{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-2b82afb4b5013535", "name": "Possible secret in cima-admin.html", "shortDescription": {"text": "Possible secret in cima-admin.html"}, "fullDescription": {"text": "Detected pattern matching generic_api_key. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-b7cc6fc9bc7c4ea9", "name": "Insecure pattern 'document_write' in cima-admin.html:1741", "shortDescription": {"text": "Insecure pattern 'document_write' in cima-admin.html:1741"}, "fullDescription": {"text": "Found a known-risky pattern (document_write). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e35d777f49c86eef", "name": "Insecure pattern 'direct_innerhtml_assignment' in cima-admin.html:742", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in cima-admin.html:742"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bef89a1f4016ddfd", "name": "Possible secret in clargy-admin.html", "shortDescription": {"text": "Possible secret in clargy-admin.html"}, "fullDescription": {"text": "Detected pattern matching generic_api_key. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-57ecc21448627b22", "name": "Insecure pattern 'document_write' in clargy-admin.html:1749", "shortDescription": {"text": "Insecure pattern 'document_write' in clargy-admin.html:1749"}, "fullDescription": {"text": "Found a known-risky pattern (document_write). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-30fe21df3c0604fd", "name": "Insecure pattern 'direct_innerhtml_assignment' in clargy-admin.html:946", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in clargy-admin.html:946"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6b3c333b186e1a66", "name": "Insecure pattern 'local_storage_auth_token' in clargy-admin.html:820", "shortDescription": {"text": "Insecure pattern 'local_storage_auth_token' in clargy-admin.html:820"}, "fullDescription": {"text": "Found a known-risky pattern (local_storage_auth_token). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/24982"}, "properties": {"repository": "cima-creators/cleargy.dashboard", "repoUrl": "https://github.com/cima-creators/cleargy.dashboard", "branch": "main"}, "results": [{"ruleId": "scanner-2b82afb4b5013535", "level": "error", "message": {"text": "Possible secret in cima-admin.html"}, "properties": {"repobilityId": "bd85cfa4d24e57bd", "scanner": "scanner-primary", "fingerprint": "2b82afb4b5013535", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cima-admin.html"}, "region": {"startLine": 2298}}}]}, {"ruleId": "scanner-b7cc6fc9bc7c4ea9", "level": "note", "message": {"text": "Insecure pattern 'document_write' in cima-admin.html:1741"}, "properties": {"repobilityId": "6299a7e8d77f327f", "scanner": "scanner-primary", "fingerprint": "b7cc6fc9bc7c4ea9", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "document_write"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cima-admin.html"}, "region": {"startLine": 1741}}}]}, {"ruleId": "scanner-e35d777f49c86eef", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in cima-admin.html:742"}, "properties": {"repobilityId": "cbaa23826eb3e3b5", "scanner": "scanner-primary", "fingerprint": "e35d777f49c86eef", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cima-admin.html"}, "region": {"startLine": 742}}}]}, {"ruleId": "scanner-bef89a1f4016ddfd", "level": "error", "message": {"text": "Possible secret in clargy-admin.html"}, "properties": {"repobilityId": "fc54dd412c80f9c0", "scanner": "scanner-primary", "fingerprint": "bef89a1f4016ddfd", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "clargy-admin.html"}, "region": {"startLine": 1950}}}]}, {"ruleId": "scanner-57ecc21448627b22", "level": "note", "message": {"text": "Insecure pattern 'document_write' in clargy-admin.html:1749"}, "properties": {"repobilityId": "bf59373b0cbaab9e", "scanner": "scanner-primary", "fingerprint": "57ecc21448627b22", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "document_write"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "clargy-admin.html"}, "region": {"startLine": 1749}}}]}, {"ruleId": "scanner-30fe21df3c0604fd", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in clargy-admin.html:946"}, "properties": {"repobilityId": "7564264f29d8b197", "scanner": "scanner-primary", "fingerprint": "30fe21df3c0604fd", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "clargy-admin.html"}, "region": {"startLine": 946}}}]}, {"ruleId": "scanner-6b3c333b186e1a66", "level": "warning", "message": {"text": "Insecure pattern 'local_storage_auth_token' in clargy-admin.html:820"}, "properties": {"repobilityId": "e523cb39fe485361", "scanner": "scanner-primary", "fingerprint": "6b3c333b186e1a66", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "local_storage_auth_token"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "clargy-admin.html"}, "region": {"startLine": 820}}}]}]}]}