{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-8d9a9892ed0e989c", "name": "Possibly dead Python function: closeEvent", "shortDescription": {"text": "Possibly dead Python function: closeEvent"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b178f89dc50fe7bf", "name": "Possibly dead Python function: dragEnterEvent", "shortDescription": {"text": "Possibly dead Python function: dragEnterEvent"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-03f304d2ac808888", "name": "Possibly dead Python function: dragMoveEvent", "shortDescription": {"text": "Possibly dead Python function: dragMoveEvent"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1e0e64dc187317fe", "name": "Possibly dead Python function: dropEvent", "shortDescription": {"text": "Possibly dead Python function: dropEvent"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-aa153b70b4ac12c2", "name": "Possibly dead Python function: refresh_card_data", "shortDescription": {"text": "Possibly dead Python function: refresh_card_data"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a025ef95c28d4fc7", "name": "Possibly dead Python function: mousePressEvent", "shortDescription": {"text": "Possibly dead Python function: mousePressEvent"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-53daf7cd50279b22", "name": "Possibly dead Python function: set_error", "shortDescription": {"text": "Possibly dead Python function: set_error"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3e4c7899375b0a42", "name": "Possibly dead Python function: mousePressEvent", "shortDescription": {"text": "Possibly dead Python function: mousePressEvent"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0b38fa1a4b35bea3", "name": "Possibly dead Python function: enterEvent", "shortDescription": {"text": "Possibly dead Python function: enterEvent"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2f524dd8c495cda3", "name": "Possibly dead Python function: leaveEvent", "shortDescription": {"text": "Possibly dead Python function: leaveEvent"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5ab3b581089923ee", "name": "Possibly dead Python function: is_valid_image_bytes", "shortDescription": {"text": "Possibly dead Python function: is_valid_image_bytes"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6570847b8851effe", "name": "Possibly dead Python function: is_internet_reachable", "shortDescription": {"text": "Possibly dead Python function: is_internet_reachable"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-166bc599b99995a9", "name": "Possibly dead Python function: search_steam_apps", "shortDescription": {"text": "Possibly dead Python function: search_steam_apps"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b5098b80938fa9ae", "name": "Possibly dead Python function: reader", "shortDescription": {"text": "Possibly dead Python function: reader"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9bcf86ee743c96ce", "name": "Possibly dead Python function: set_platform_override", "shortDescription": {"text": "Possibly dead Python function: set_platform_override"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6372cebde0220094", "name": "No auth library detected", "shortDescription": {"text": "No auth library detected"}, "fullDescription": {"text": "The scanner did not find any standard auth library (JWT, OAuth, NextAuth, Auth0, etc.). The repo has auth/admin/session surface indicators, so auth may live in custom code, in a separate service, or be missing."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-27924aa79fa4a517", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v7 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-46c644c6227e4d4a", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v7 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1838a141491ce38c", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3ab5d313dda8e5f9", "name": "Debug logging residue appears in source files", "shortDescription": {"text": "Debug logging residue appears in source files"}, "fullDescription": {"text": "Found 9 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b3ee064becf39252", "name": "Legacy-named symbol `restore_backup` in ui/screens/shortcut_list_screen.py:11", "shortDescription": {"text": "Legacy-named symbol `restore_backup` in ui/screens/shortcut_list_screen.py:11"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2a67e502c8571be8", "name": "Legacy-named symbol `create_backup` in core/shortcuts_io.py:61", "shortDescription": {"text": "Legacy-named symbol `create_backup` in core/shortcuts_io.py:61"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/30837"}, "properties": {"repository": "InsertCleverNameHere/SteamShortcutManager", "repoUrl": "https://github.com/InsertCleverNameHere/SteamShortcutManager", "branch": "main"}, "results": [{"ruleId": "scanner-8d9a9892ed0e989c", "level": "note", "message": {"text": "Possibly dead Python function: closeEvent"}, "properties": {"repobilityId": "dce653ff45e1e7b4", "scanner": "scanner-primary", "fingerprint": "8d9a9892ed0e989c", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "main.py:211"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b178f89dc50fe7bf", "level": "note", "message": {"text": "Possibly dead Python function: dragEnterEvent"}, "properties": {"repobilityId": "b697340237933307", "scanner": "scanner-primary", "fingerprint": "b178f89dc50fe7bf", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "ui/screens/shortcut_list_screen.py:404"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-03f304d2ac808888", "level": "note", "message": {"text": "Possibly dead Python function: dragMoveEvent"}, "properties": {"repobilityId": "023f1c28127bc6da", "scanner": "scanner-primary", "fingerprint": "03f304d2ac808888", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "ui/screens/shortcut_list_screen.py:411"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1e0e64dc187317fe", "level": "note", "message": {"text": "Possibly dead Python function: dropEvent"}, "properties": {"repobilityId": "357965e641e9f054", "scanner": "scanner-primary", "fingerprint": "1e0e64dc187317fe", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "ui/screens/shortcut_list_screen.py:417"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-aa153b70b4ac12c2", "level": "note", "message": {"text": "Possibly dead Python function: refresh_card_data"}, "properties": {"repobilityId": "a80d8aa154ac6954", "scanner": "scanner-primary", "fingerprint": "aa153b70b4ac12c2", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "ui/screens/library_screen.py:23"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a025ef95c28d4fc7", "level": "note", "message": {"text": "Possibly dead Python function: mousePressEvent"}, "properties": {"repobilityId": "7403b709236aadb2", "scanner": "scanner-primary", "fingerprint": "a025ef95c28d4fc7", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "ui/screens/asset_details_screen.py:133"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-53daf7cd50279b22", "level": "note", "message": {"text": "Possibly dead Python function: set_error"}, "properties": {"repobilityId": "75daa2bca685aa0a", "scanner": "scanner-primary", "fingerprint": "53daf7cd50279b22", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "ui/screens/setup_screen.py:148"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3e4c7899375b0a42", "level": "note", "message": {"text": "Possibly dead Python function: mousePressEvent"}, "properties": {"repobilityId": "7403b709236aadb2", "scanner": "scanner-primary", "fingerprint": "3e4c7899375b0a42", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "ui/widgets/user_card.py:201"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0b38fa1a4b35bea3", "level": "note", "message": {"text": "Possibly dead Python function: enterEvent"}, "properties": {"repobilityId": "e00fe2ec40e4074f", "scanner": "scanner-primary", "fingerprint": "0b38fa1a4b35bea3", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "ui/widgets/user_card.py:205"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2f524dd8c495cda3", "level": "note", "message": {"text": "Possibly dead Python function: leaveEvent"}, "properties": {"repobilityId": "55c8ba09973a5020", "scanner": "scanner-primary", "fingerprint": "2f524dd8c495cda3", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "ui/widgets/user_card.py:209"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5ab3b581089923ee", "level": "note", "message": {"text": "Possibly dead Python function: is_valid_image_bytes"}, "properties": {"repobilityId": "a91886582643f687", "scanner": "scanner-primary", "fingerprint": "5ab3b581089923ee", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "core/asset_provider.py:49"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6570847b8851effe", "level": "note", "message": {"text": "Possibly dead Python function: is_internet_reachable"}, "properties": {"repobilityId": "27292a49f98e4e15", "scanner": "scanner-primary", "fingerprint": "6570847b8851effe", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "core/asset_provider.py:53"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-166bc599b99995a9", "level": "note", "message": {"text": "Possibly dead Python function: search_steam_apps"}, "properties": {"repobilityId": "eb13f2c544381a87", "scanner": "scanner-primary", "fingerprint": "166bc599b99995a9", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "core/asset_provider.py:57"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b5098b80938fa9ae", "level": "note", "message": {"text": "Possibly dead Python function: reader"}, "properties": {"repobilityId": "b4268f483a87ecad", "scanner": "scanner-primary", "fingerprint": "b5098b80938fa9ae", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "core/steam_fetch.py:100"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9bcf86ee743c96ce", "level": "note", "message": {"text": "Possibly dead Python function: set_platform_override"}, "properties": {"repobilityId": "0cf2e148adc272e4", "scanner": "scanner-primary", "fingerprint": "9bcf86ee743c96ce", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "core/platform/__init__.py:36"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6372cebde0220094", "level": "warning", "message": {"text": "No auth library detected"}, "properties": {"repobilityId": "a5b6035a5bbf8054", "scanner": "scanner-primary", "fingerprint": "6372cebde0220094", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["coverage", "auth"]}}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "bb442df54f9ee065", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 26}}}]}, {"ruleId": "scanner-46c644c6227e4d4a", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "123746a93d080446", "scanner": "scanner-primary", "fingerprint": "46c644c6227e4d4a", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release.yml"}, "region": {"startLine": 34}}}]}, {"ruleId": "scanner-1838a141491ce38c", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "b8fd4f5048f96576", "scanner": "scanner-primary", "fingerprint": "1838a141491ce38c", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "ba8723a1d2f90e8b", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-b3ee064becf39252", "level": "note", "message": {"text": "Legacy-named symbol `restore_backup` in ui/screens/shortcut_list_screen.py:11"}, "properties": {"repobilityId": "a0f9f6cc7a1145e7", "scanner": "scanner-primary", "fingerprint": "b3ee064becf39252", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-2a67e502c8571be8", "level": "note", "message": {"text": "Legacy-named symbol `create_backup` in core/shortcuts_io.py:61"}, "properties": {"repobilityId": "5096e82b7cd28a1f", "scanner": "scanner-primary", "fingerprint": "2a67e502c8571be8", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}]}]}