, boolean chains, and recursion all weigh in. Breakdown: break=1, continue=1, for=2, if=2, nested_bonus=4."}, "properties": {"repobilityId": 33152, "scanner": "repobility-threat-engine", "fingerprint": "b2ad2e6b499e81068ae982b2ee9dd59745a83ae3aadb223ed7ab056e5267bcbb", "category": "quality", "severity": "low", "confidence": 0.95, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "AST-derived cognitive complexity score = 10 (severity threshold for low: 8+).", "evidence": {"scanner": "repobility-threat-engine", "function": "collect_ctest_metadata", "breakdown": {"if": 2, "for": 2, "break": 1, "continue": 1, "nested_bonus": 4}, "complexity": 10, "correlation_key": "fp|b2ad2e6b499e81068ae982b2ee9dd59745a83ae3aadb223ed7ab056e5267bcbb"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/collect_lldb_backtraces.py"}, "region": {"startLine": 69}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 33085, "scanner": "repobility-ai-code-hygiene", "fingerprint": "c7e72eacb965aa6633fcb2923fab9ef06743334679de577ff359733eb0edbf01", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "tests/leave_lifecycle_test.cpp", "duplicate_line": 113, "correlation_key": "fp|c7e72eacb965aa6633fcb2923fab9ef06743334679de577ff359733eb0edbf01"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/teardown_targeted_rpc_exception_test.cpp"}, "region": {"startLine": 199}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 33084, "scanner": "repobility-ai-code-hygiene", "fingerprint": "e36e17b4a827fb469400a1047f26a9c717421e712e6c36574b62e56b3cf0add3", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "tests/barrier_guardrails_test.cpp", "duplicate_line": 2, "correlation_key": "fp|e36e17b4a827fb469400a1047f26a9c717421e712e6c36574b62e56b3cf0add3"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/teardown_targeted_rpc_exception_test.cpp"}, "region": {"startLine": 28}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 33083, "scanner": "repobility-ai-code-hygiene", "fingerprint": "c5d132b66d8ffb422e4606a7cb9f98f356b949a80376a4a40631399d1abd2679", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "tests/external_process_invitation_test.cpp", "duplicate_line": 139, "correlation_key": "fp|c5d132b66d8ffb422e4606a7cb9f98f356b949a80376a4a40631399d1abd2679"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/spinlock_recovery_test.cpp"}, "region": {"startLine": 81}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 33082, "scanner": "repobility-ai-code-hygiene", "fingerprint": "fd8ccd6ce7291efec034b159cc87eeb0d5311b598cbca4e840320bf1034436fd", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "tests/barrier_delivery_fence_repro_test.cpp", "duplicate_line": 222, "correlation_key": "fp|fd8ccd6ce7291efec034b159cc87eeb0d5311b598cbca4e840320bf1034436fd"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/shutdown_helper_test.cpp"}, "region": {"startLine": 14}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 33081, "scanner": "repobility-ai-code-hygiene", "fingerprint": "1a8e14ec55d40def99af5c2b1c360df1fbddf4c55b4537933bfb3046a9445eef", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "tests/runner/platform/posix.py", "duplicate_line": 271, "correlation_key": "fp|1a8e14ec55d40def99af5c2b1c360df1fbddf4c55b4537933bfb3046a9445eef"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/runner/platform/windows.py"}, "region": {"startLine": 187}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 33080, "scanner": "repobility-ai-code-hygiene", "fingerprint": "d44d8ebc9c65fea16d45d02e34820107c565ff6697505654912d86ca708aa826", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "tests/recovery_policy_test.cpp", "duplicate_line": 54, "correlation_key": "fp|d44d8ebc9c65fea16d45d02e34820107c565ff6697505654912d86ca708aa826"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/recovery_runner_thread_test.cpp"}, "region": {"startLine": 53}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 33079, "scanner": "repobility-ai-code-hygiene", "fingerprint": "77cc99695b2d86e6c4d97119270cd88ab3771420f8a76553344c0f7f28e96e92", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "tests/barrier_delivery_fence_repro_test.cpp", "duplicate_line": 1, "correlation_key": "fp|77cc99695b2d86e6c4d97119270cd88ab3771420f8a76553344c0f7f28e96e92"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/manual/barrier_delivery_fence_repro_test.cpp"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 33078, "scanner": "repobility-ai-code-hygiene", "fingerprint": "236c5705ed24bb13dca35a88560ec186dbab6c7d7a093eb9dd9fd6d46335ac32", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "tests/barrier_guardrails_test.cpp", "duplicate_line": 2, "correlation_key": "fp|236c5705ed24bb13dca35a88560ec186dbab6c7d7a093eb9dd9fd6d46335ac32"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/leave_lifecycle_test.cpp"}, "region": {"startLine": 8}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 33077, "scanner": "repobility-ai-code-hygiene", "fingerprint": "3d44ac529c4d7c7d4250673ccf3ec96a651caa51b2f8e2d14753d36e3be57d8b", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "tests/barrier_guardrails_test.cpp", "duplicate_line": 2, "correlation_key": "fp|3d44ac529c4d7c7d4250673ccf3ec96a651caa51b2f8e2d14753d36e3be57d8b"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/leave_coordinator_guardrails_test.cpp"}, "region": {"startLine": 4}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 33076, "scanner": "repobility-ai-code-hygiene", "fingerprint": "b2f37621385f6f1dc53a42e76093bd4f2e987b2bd98020f52553508963ae77b4", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "tests/external_process_invitation_lifecycle_negative_test.cpp", "duplicate_line": 177, "correlation_key": "fp|b2f37621385f6f1dc53a42e76093bd4f2e987b2bd98020f52553508963ae77b4"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/external_process_invitation_test.cpp"}, "region": {"startLine": 100}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 33075, "scanner": "repobility-ai-code-hygiene", "fingerprint": "d9795edfcd88db48e897477f5623998f359db2ada5e1aa48d59260c700cc639f", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "tests/external_process_invitation_rejection_cleanup_test.cpp", "duplicate_line": 52, "correlation_key": "fp|d9795edfcd88db48e897477f5623998f359db2ada5e1aa48d59260c700cc639f"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/external_process_invitation_test.cpp"}, "region": {"startLine": 44}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 33074, "scanner": "repobility-ai-code-hygiene", "fingerprint": "9d40535c3828440b1df68288443ed40375437bc601a580cdd63d6153f7ae79b7", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "tests/external_process_invitation_admission_negative_test.cpp", "duplicate_line": 27, "correlation_key": "fp|9d40535c3828440b1df68288443ed40375437bc601a580cdd63d6153f7ae79b7"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/external_process_invitation_test.cpp"}, "region": {"startLine": 23}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 33073, "scanner": "repobility-ai-code-hygiene", "fingerprint": "12954324f99425d0549ea44d57b19bf99a458589853cca7f974d45fd34064e4e", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "tests/external_process_invitation_lifecycle_negative_test.cpp", "duplicate_line": 177, "correlation_key": "fp|12954324f99425d0549ea44d57b19bf99a458589853cca7f974d45fd34064e4e"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/external_process_invitation_rejection_cleanup_test.cpp"}, "region": {"startLine": 108}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 33072, "scanner": "repobility-ai-code-hygiene", "fingerprint": "4833f43e730c5b2c79a5863726c7bf38697286020a1fbe3510ef97223d276ade", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "tests/external_process_invitation_admission_negative_test.cpp", "duplicate_line": 27, "correlation_key": "fp|4833f43e730c5b2c79a5863726c7bf38697286020a1fbe3510ef97223d276ade"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/external_process_invitation_rejection_cleanup_test.cpp"}, "region": {"startLine": 31}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 33071, "scanner": "repobility-ai-code-hygiene", "fingerprint": "45d99bcba847e67d6668be3fbb6f9fa9c899710748fd0bc90a18c00a45e30199", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "tests/external_process_invitation_admission_negative_test.cpp", "duplicate_line": 29, "correlation_key": "fp|45d99bcba847e67d6668be3fbb6f9fa9c899710748fd0bc90a18c00a45e30199"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/external_process_invitation_lifecycle_negative_test.cpp"}, "region": {"startLine": 17}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 33070, "scanner": "repobility-ai-code-hygiene", "fingerprint": "b3cf55c3c769a3f1e3518838db49cda057445f0d49041df56cc8587d7b32cfa2", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "tests/barrier_delivery_fence_repro_test.cpp", "duplicate_line": 244, "correlation_key": "fp|b3cf55c3c769a3f1e3518838db49cda057445f0d49041df56cc8587d7b32cfa2"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/barrier_flush_test.cpp"}, "region": {"startLine": 188}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 33069, "scanner": "repobility-ai-code-hygiene", "fingerprint": "92868e35a92f707cb99d96a82889849e380294b1c36c6e8856c264a823e243d6", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "tests/barrier_complex_choreography_test.cpp", "duplicate_line": 358, "correlation_key": "fp|92868e35a92f707cb99d96a82889849e380294b1c36c6e8856c264a823e243d6"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/barrier_flush_test.cpp"}, "region": {"startLine": 184}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 33068, "scanner": "repobility-ai-code-hygiene", "fingerprint": "740445df3234cb5a6d74758f9db553bcf3c8be97c01e21f1e76bd64729a49d31", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "tests/barrier_complex_choreography_test.cpp", "duplicate_line": 358, "correlation_key": "fp|740445df3234cb5a6d74758f9db553bcf3c8be97c01e21f1e76bd64729a49d31"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/barrier_delivery_fence_repro_test.cpp"}, "region": {"startLine": 240}}}]}, {"ruleId": "MINED064", "level": "none", "message": {"text": "[MINED064] Python Input Call: input() blocks for stdin. Inappropriate in services."}, "properties": {"repobilityId": 33154, "scanner": "repobility-threat-engine", "fingerprint": "53ace4d42a6a29ed543f767e64c0d9533d55b4c662e927310f9fbe6b5fde26f9", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "python-input-call", "owasp": null, "cwe_ids": [], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348050+00:00", "triaged_in_corpus": 12, "observations_count": 66378, "ai_coder_pattern_id": 124}, "scanner": "repobility-threat-engine", "correlation_key": "fp|53ace4d42a6a29ed543f767e64c0d9533d55b4c662e927310f9fbe6b5fde26f9"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "trigger_ci.py"}, "region": {"startLine": 16}}}]}, {"ruleId": "MINED080", "level": "none", "message": {"text": "[MINED080] Cpp Using Namespace Std (and 3 more): Same pattern found in 3 additional files. Review if needed."}, "properties": {"repobilityId": 33151, "scanner": "repobility-threat-engine", "fingerprint": "c902da29cf1285e29e2892c25fe28769c1d56a1e455a3d68fef1fa89287c2dc6", "category": "quality", "severity": "info", "confidence": 0.2, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Deduplicated summary only: 3 additional occurrences found. The top occurrences remain visible as actionable findings.", "evidence": {"mined": true, "mining": {"slug": "cpp-using-namespace-std", "owasp": null, "cwe_ids": [], "languages": ["cpp", "h", "hpp"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348123+00:00", "triaged_in_corpus": 12, "observations_count": 3566, "ai_coder_pattern_id": 133}, "scanner": "repobility-threat-engine", "aggregated": true, "correlation_key": "fp|c902da29cf1285e29e2892c25fe28769c1d56a1e455a3d68fef1fa89287c2dc6", "aggregated_count": 3}}}, {"ruleId": "MINED080", "level": "none", "message": {"text": "[MINED080] Cpp Using Namespace Std: using namespace std; pollutes the global namespace."}, "properties": {"repobilityId": 33150, "scanner": "repobility-threat-engine", "fingerprint": "05a9b76f954a563a929d6e3354ee293d983b8a761489391454045edcc809cad6", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "cpp-using-namespace-std", "owasp": null, "cwe_ids": [], "languages": ["cpp", "h", "hpp"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348123+00:00", "triaged_in_corpus": 12, "observations_count": 3566, "ai_coder_pattern_id": 133}, "scanner": "repobility-threat-engine", "correlation_key": "fp|05a9b76f954a563a929d6e3354ee293d983b8a761489391454045edcc809cad6"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "example/sintra/sintra_example_2_rpc_append.cpp"}, "region": {"startLine": 48}}}]}, {"ruleId": "MINED080", "level": "none", "message": {"text": "[MINED080] Cpp Using Namespace Std: using namespace std; pollutes the global namespace."}, "properties": {"repobilityId": 33149, "scanner": "repobility-threat-engine", "fingerprint": "635855552f822dec4e840e40e9cafe50cfc20187addd19861b730c1d8bbf9d18", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "cpp-using-namespace-std", "owasp": null, "cwe_ids": [], "languages": ["cpp", "h", "hpp"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348123+00:00", "triaged_in_corpus": 12, "observations_count": 3566, "ai_coder_pattern_id": 133}, "scanner": "repobility-threat-engine", "correlation_key": "fp|635855552f822dec4e840e40e9cafe50cfc20187addd19861b730c1d8bbf9d18"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "example/sintra/sintra_example_1_ping_pong_multi.cpp"}, "region": {"startLine": 18}}}]}, {"ruleId": "MINED080", "level": "none", "message": {"text": "[MINED080] Cpp Using Namespace Std: using namespace std; pollutes the global namespace."}, "properties": {"repobilityId": 33148, "scanner": "repobility-threat-engine", "fingerprint": "14438ec2d2b7092dbd57cba73c6bcdbd4e2ca7791c0ba5f4f38dadf658da9619", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "cpp-using-namespace-std", "owasp": null, "cwe_ids": [], "languages": ["cpp", "h", "hpp"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348123+00:00", "triaged_in_corpus": 12, "observations_count": 3566, "ai_coder_pattern_id": 133}, "scanner": "repobility-threat-engine", "correlation_key": "fp|14438ec2d2b7092dbd57cba73c6bcdbd4e2ca7791c0ba5f4f38dadf658da9619"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "example/sintra/sintra_example_0_basic_pubsub.cpp"}, "region": {"startLine": 20}}}]}, {"ruleId": "MINED042", "level": "none", "message": {"text": "[MINED042] Cpp New Without Delete: C++ raw new without RAII / unique_ptr \u2014 memory leak risk."}, "properties": {"repobilityId": 33147, "scanner": "repobility-threat-engine", "fingerprint": "0f925a25cf84301f7956294d6b88da00960754e920fcc535543c7d832a2392c9", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "cpp-new-without-delete", "owasp": null, "cwe_ids": ["CWE-401"], "languages": ["cpp"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347996+00:00", "triaged_in_corpus": 12, "observations_count": 4658256, "ai_coder_pattern_id": 134}, "scanner": "repobility-threat-engine", "correlation_key": "fp|0f925a25cf84301f7956294d6b88da00960754e920fcc535543c7d832a2392c9"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "include/sintra/detail/messaging/process_message_reader.h"}, "region": {"startLine": 70}}}]}, {"ruleId": "MINED042", "level": "none", "message": {"text": "[MINED042] Cpp New Without Delete: C++ raw new without RAII / unique_ptr \u2014 memory leak risk."}, "properties": {"repobilityId": 33146, "scanner": "repobility-threat-engine", "fingerprint": "9949ff7e38130f8e87956266aacf9536d6bff67df7bc9b404dd7125229d7736d", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "cpp-new-without-delete", "owasp": null, "cwe_ids": ["CWE-401"], "languages": ["cpp"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347996+00:00", "triaged_in_corpus": 12, "observations_count": 4658256, "ai_coder_pattern_id": 134}, "scanner": "repobility-threat-engine", "correlation_key": "fp|9949ff7e38130f8e87956266aacf9536d6bff67df7bc9b404dd7125229d7736d"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "example/qt_basic/cursor_sync_sender.cpp"}, "region": {"startLine": 36}}}]}, {"ruleId": "MINED042", "level": "none", "message": {"text": "[MINED042] Cpp New Without Delete: C++ raw new without RAII / unique_ptr \u2014 memory leak risk."}, "properties": {"repobilityId": 33145, "scanner": "repobility-threat-engine", "fingerprint": "37f59132b17d8e610bb6c919abed16a476567eca0f5e72ec3ee4c4fc53a09354", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "cpp-new-without-delete", "owasp": null, "cwe_ids": ["CWE-401"], "languages": ["cpp"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347996+00:00", "triaged_in_corpus": 12, "observations_count": 4658256, "ai_coder_pattern_id": 134}, "scanner": "repobility-threat-engine", "correlation_key": "fp|37f59132b17d8e610bb6c919abed16a476567eca0f5e72ec3ee4c4fc53a09354"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "example/qt_basic/cursor_sync_receiver.cpp"}, "region": {"startLine": 49}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self._decode_posix_signal` used but never assigned in __init__"}, "properties": {"repobilityId": 33110, "scanner": "repobility-ast-engine", "fingerprint": "28e7ce869cc92a505debfe97b0f420d8392cb3906ef58f55976dcd5ac99f389e", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|28e7ce869cc92a505debfe97b0f420d8392cb3906ef58f55976dcd5ac99f389e"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/run_tests.py"}, "region": {"startLine": 1672}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self._describe_pids` used but never assigned in __init__"}, "properties": {"repobilityId": 33109, "scanner": "repobility-ast-engine", "fingerprint": "24bd130a78ac6ce223685838f534f7ca1ad332a415536a8d5450bb1d8020059e", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|24bd130a78ac6ce223685838f534f7ca1ad332a415536a8d5450bb1d8020059e"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/run_tests.py"}, "region": {"startLine": 1068}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self._cleanup_new_core_dumps` used but never assigned in __init__"}, "properties": {"repobilityId": 33108, "scanner": "repobility-ast-engine", "fingerprint": "d846ead2b6d43bbbc4f960db7e1b0d7476ecff17bee558a72594ceb6c01c066a", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|d846ead2b6d43bbbc4f960db7e1b0d7476ecff17bee558a72594ceb6c01c066a"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/run_tests.py"}, "region": {"startLine": 2061}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self._build_test_environment` used but never assigned in __init__"}, "properties": {"repobilityId": 33107, "scanner": "repobility-ast-engine", "fingerprint": "862ffe969111f2ba857db2e1f24701a44f3d491428aa6b6880ea3f4836560be0", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|862ffe969111f2ba857db2e1f24701a44f3d491428aa6b6880ea3f4836560be0"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/run_tests.py"}, "region": {"startLine": 967}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self._instrument_step` used but never assigned in __init__"}, "properties": {"repobilityId": 33106, "scanner": "repobility-ast-engine", "fingerprint": "64e46fe1ef221c975adb03f3a3bd5c82f7903e0bde7dc5b65878b131f6716482", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|64e46fe1ef221c975adb03f3a3bd5c82f7903e0bde7dc5b65878b131f6716482"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/run_tests.py"}, "region": {"startLine": 956}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self.instrumentation_active` used but never assigned in __init__"}, "properties": {"repobilityId": 33105, "scanner": "repobility-ast-engine", "fingerprint": "dffcc9e68341dc1baff0190b7050f579ea2b6e144046b63ed41cb65044a05ca9", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|dffcc9e68341dc1baff0190b7050f579ea2b6e144046b63ed41cb65044a05ca9"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/run_tests.py"}, "region": {"startLine": 955}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self._snapshot_core_dumps` used but never assigned in __init__"}, "properties": {"repobilityId": 33104, "scanner": "repobility-ast-engine", "fingerprint": "93f6a7269520b8fa1d9880eb6efe293c3b6549303ef328aa258841d52fa17fa7", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|93f6a7269520b8fa1d9880eb6efe293c3b6549303ef328aa258841d52fa17fa7"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/run_tests.py"}, "region": {"startLine": 952}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self._allocate_scratch_directory` used but never assigned in __init__"}, "properties": {"repobilityId": 33103, "scanner": "repobility-ast-engine", "fingerprint": "a4ea9f1193521676d0d870dcc77dc1540c365fd7dd528b2d629986928585b7e1", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|a4ea9f1193521676d0d870dcc77dc1540c365fd7dd528b2d629986928585b7e1"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/run_tests.py"}, "region": {"startLine": 949}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self._list_ipc_rings_tests` used but never assigned in __init__"}, "properties": {"repobilityId": 33102, "scanner": "repobility-ast-engine", "fingerprint": "094f7b65ee1c57341d99bb751e1162fa4b661bf63e258e89fd55a395a7f8c2c6", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|094f7b65ee1c57341d99bb751e1162fa4b661bf63e258e89fd55a395a7f8c2c6"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/run_tests.py"}, "region": {"startLine": 879}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self._expand_ipc_rings_invocations` used but never assigned in __init__"}, "properties": {"repobilityId": 33101, "scanner": "repobility-ast-engine", "fingerprint": "7cae6cf12e72b66506c951139d230c1e7a9000652b49ad4a1d63e0c47cffef41", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|7cae6cf12e72b66506c951139d230c1e7a9000652b49ad4a1d63e0c47cffef41"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/run_tests.py"}, "region": {"startLine": 870}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self._expand_test_invocations` used but never assigned in __init__"}, "properties": {"repobilityId": 33100, "scanner": "repobility-ast-engine", "fingerprint": "4c4412e87687bd42ad3c7b7d35ae369bbfb3a7af8f48f558d31c3f85e044900a", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|4c4412e87687bd42ad3c7b7d35ae369bbfb3a7af8f48f558d31c3f85e044900a"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/run_tests.py"}, "region": {"startLine": 834}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self._cleanup_scratch_directory` used but never assigned in __init__"}, "properties": {"repobilityId": 33099, "scanner": "repobility-ast-engine", "fingerprint": "308620a05c906001328a42b81bd21a2c0a13fa42011d110fc5b451e5656c66f2", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|308620a05c906001328a42b81bd21a2c0a13fa42011d110fc5b451e5656c66f2"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/run_tests.py"}, "region": {"startLine": 723}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self._record_core_cleanup` used but never assigned in __init__"}, "properties": {"repobilityId": 33098, "scanner": "repobility-ast-engine", "fingerprint": "ccb3ef9f4c25e6873fb61d0a5b50353b288f5da1f2e52698749099e3227a602c", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|ccb3ef9f4c25e6873fb61d0a5b50353b288f5da1f2e52698749099e3227a602c"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/run_tests.py"}, "region": {"startLine": 711}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self._record_core_cleanup` used but never assigned in __init__"}, "properties": {"repobilityId": 33097, "scanner": "repobility-ast-engine", "fingerprint": "611acdc5c11313fede4658952b44986c1bc58c3735897be9a06576a268559a39", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|611acdc5c11313fede4658952b44986c1bc58c3735897be9a06576a268559a39"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/run_tests.py"}, "region": {"startLine": 708}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self._record_core_cleanup` used but never assigned in __init__"}, "properties": {"repobilityId": 33096, "scanner": "repobility-ast-engine", "fingerprint": "89c5b2589dcba78b4088746e536f713b8fe8a1541e26bd7c67bb85ffdc59f332", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|89c5b2589dcba78b4088746e536f713b8fe8a1541e26bd7c67bb85ffdc59f332"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/run_tests.py"}, "region": {"startLine": 700}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self._record_core_cleanup` used but never assigned in __init__"}, "properties": {"repobilityId": 33095, "scanner": "repobility-ast-engine", "fingerprint": "29e0a24aa93070f0c25b96ebfee19ae3fb8e792334b255c8f7e536afe7df653b", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|29e0a24aa93070f0c25b96ebfee19ae3fb8e792334b255c8f7e536afe7df653b"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/run_tests.py"}, "region": {"startLine": 675}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self._find_new_core_dumps` used but never assigned in __init__"}, "properties": {"repobilityId": 33094, "scanner": "repobility-ast-engine", "fingerprint": "393dcad990b34da972aa955d0267a4a0aa79a78ca6649da26f18d1699bb44bbd", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|393dcad990b34da972aa955d0267a4a0aa79a78ca6649da26f18d1699bb44bbd"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/run_tests.py"}, "region": {"startLine": 658}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self._is_core_dump_file` used but never assigned in __init__"}, "properties": {"repobilityId": 33093, "scanner": "repobility-ast-engine", "fingerprint": "08ebe2661c06b6532cd096f09911ff2aecfc4f54f3afef417a2c19244f40b758", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|08ebe2661c06b6532cd096f09911ff2aecfc4f54f3afef417a2c19244f40b758"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/run_tests.py"}, "region": {"startLine": 622}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self._normalize_core_path` used but never assigned in __init__"}, "properties": {"repobilityId": 33092, "scanner": "repobility-ast-engine", "fingerprint": "d669ca818f8ab37baf7a2021b43ed23c775c5ecea6f2d9b77e41e36a04dd3b83", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|d669ca818f8ab37baf7a2021b43ed23c775c5ecea6f2d9b77e41e36a04dd3b83"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/run_tests.py"}, "region": {"startLine": 625}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self._core_dump_search_directories` used but never assigned in __init__"}, "properties": {"repobilityId": 33091, "scanner": "repobility-ast-engine", "fingerprint": "28f335b1ebc18b94f106671b7c90ea0e6ec9bc37046e71ad312c59f2ff54522e", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|28f335b1ebc18b94f106671b7c90ea0e6ec9bc37046e71ad312c59f2ff54522e"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/run_tests.py"}, "region": {"startLine": 613}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self._normalize_core_path` used but never assigned in __init__"}, "properties": {"repobilityId": 33090, "scanner": "repobility-ast-engine", "fingerprint": "33ca941fd10b703a2cdaedeb948fbd7f7758e051465ae61e4df2fcc2aaf5a783", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|33ca941fd10b703a2cdaedeb948fbd7f7758e051465ae61e4df2fcc2aaf5a783"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/run_tests.py"}, "region": {"startLine": 600}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self._is_core_dump_file` used but never assigned in __init__"}, "properties": {"repobilityId": 33089, "scanner": "repobility-ast-engine", "fingerprint": "9c4fef03bb4de4ac21b79f28ce43d162f06a21e8c5cecfb7710ad0ade5244887", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|9c4fef03bb4de4ac21b79f28ce43d162f06a21e8c5cecfb7710ad0ade5244887"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/run_tests.py"}, "region": {"startLine": 598}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self._core_dump_search_directories` used but never assigned in __init__"}, "properties": {"repobilityId": 33088, "scanner": "repobility-ast-engine", "fingerprint": "687d7287075957ed32d7e857667b0884af8f44ce9ac8517b0012cb98681563d8", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|687d7287075957ed32d7e857667b0884af8f44ce9ac8517b0012cb98681563d8"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/run_tests.py"}, "region": {"startLine": 589}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self._record_scratch_cleanup` used but never assigned in __init__"}, "properties": {"repobilityId": 33087, "scanner": "repobility-ast-engine", "fingerprint": "4e18742d3e84ad5714b120a6545ea36719d51b2385a1e6f9dbdec2c5c7c91fda", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|4e18742d3e84ad5714b120a6545ea36719d51b2385a1e6f9dbdec2c5c7c91fda"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/run_tests.py"}, "region": {"startLine": 549}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self._estimate_directory_size` used but never assigned in __init__"}, "properties": {"repobilityId": 33086, "scanner": "repobility-ast-engine", "fingerprint": "5e86bc4a9b343c22d2d35e8be19f40f2dd9795f804502598e66ccc6136e5e1a7", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|5e86bc4a9b343c22d2d35e8be19f40f2dd9795f804502598e66ccc6136e5e1a7"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/run_tests.py"}, "region": {"startLine": 537}}}]}, {"ruleId": "MINED116", "level": "error", "message": {"text": "Workflow uses `secrets.GIST_SECRET` on a `pull_request` trigger"}, "properties": {"repobilityId": 33142, "scanner": "repobility-supply-chain", "fingerprint": "118b7841bd50eed211276f7e4f5d310427e1123ef9daa699758254f2628866dd", "category": "dependency", "severity": "critical", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-pull-request-secrets", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|118b7841bd50eed211276f7e4f5d310427e1123ef9daa699758254f2628866dd"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/build-windows.yml"}, "region": {"startLine": 196}}}]}, {"ruleId": "MINED116", "level": "error", "message": {"text": "Workflow uses `secrets.GIST_SECRET` on a `pull_request` trigger"}, "properties": {"repobilityId": 33141, "scanner": "repobility-supply-chain", "fingerprint": "c23b55daef69cffee3dc1481a4ee4895671755d90576a62baed5595fe7209f72", "category": "dependency", "severity": "critical", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-pull-request-secrets", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|c23b55daef69cffee3dc1481a4ee4895671755d90576a62baed5595fe7209f72"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/build-windows.yml"}, "region": {"startLine": 182}}}]}, {"ruleId": "MINED116", "level": "error", "message": {"text": "Workflow uses `secrets.GIST_SECRET` on a `pull_request` trigger"}, "properties": {"repobilityId": 33140, "scanner": "repobility-supply-chain", "fingerprint": "c3b7f24d4ab1f47c0767ca54d23fd84dc752ccaef8477230db08f4bba1074fff", "category": "dependency", "severity": "critical", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-pull-request-secrets", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|c3b7f24d4ab1f47c0767ca54d23fd84dc752ccaef8477230db08f4bba1074fff"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/build-linux.yml"}, "region": {"startLine": 184}}}]}, {"ruleId": "MINED116", "level": "error", "message": {"text": "Workflow uses `secrets.GIST_SECRET` on a `pull_request` trigger"}, "properties": {"repobilityId": 33139, "scanner": "repobility-supply-chain", "fingerprint": "59004cc96d26a0da6101cb994f6414513efcc1152387400abf9bb55018bb536e", "category": "dependency", "severity": "critical", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-pull-request-secrets", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|59004cc96d26a0da6101cb994f6414513efcc1152387400abf9bb55018bb536e"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/build-linux.yml"}, "region": {"startLine": 170}}}]}, {"ruleId": "MINED116", "level": "error", "message": {"text": "Workflow uses `secrets.CODECOV_TOKEN` on a `pull_request` trigger"}, "properties": {"repobilityId": 33138, "scanner": "repobility-supply-chain", "fingerprint": "6e6605075c12a96357452c4aa243b2fde9d2839901b8fe2172acd8b92c52b95b", "category": "dependency", "severity": "critical", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-pull-request-secrets", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|6e6605075c12a96357452c4aa243b2fde9d2839901b8fe2172acd8b92c52b95b"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/coverage.yml"}, "region": {"startLine": 150}}}]}, {"ruleId": "MINED116", "level": "error", "message": {"text": "Workflow uses `secrets.GIST_SECRET` on a `pull_request` trigger"}, "properties": {"repobilityId": 33137, "scanner": "repobility-supply-chain", "fingerprint": "a57b30116faf5f1d64ad220ebfae85b6688eb5929e8dfa615b7e64fd9c60593c", "category": "dependency", "severity": "critical", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-pull-request-secrets", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|a57b30116faf5f1d64ad220ebfae85b6688eb5929e8dfa615b7e64fd9c60593c"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/build-macos.yml"}, "region": {"startLine": 136}}}]}, {"ruleId": "MINED116", "level": "error", "message": {"text": "Workflow uses `secrets.GIST_SECRET` on a `pull_request` trigger"}, "properties": {"repobilityId": 33136, "scanner": "repobility-supply-chain", "fingerprint": "b2c740efc489565572f130b8763c06df5d38f48f701265b1b5c4e5e847a652df", "category": "dependency", "severity": "critical", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-pull-request-secrets", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|b2c740efc489565572f130b8763c06df5d38f48f701265b1b5c4e5e847a652df"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/build-macos.yml"}, "region": {"startLine": 122}}}]}]}]}