{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-12dac5af1b5474b0", "name": "Possibly dead Python function: one", "shortDescription": {"text": "Possibly dead Python function: one"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6ee0f3f2a17e8907", "name": "Possibly dead Python function: rate", "shortDescription": {"text": "Possibly dead Python function: rate"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bb4f2ea14231b6ae", "name": "Possibly dead Python function: evaluate", "shortDescription": {"text": "Possibly dead Python function: evaluate"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6b9660adfb8ca3ee", "name": "Possibly dead Python function: run_one", "shortDescription": {"text": "Possibly dead Python function: run_one"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cba722e21a82a4f4", "name": "Possibly dead Python function: make_reflective_dataset", "shortDescription": {"text": "Possibly dead Python function: make_reflective_dataset"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1e08d424b4dada71", "name": "Possibly dead Python function: evaluate", "shortDescription": {"text": "Possibly dead Python function: evaluate"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-60c0f340b9beb06e", "name": "Possibly dead Python function: run_one", "shortDescription": {"text": "Possibly dead Python function: run_one"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2a57f2b2631b1d2a", "name": "Possibly dead Python function: make_reflective_dataset", "shortDescription": {"text": "Possibly dead Python function: make_reflective_dataset"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-276d84846131aee6", "name": "Possibly dead Python function: ev_one", "shortDescription": {"text": "Possibly dead Python function: ev_one"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ce54f5e1a632d1b2", "name": "Possibly dead Python function: one", "shortDescription": {"text": "Possibly dead Python function: one"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3ffddf1620173fb6", "name": "Possibly dead Python function: declared_resources", "shortDescription": {"text": "Possibly dead Python function: declared_resources"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-51e4c870783a03af", "name": "Possibly dead Python function: declared_resources", "shortDescription": {"text": "Possibly dead Python function: declared_resources"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0d7ffa27e70fcbeb", "name": "Possibly dead Python function: declared_resources", "shortDescription": {"text": "Possibly dead Python function: declared_resources"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-58cbe2767d701d7f", "name": "Possibly dead Python function: call", "shortDescription": {"text": "Possibly dead Python function: call"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b8894dc707b2871e", "name": "Possibly dead Python function: create_sub_visualizer", "shortDescription": {"text": "Possibly dead Python function: create_sub_visualizer"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7b251ab88fc779a4", "name": "Possibly dead Python function: code_explorer_factory", "shortDescription": {"text": "Possibly dead Python function: code_explorer_factory"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ba0906850a32a374", "name": "Possibly dead Python function: investigator_factory", "shortDescription": {"text": "Possibly dead Python function: investigator_factory"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7819ab5e470092a2", "name": "Possibly dead Python function: declared_resources", "shortDescription": {"text": "Possibly dead Python function: declared_resources"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-965ece9bd1be6ed5", "name": "Possibly dead Python function: declared_resources", "shortDescription": {"text": "Possibly dead Python function: declared_resources"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6ee31f3a02bb2485", "name": "Possibly dead Python function: declared_resources", "shortDescription": {"text": "Possibly dead Python function: declared_resources"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-47636e33caef255d", "name": "Dockerfile runs as root: docker/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: docker/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cc1993b223cce259", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-aa5acaa49eb8315b", "name": "Containers defined but no K8s/orchestration manifest found", "shortDescription": {"text": "Containers defined but no K8s/orchestration manifest found"}, "fullDescription": {"text": "Repo has Dockerfiles/compose but no Kubernetes/Nomad manifests. If the target deployment is K8s, the manifests may live in a separate ops repo."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9710c8d059e53154", "name": "No frontend routes/components detected", "shortDescription": {"text": "No frontend routes/components detected"}, "fullDescription": {"text": "No React/Vue/Next routes were found. This is fine for backend-only repos."}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-9ff1117f833d7d9e", "name": "Insecure pattern 'weak_hash' in results/threeway_v4.json:1151", "shortDescription": {"text": "Insecure pattern 'weak_hash' in results/threeway_v4.json:1151"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e12469feacbc2eaf", "name": "Insecure pattern 'weak_hash' in results/threeway_v2.json:1449", "shortDescription": {"text": "Insecure pattern 'weak_hash' in results/threeway_v2.json:1449"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8707f05498d70bbe", "name": "Insecure pattern 'weak_hash' in results/threeway_v5.json:263", "shortDescription": {"text": "Insecure pattern 'weak_hash' in results/threeway_v5.json:263"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e63153a50b0e8d35", "name": "Insecure pattern 'weak_hash' in results/threeway_v3.json:1372", "shortDescription": {"text": "Insecure pattern 'weak_hash' in results/threeway_v3.json:1372"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-41d57d23c1e04a71", "name": "Insecure pattern 'weak_hash' in results/threeway_v6.json:287", "shortDescription": {"text": "Insecure pattern 'weak_hash' in results/threeway_v6.json:287"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ba167372908666be", "name": "Insecure pattern 'weak_hash' in results/threeway_v7.json:443", "shortDescription": {"text": "Insecure pattern 'weak_hash' in results/threeway_v7.json:443"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5348b9e396af3b07", "name": "Insecure pattern 'weak_hash' in results/frozen_pick/shard_2.json:15", "shortDescription": {"text": "Insecure pattern 'weak_hash' in results/frozen_pick/shard_2.json:15"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e2d2c5caacf8d22b", "name": "Insecure pattern 'weak_hash' in results/traces_v4/wildfly__wildfly-core__6304__orch.json:88", "shortDescription": {"text": "Insecure pattern 'weak_hash' in results/traces_v4/wildfly__wildfly-core__6304__orch.json:88"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-49dfadf8f2ae7cb0", "name": "Insecure pattern 'weak_hash' in results/traces_v4/apache__pulsar__25868__orch.json:88", "shortDescription": {"text": "Insecure pattern 'weak_hash' in results/traces_v4/apache__pulsar__25868__orch.json:88"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0945a74293c259b6", "name": "Insecure pattern 'weak_hash' in results/claude_judge/verdict5_25868.json:19", "shortDescription": {"text": "Insecure pattern 'weak_hash' in results/claude_judge/verdict5_25868.json:19"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-04630838bbe958fb", "name": "Insecure pattern 'weak_hash' in results/claude_judge/cand6_25868.json:3", "shortDescription": {"text": "Insecure pattern 'weak_hash' in results/claude_judge/cand6_25868.json:3"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6d27dd8646c5a430", "name": "Insecure pattern 'weak_hash' in results/claude_judge/cand_25868.json:3", "shortDescription": {"text": "Insecure pattern 'weak_hash' in results/claude_judge/cand_25868.json:3"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ed776b2039dd1b77", "name": "Insecure pattern 'weak_hash' in results/claude_judge/verdict7_25868.json:13", "shortDescription": {"text": "Insecure pattern 'weak_hash' in results/claude_judge/verdict7_25868.json:13"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9ff7783187baa087", "name": "Insecure pattern 'weak_hash' in results/claude_judge/verdict6_25868.json:7", "shortDescription": {"text": "Insecure pattern 'weak_hash' in results/claude_judge/verdict6_25868.json:7"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0d3d52e26ac29d24", "name": "Insecure pattern 'weak_hash' in results/claude_judge/cand7_25868.json:3", "shortDescription": {"text": "Insecure pattern 'weak_hash' in results/claude_judge/cand7_25868.json:3"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ffa5713e7e588289", "name": "Insecure pattern 'weak_hash' in results/claude_judge/cand5_25868.json:3", "shortDescription": {"text": "Insecure pattern 'weak_hash' in results/claude_judge/cand5_25868.json:3"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-044ccf776fbe19b3", "name": "Insecure pattern 'weak_hash' in results/claude_judge/verdict_25868.json:4", "shortDescription": {"text": "Insecure pattern 'weak_hash' in results/claude_judge/verdict_25868.json:4"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0ee3c233df734b99", "name": "Insecure pattern 'weak_hash' in results/claude_judge/task_25868.json:5", "shortDescription": {"text": "Insecure pattern 'weak_hash' in results/claude_judge/task_25868.json:5"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e9321659e10e9c8d", "name": "Insecure pattern 'weak_hash' in results/claude_judge/task5_801.json:5", "shortDescription": {"text": "Insecure pattern 'weak_hash' in results/claude_judge/task5_801.json:5"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e1d77a3b16312dcf", "name": "Insecure pattern 'exec_used' in results/claude_judge/task5_883.json:5", "shortDescription": {"text": "Insecure pattern 'exec_used' in results/claude_judge/task5_883.json:5"}, "fullDescription": {"text": "Found a known-risky pattern (exec_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-27505f9e9c751c9e", "name": "Insecure pattern 'weak_hash' in results/claude_judge/task5_25868.json:5", "shortDescription": {"text": "Insecure pattern 'weak_hash' in results/claude_judge/task5_25868.json:5"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-64471e0a475c2fd7", "name": "Insecure pattern 'weak_hash' in results/_archive/traces_v8_elite.partial_20260613_full/hibernate__hibernate-orm__11844__", "shortDescription": {"text": "Insecure pattern 'weak_hash' in results/_archive/traces_v8_elite.partial_20260613_full/hibernate__hibernate-orm__11844__orch.json:88"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c0ca4a38dfbd0966", "name": "Insecure pattern 'weak_hash' in results/_archive/traces_v8_elite.partial_20260613_full/hibernate__hibernate-orm__11945__", "shortDescription": {"text": "Insecure pattern 'weak_hash' in results/_archive/traces_v8_elite.partial_20260613_full/hibernate__hibernate-orm__11945__orch.json:88"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-081b5103b69ce50b", "name": "Insecure pattern 'weak_hash' in results/traces_v8_elite/hibernate__hibernate-orm__11991__orch.json:88", "shortDescription": {"text": "Insecure pattern 'weak_hash' in results/traces_v8_elite/hibernate__hibernate-orm__11991__orch.json:88"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-dea4a2de3eee9d1d", "name": "Insecure pattern 'weak_hash' in results/traces_v8_elite/hibernate__hibernate-orm__11885__orch.json:88", "shortDescription": {"text": "Insecure pattern 'weak_hash' in results/traces_v8_elite/hibernate__hibernate-orm__11885__orch.json:88"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2218b2fb78bbe2da", "name": "Insecure pattern 'exec_used' in results/traces_v8_elite/apache__accumulo-fluo__1018__orch.json:88", "shortDescription": {"text": "Insecure pattern 'exec_used' in results/traces_v8_elite/apache__accumulo-fluo__1018__orch.json:88"}, "fullDescription": {"text": "Found a known-risky pattern (exec_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ad8c13cc7244bbb0", "name": "Insecure pattern 'weak_hash' in results/traces_v8_elite/hibernate__hibernate-orm__11844__orch.json:88", "shortDescription": {"text": "Insecure pattern 'weak_hash' in results/traces_v8_elite/hibernate__hibernate-orm__11844__orch.json:88"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3bafba3fde415335", "name": "Insecure pattern 'weak_hash' in results/traces_v8_elite/hibernate__hibernate-orm__11945__orch.json:88", "shortDescription": {"text": "Insecure pattern 'weak_hash' in results/traces_v8_elite/hibernate__hibernate-orm__11945__orch.json:88"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-915e331ce8f9006c", "name": "Insecure pattern 'weak_hash' in results/traces_v8_elite/apache__pulsar__23785__orch.json:88", "shortDescription": {"text": "Insecure pattern 'weak_hash' in results/traces_v8_elite/apache__pulsar__23785__orch.json:88"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4b9747627f706967", "name": "Insecure pattern 'weak_hash' in results/traces_v8_elite/apache__pulsar__25915__orch.json:88", "shortDescription": {"text": "Insecure pattern 'weak_hash' in results/traces_v8_elite/apache__pulsar__25915__orch.json:88"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-29eb800584fb8f9c", "name": "Insecure pattern 'weak_hash' in results/traces_v5/wildfly__wildfly-core__6304__orch.json:88", "shortDescription": {"text": "Insecure pattern 'weak_hash' in results/traces_v5/wildfly__wildfly-core__6304__orch.json:88"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fe8398a4b55c4bc5", "name": "Insecure pattern 'weak_hash' in results/traces_v5/apache__pulsar__25868__orch.json:88", "shortDescription": {"text": "Insecure pattern 'weak_hash' in results/traces_v5/apache__pulsar__25868__orch.json:88"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-22ebf14c156af11b", "name": "Insecure pattern 'weak_hash' in results/traces_v5/SaptarshiSarkar12__Drifty__801__orch.json:88", "shortDescription": {"text": "Insecure pattern 'weak_hash' in results/traces_v5/SaptarshiSarkar12__Drifty__801__orch.json:88"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cebe0f525be7bb92", "name": "Insecure pattern 'weak_hash' in results/traces_v9_smoke/hibernate__hibernate-orm__11844__orch.json:88", "shortDescription": {"text": "Insecure pattern 'weak_hash' in results/traces_v9_smoke/hibernate__hibernate-orm__11844__orch.json:88"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6e3e83259e30a2e2", "name": "Insecure pattern 'weak_hash' in results/traces_v7/wildfly__wildfly-core__6304__orch.json:88", "shortDescription": {"text": "Insecure pattern 'weak_hash' in results/traces_v7/wildfly__wildfly-core__6304__orch.json:88"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-54dbf1c9889c0d30", "name": "Insecure pattern 'weak_hash' in results/traces_v7/apache__pulsar__25868__orch.json:88", "shortDescription": {"text": "Insecure pattern 'weak_hash' in results/traces_v7/apache__pulsar__25868__orch.json:88"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-494e7c795646b615", "name": "Insecure pattern 'weak_hash' in results/traces_v7/SaptarshiSarkar12__Drifty__801__orch.json:88", "shortDescription": {"text": "Insecure pattern 'weak_hash' in results/traces_v7/SaptarshiSarkar12__Drifty__801__orch.json:88"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-05aa46dff3023e41", "name": "Insecure pattern 'weak_hash' in results/traces_v9_elite/hibernate__hibernate-orm__11945__orch.json:88", "shortDescription": {"text": "Insecure pattern 'weak_hash' in results/traces_v9_elite/hibernate__hibernate-orm__11945__orch.json:88"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d6e1017310bd636e", "name": "Insecure pattern 'weak_hash' in results/gold_pick/shard_3.json:23", "shortDescription": {"text": "Insecure pattern 'weak_hash' in results/gold_pick/shard_3.json:23"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d988a6d620b087a4", "name": "Insecure pattern 'weak_hash' in results/traces_v8/SaptarshiSarkar12__Drifty__801__orch.json:88", "shortDescription": {"text": "Insecure pattern 'weak_hash' in results/traces_v8/SaptarshiSarkar12__Drifty__801__orch.json:88"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-196c612b24d0d72d", "name": "Insecure pattern 'weak_hash' in results/traces_v6/wildfly__wildfly-core__6304__orch.json:88", "shortDescription": {"text": "Insecure pattern 'weak_hash' in results/traces_v6/wildfly__wildfly-core__6304__orch.json:88"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ed69425c4a84c3d8", "name": "Insecure pattern 'weak_hash' in results/traces_v6/apache__pulsar__25868__orch.json:88", "shortDescription": {"text": "Insecure pattern 'weak_hash' in results/traces_v6/apache__pulsar__25868__orch.json:88"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f3113057214a0eb3", "name": "Insecure pattern 'weak_hash' in results/traces_v6/SaptarshiSarkar12__Drifty__801__orch.json:88", "shortDescription": {"text": "Insecure pattern 'weak_hash' in results/traces_v6/SaptarshiSarkar12__Drifty__801__orch.json:88"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4601e3ad3bb28677", "name": "No CI/CD pipelines detected", "shortDescription": {"text": "No CI/CD pipelines detected"}, "fullDescription": {"text": "No GitHub Actions, GitLab CI, or CircleCI configs found. Without CI you can't gate deploys on tests/lints."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6893a6c8b0861585", "name": "Very low test-to-source ratio", "shortDescription": {"text": "Very low test-to-source ratio"}, "fullDescription": {"text": "1 test file(s) for 56 source file(s) (ratio 0.02). Consider adding integration or unit tests for critical paths."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-141b30a41e03817b", "name": "No license file detected", "shortDescription": {"text": "No license file detected"}, "fullDescription": {"text": "No LICENSE/COPYING/NOTICE file was found. Generated repositories often omit licensing, which blocks reuse and automated intake."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3ab5d313dda8e5f9", "name": "Debug logging residue appears in source files", "shortDescription": {"text": "Debug logging residue appears in source files"}, "fullDescription": {"text": "Found 167 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b9088664ace7f748", "name": "Composite production-readiness gap", "shortDescription": {"text": "Composite production-readiness gap"}, "fullDescription": {"text": "Multiple low-cost hardening controls are missing together: license, ci, tests. Opus verification showed these co-occurring gaps are a better readiness signal than reading each flag in isolation."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-749d4bc1bd66df5f", "name": "Agent instructions exist but release-hardening basics are missing", "shortDescription": {"text": "Agent instructions exist but release-hardening basics are missing"}, "fullDescription": {"text": "AI-coder instruction files were found, but the repo is missing license, ci, tests. Treat this as a contract gap: the agent is guided, but the generated output is not yet guarded by the controls that make it repeatable."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ea8f3013f588db25", "name": "Shallow git history limits provenance confidence", "shortDescription": {"text": "Shallow git history limits provenance confidence"}, "fullDescription": {"text": "The repository is a shallow clone. Origin/evolution analysis cannot distinguish fresh generation, imported legacy code, or long-lived human code with high confidence."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8424db9c75e04ba4", "name": "Very short observed git history", "shortDescription": {"text": "Very short observed git history"}, "fullDescription": {"text": "The repo has multiple source files but two or fewer visible commits. This is not a failure by itself, but it lowers confidence in evolution-based diagnosis."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-0b9d83ee836374c8", "name": "Network/subprocess call without timeout or try/except \u2014 src/gh_client.py:26", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 src/gh_client.py:26"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e928c20d4063fd5a", "name": "Network/subprocess call without timeout or try/except \u2014 src/enrich_bundles_fulldiff.py:33", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 src/enrich_bundles_fulldiff.py:33"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0b3a72e83258481c", "name": "Network/subprocess call without timeout or try/except \u2014 src/current_version/suspicion_group.py:41", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 src/current_version/suspicion_group.py:41"}, "fullDescription": {"text": "`subprocess.Popen(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3615cc49daf34a8f", "name": "Legacy-named symbol `model_copy` in src/current_version/suspicion.py:308", "shortDescription": {"text": "Legacy-named symbol `model_copy` in src/current_version/suspicion.py:308"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-dc4a1029c2aa5fe8", "name": "Commented-code block (6 lines) in src/current_version/llm.py:179", "shortDescription": {"text": "Commented-code block (6 lines) in src/current_version/llm.py:179"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d0b92fe25691dff4", "name": "Legacy-named symbol `model_copy` in src/current_version/path_norm.py:47", "shortDescription": {"text": "Legacy-named symbol `model_copy` in src/current_version/path_norm.py:47"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7da278105e462642", "name": "Legacy-named symbol `model_copy` in src/current_version/harness.py:195", "shortDescription": {"text": "Legacy-named symbol `model_copy` in src/current_version/harness.py:195"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-de8205d2deb2319b", "name": "Stub function `on_event` (body is just `pass`/`return`) \u2014 src/current_version/harness.py:143", "shortDescription": {"text": "Stub function `on_event` (body is just `pass`/`return`) \u2014 src/current_version/harness.py:143"}, "fullDescription": {"text": "Likely an AI scaffold that was never filled in. Remove or implement."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4663311c64e22801", "name": "Network/subprocess call without timeout or try/except \u2014 src/current_version/repo.py:35", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 src/current_version/repo.py:35"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-42db6827dad5f62f", "name": "Network/subprocess call without timeout or try/except \u2014 src/version_1/suspicion_group.py:41", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 src/version_1/suspicion_group.py:41"}, "fullDescription": {"text": "`subprocess.Popen(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f7b9aea9a8b62ffb", "name": "Legacy-named symbol `model_copy` in src/version_1/suspicion.py:281", "shortDescription": {"text": "Legacy-named symbol `model_copy` in src/version_1/suspicion.py:281"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-65fa553df18b6ef1", "name": "Legacy-named symbol `model_copy` in src/version_1/path_norm.py:47", "shortDescription": {"text": "Legacy-named symbol `model_copy` in src/version_1/path_norm.py:47"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a687307ee5692497", "name": "Legacy-named symbol `model_copy` in src/version_1/harness.py:195", "shortDescription": {"text": "Legacy-named symbol `model_copy` in src/version_1/harness.py:195"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-da8389ee7b03a4d0", "name": "Stub function `on_event` (body is just `pass`/`return`) \u2014 src/version_1/harness.py:143", "shortDescription": {"text": "Stub function `on_event` (body is just `pass`/`return`) \u2014 src/version_1/harness.py:143"}, "fullDescription": {"text": "Likely an AI scaffold that was never filled in. Remove or implement."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c27e05fb454e577c", "name": "Network/subprocess call without timeout or try/except \u2014 src/version_1/repo.py:35", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 src/version_1/repo.py:35"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-030da566069872e9", "name": "15 env vars used in code but missing from .env.example", "shortDescription": {"text": "15 env vars used in code but missing from .env.example"}, "fullDescription": {"text": "Drift between code and config docs. The first few: `GH_BIN`, `HOST_WORKDIR`, `OH_DEBUG`, `OH_PERSIST`, `OH_STREAM`, `PROFILE_LOG`, `REASONING_LOG`, `SANDBOX_NETWORK` + 7 more. Add them (with a placeholder/comment) to .env.example so onboarding doesn't break."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2c04133e54348533", "name": "Near-duplicate function bodies in 2 places", "shortDescription": {"text": "Near-duplicate function bodies in 2 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nsrc/crawl.py:is_substantive_unit, src/crawl.py:is_substantive\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-49c98f7cedd9c977", "name": "Near-duplicate function bodies in 4 places", "shortDescription": {"text": "Near-duplicate function bodies in 4 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nsrc/current_version/suspicion.py:declared_resources, src/current_version/suspicion.py:declared_resources, src/version_1/suspicion.py:declared_resources, src/version_1/suspicion.py:declared_resources\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/22095"}, "properties": {"repository": "vasiliy-mikhailov/great-java-review", "repoUrl": "https://github.com/vasiliy-mikhailov/great-java-review", "branch": "main"}, "results": [{"ruleId": "scanner-12dac5af1b5474b0", "level": "note", "message": {"text": "Possibly dead Python function: one"}, "properties": {"repobilityId": "692200a7e4dd59b4", "scanner": "scanner-primary", "fingerprint": "12dac5af1b5474b0", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/compare.py:35"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6ee0f3f2a17e8907", "level": "note", "message": {"text": "Possibly dead Python function: rate"}, "properties": {"repobilityId": "22f26a42f24f8955", "scanner": "scanner-primary", "fingerprint": "6ee0f3f2a17e8907", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/gh_client.py:151"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bb4f2ea14231b6ae", "level": "note", "message": {"text": "Possibly dead Python function: evaluate"}, "properties": {"repobilityId": "5b46064c9efd29c3", "scanner": "scanner-primary", "fingerprint": "bb4f2ea14231b6ae", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/gepa_run.py:110"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6b9660adfb8ca3ee", "level": "note", "message": {"text": "Possibly dead Python function: run_one"}, "properties": {"repobilityId": "527a5104cdfde36f", "scanner": "scanner-primary", "fingerprint": "6b9660adfb8ca3ee", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/gepa_run.py:114"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cba722e21a82a4f4", "level": "note", "message": {"text": "Possibly dead Python function: make_reflective_dataset"}, "properties": {"repobilityId": "d49eaad282b51b5b", "scanner": "scanner-primary", "fingerprint": "cba722e21a82a4f4", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/gepa_run.py:144"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1e08d424b4dada71", "level": "note", "message": {"text": "Possibly dead Python function: evaluate"}, "properties": {"repobilityId": "5b46064c9efd29c3", "scanner": "scanner-primary", "fingerprint": "1e08d424b4dada71", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/autoresearch.py:140"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-60c0f340b9beb06e", "level": "note", "message": {"text": "Possibly dead Python function: run_one"}, "properties": {"repobilityId": "527a5104cdfde36f", "scanner": "scanner-primary", "fingerprint": "60c0f340b9beb06e", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/autoresearch.py:144"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2a57f2b2631b1d2a", "level": "note", "message": {"text": "Possibly dead Python function: make_reflective_dataset"}, "properties": {"repobilityId": "d49eaad282b51b5b", "scanner": "scanner-primary", "fingerprint": "2a57f2b2631b1d2a", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/autoresearch.py:168"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-276d84846131aee6", "level": "note", "message": {"text": "Possibly dead Python function: ev_one"}, "properties": {"repobilityId": "36fc06a32801460a", "scanner": "scanner-primary", "fingerprint": "276d84846131aee6", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/autoresearch.py:242"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ce54f5e1a632d1b2", "level": "note", "message": {"text": "Possibly dead Python function: one"}, "properties": {"repobilityId": "692200a7e4dd59b4", "scanner": "scanner-primary", "fingerprint": "ce54f5e1a632d1b2", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/compare_hc.py:61"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3ffddf1620173fb6", "level": "note", "message": {"text": "Possibly dead Python function: declared_resources"}, "properties": {"repobilityId": "9c322c5adc41ea48", "scanner": "scanner-primary", "fingerprint": "3ffddf1620173fb6", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/current_version/suspicion.py:130"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-51e4c870783a03af", "level": "note", "message": {"text": "Possibly dead Python function: declared_resources"}, "properties": {"repobilityId": "9c322c5adc41ea48", "scanner": "scanner-primary", "fingerprint": "51e4c870783a03af", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/current_version/pr_diff_tool.py:186"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0d7ffa27e70fcbeb", "level": "note", "message": {"text": "Possibly dead Python function: declared_resources"}, "properties": {"repobilityId": "9c322c5adc41ea48", "scanner": "scanner-primary", "fingerprint": "0d7ffa27e70fcbeb", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/current_version/search_tool.py:125"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-58cbe2767d701d7f", "level": "note", "message": {"text": "Possibly dead Python function: call"}, "properties": {"repobilityId": "cf6e1a33b1245f9d", "scanner": "scanner-primary", "fingerprint": "58cbe2767d701d7f", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/current_version/path_norm.py:41"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b8894dc707b2871e", "level": "note", "message": {"text": "Possibly dead Python function: create_sub_visualizer"}, "properties": {"repobilityId": "653b12bd23012733", "scanner": "scanner-primary", "fingerprint": "b8894dc707b2871e", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/current_version/harness.py:146"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7b251ab88fc779a4", "level": "note", "message": {"text": "Possibly dead Python function: code_explorer_factory"}, "properties": {"repobilityId": "e2254fdd9f186a4f", "scanner": "scanner-primary", "fingerprint": "7b251ab88fc779a4", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/current_version/harness.py:242"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ba0906850a32a374", "level": "note", "message": {"text": "Possibly dead Python function: investigator_factory"}, "properties": {"repobilityId": "809782b88ffa1d88", "scanner": "scanner-primary", "fingerprint": "ba0906850a32a374", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/current_version/harness.py:247"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7819ab5e470092a2", "level": "note", "message": {"text": "Possibly dead Python function: declared_resources"}, "properties": {"repobilityId": "9c322c5adc41ea48", "scanner": "scanner-primary", "fingerprint": "7819ab5e470092a2", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/version_1/suspicion.py:123"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-965ece9bd1be6ed5", "level": "note", "message": {"text": "Possibly dead Python function: declared_resources"}, "properties": {"repobilityId": "9c322c5adc41ea48", "scanner": "scanner-primary", "fingerprint": "965ece9bd1be6ed5", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/version_1/pr_diff_tool.py:186"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6ee31f3a02bb2485", "level": "note", "message": {"text": "Possibly dead Python function: declared_resources"}, "properties": {"repobilityId": "9c322c5adc41ea48", "scanner": "scanner-primary", "fingerprint": "6ee31f3a02bb2485", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/version_1/search_tool.py:125"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-47636e33caef255d", "level": "warning", "message": {"text": "Dockerfile runs as root: docker/Dockerfile"}, "properties": {"repobilityId": "8a345ba4198453bd", "scanner": "scanner-primary", "fingerprint": "47636e33caef255d", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-cc1993b223cce259", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "properties": {"repobilityId": "804ffeecaa7fb62d", "scanner": "scanner-primary", "fingerprint": "cc1993b223cce259", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docker/Dockerfile"}, "region": {"startLine": 4}}}]}, {"ruleId": "scanner-aa5acaa49eb8315b", "level": "note", "message": {"text": "Containers defined but no K8s/orchestration manifest found"}, "properties": {"repobilityId": "b230ea9b68736081", "scanner": "scanner-primary", "fingerprint": "aa5acaa49eb8315b", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["coverage", "deployment"]}}, {"ruleId": "scanner-9710c8d059e53154", "level": "none", "message": {"text": "No frontend routes/components detected"}, "properties": {"repobilityId": "44ca61485762e494", "scanner": "scanner-primary", "fingerprint": "9710c8d059e53154", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["coverage"]}}, {"ruleId": "scanner-9ff1117f833d7d9e", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in results/threeway_v4.json:1151"}, "properties": {"repobilityId": "28e8372a867d4aab", "scanner": "scanner-primary", "fingerprint": "9ff1117f833d7d9e", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "results/threeway_v4.json"}, "region": {"startLine": 1151}}}]}, {"ruleId": "scanner-e12469feacbc2eaf", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in results/threeway_v2.json:1449"}, "properties": {"repobilityId": "fd3a997039ed4818", "scanner": "scanner-primary", "fingerprint": "e12469feacbc2eaf", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "results/threeway_v2.json"}, "region": {"startLine": 1449}}}]}, {"ruleId": "scanner-8707f05498d70bbe", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in results/threeway_v5.json:263"}, "properties": {"repobilityId": "16bc96e936d0c3e4", "scanner": "scanner-primary", "fingerprint": "8707f05498d70bbe", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "results/threeway_v5.json"}, "region": {"startLine": 263}}}]}, {"ruleId": "scanner-e63153a50b0e8d35", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in results/threeway_v3.json:1372"}, "properties": {"repobilityId": "8b08c8250f6173df", "scanner": "scanner-primary", "fingerprint": "e63153a50b0e8d35", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "results/threeway_v3.json"}, "region": {"startLine": 1372}}}]}, {"ruleId": "scanner-41d57d23c1e04a71", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in results/threeway_v6.json:287"}, "properties": {"repobilityId": "4f4343ad9b6b8eb4", "scanner": "scanner-primary", "fingerprint": "41d57d23c1e04a71", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "results/threeway_v6.json"}, "region": {"startLine": 287}}}]}, {"ruleId": "scanner-ba167372908666be", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in results/threeway_v7.json:443"}, "properties": {"repobilityId": "edf740dc8191547d", "scanner": "scanner-primary", "fingerprint": "ba167372908666be", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "results/threeway_v7.json"}, "region": {"startLine": 443}}}]}, {"ruleId": "scanner-5348b9e396af3b07", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in results/frozen_pick/shard_2.json:15"}, "properties": {"repobilityId": "a4d78ddb36aa1466", "scanner": "scanner-primary", "fingerprint": "5348b9e396af3b07", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "results/frozen_pick/shard_2.json"}, "region": {"startLine": 15}}}]}, {"ruleId": "scanner-e2d2c5caacf8d22b", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in results/traces_v4/wildfly__wildfly-core__6304__orch.json:88"}, "properties": {"repobilityId": "79803bc061962083", "scanner": "scanner-primary", "fingerprint": "e2d2c5caacf8d22b", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "results/traces_v4/wildfly__wildfly-core__6304__orch.json"}, "region": {"startLine": 88}}}]}, {"ruleId": "scanner-49dfadf8f2ae7cb0", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in results/traces_v4/apache__pulsar__25868__orch.json:88"}, "properties": {"repobilityId": "d2714cf302a2f207", "scanner": "scanner-primary", "fingerprint": "49dfadf8f2ae7cb0", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "results/traces_v4/apache__pulsar__25868__orch.json"}, "region": {"startLine": 88}}}]}, {"ruleId": "scanner-0945a74293c259b6", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in results/claude_judge/verdict5_25868.json:19"}, "properties": {"repobilityId": "6d065bb83d288efa", "scanner": "scanner-primary", "fingerprint": "0945a74293c259b6", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "results/claude_judge/verdict5_25868.json"}, "region": {"startLine": 19}}}]}, {"ruleId": "scanner-04630838bbe958fb", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in results/claude_judge/cand6_25868.json:3"}, "properties": {"repobilityId": "54a89293946f6616", "scanner": "scanner-primary", "fingerprint": "04630838bbe958fb", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "results/claude_judge/cand6_25868.json"}, "region": {"startLine": 3}}}]}, {"ruleId": "scanner-6d27dd8646c5a430", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in results/claude_judge/cand_25868.json:3"}, "properties": {"repobilityId": "de55ec4b526c8551", "scanner": "scanner-primary", "fingerprint": "6d27dd8646c5a430", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "results/claude_judge/cand_25868.json"}, "region": {"startLine": 3}}}]}, {"ruleId": "scanner-ed776b2039dd1b77", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in results/claude_judge/verdict7_25868.json:13"}, "properties": {"repobilityId": "4b900adaec1739f4", "scanner": "scanner-primary", "fingerprint": "ed776b2039dd1b77", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "results/claude_judge/verdict7_25868.json"}, "region": {"startLine": 13}}}]}, {"ruleId": "scanner-9ff7783187baa087", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in results/claude_judge/verdict6_25868.json:7"}, "properties": {"repobilityId": "758d48a784479d50", "scanner": "scanner-primary", "fingerprint": "9ff7783187baa087", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "results/claude_judge/verdict6_25868.json"}, "region": {"startLine": 7}}}]}, {"ruleId": "scanner-0d3d52e26ac29d24", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in results/claude_judge/cand7_25868.json:3"}, "properties": {"repobilityId": "1359ec3390dba1e4", "scanner": "scanner-primary", "fingerprint": "0d3d52e26ac29d24", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "results/claude_judge/cand7_25868.json"}, "region": {"startLine": 3}}}]}, {"ruleId": "scanner-ffa5713e7e588289", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in results/claude_judge/cand5_25868.json:3"}, "properties": {"repobilityId": "3646becbf99f4847", "scanner": "scanner-primary", "fingerprint": "ffa5713e7e588289", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "results/claude_judge/cand5_25868.json"}, "region": {"startLine": 3}}}]}, {"ruleId": "scanner-044ccf776fbe19b3", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in results/claude_judge/verdict_25868.json:4"}, "properties": {"repobilityId": "540c100924f5647d", "scanner": "scanner-primary", "fingerprint": "044ccf776fbe19b3", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "results/claude_judge/verdict_25868.json"}, "region": {"startLine": 4}}}]}, {"ruleId": "scanner-0ee3c233df734b99", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in results/claude_judge/task_25868.json:5"}, "properties": {"repobilityId": "82524099e8741785", "scanner": "scanner-primary", "fingerprint": "0ee3c233df734b99", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "results/claude_judge/task_25868.json"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-e9321659e10e9c8d", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in results/claude_judge/task5_801.json:5"}, "properties": {"repobilityId": "1a522ee3672ad841", "scanner": "scanner-primary", "fingerprint": "e9321659e10e9c8d", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "results/claude_judge/task5_801.json"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-e1d77a3b16312dcf", "level": "error", "message": {"text": "Insecure pattern 'exec_used' in results/claude_judge/task5_883.json:5"}, "properties": {"repobilityId": "a609b5d842b5eb63", "scanner": "scanner-primary", "fingerprint": "e1d77a3b16312dcf", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "exec_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "results/claude_judge/task5_883.json"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-27505f9e9c751c9e", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in results/claude_judge/task5_25868.json:5"}, "properties": {"repobilityId": "6a78b78fa99cb6e7", "scanner": "scanner-primary", "fingerprint": "27505f9e9c751c9e", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "results/claude_judge/task5_25868.json"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-64471e0a475c2fd7", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in results/_archive/traces_v8_elite.partial_20260613_full/hibernate__hibernate-orm__11844__orch.json:88"}, "properties": {"repobilityId": "531a493a03fd22b7", "scanner": "scanner-primary", "fingerprint": "64471e0a475c2fd7", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "results/_archive/traces_v8_elite.partial_20260613_full/hibernate__hibernate-orm__11844__orch.json"}, "region": {"startLine": 88}}}]}, {"ruleId": "scanner-c0ca4a38dfbd0966", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in results/_archive/traces_v8_elite.partial_20260613_full/hibernate__hibernate-orm__11945__orch.json:88"}, "properties": {"repobilityId": "ac79f204035f0982", "scanner": "scanner-primary", "fingerprint": "c0ca4a38dfbd0966", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "results/_archive/traces_v8_elite.partial_20260613_full/hibernate__hibernate-orm__11945__orch.json"}, "region": {"startLine": 88}}}]}, {"ruleId": "scanner-081b5103b69ce50b", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in results/traces_v8_elite/hibernate__hibernate-orm__11991__orch.json:88"}, "properties": {"repobilityId": "7de7e45044e98649", "scanner": "scanner-primary", "fingerprint": "081b5103b69ce50b", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "results/traces_v8_elite/hibernate__hibernate-orm__11991__orch.json"}, "region": {"startLine": 88}}}]}, {"ruleId": "scanner-dea4a2de3eee9d1d", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in results/traces_v8_elite/hibernate__hibernate-orm__11885__orch.json:88"}, "properties": {"repobilityId": "878ff86d0d0e81b8", "scanner": "scanner-primary", "fingerprint": "dea4a2de3eee9d1d", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "results/traces_v8_elite/hibernate__hibernate-orm__11885__orch.json"}, "region": {"startLine": 88}}}]}, {"ruleId": "scanner-2218b2fb78bbe2da", "level": "error", "message": {"text": "Insecure pattern 'exec_used' in results/traces_v8_elite/apache__accumulo-fluo__1018__orch.json:88"}, "properties": {"repobilityId": "afdd5fa524bc4ecf", "scanner": "scanner-primary", "fingerprint": "2218b2fb78bbe2da", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "exec_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "results/traces_v8_elite/apache__accumulo-fluo__1018__orch.json"}, "region": {"startLine": 88}}}]}, {"ruleId": "scanner-ad8c13cc7244bbb0", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in results/traces_v8_elite/hibernate__hibernate-orm__11844__orch.json:88"}, "properties": {"repobilityId": "4c43e78f550e2c36", "scanner": "scanner-primary", "fingerprint": "ad8c13cc7244bbb0", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "results/traces_v8_elite/hibernate__hibernate-orm__11844__orch.json"}, "region": {"startLine": 88}}}]}, {"ruleId": "scanner-3bafba3fde415335", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in results/traces_v8_elite/hibernate__hibernate-orm__11945__orch.json:88"}, "properties": {"repobilityId": "8e48f74ded18ceb0", "scanner": "scanner-primary", "fingerprint": "3bafba3fde415335", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "results/traces_v8_elite/hibernate__hibernate-orm__11945__orch.json"}, "region": {"startLine": 88}}}]}, {"ruleId": "scanner-915e331ce8f9006c", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in results/traces_v8_elite/apache__pulsar__23785__orch.json:88"}, "properties": {"repobilityId": "b329c1b5213ec16b", "scanner": "scanner-primary", "fingerprint": "915e331ce8f9006c", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "results/traces_v8_elite/apache__pulsar__23785__orch.json"}, "region": {"startLine": 88}}}]}, {"ruleId": "scanner-4b9747627f706967", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in results/traces_v8_elite/apache__pulsar__25915__orch.json:88"}, "properties": {"repobilityId": "aea6991709f238a3", "scanner": "scanner-primary", "fingerprint": "4b9747627f706967", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "results/traces_v8_elite/apache__pulsar__25915__orch.json"}, "region": {"startLine": 88}}}]}, {"ruleId": "scanner-29eb800584fb8f9c", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in results/traces_v5/wildfly__wildfly-core__6304__orch.json:88"}, "properties": {"repobilityId": "ca1e7143910c57b0", "scanner": "scanner-primary", "fingerprint": "29eb800584fb8f9c", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "results/traces_v5/wildfly__wildfly-core__6304__orch.json"}, "region": {"startLine": 88}}}]}, {"ruleId": "scanner-fe8398a4b55c4bc5", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in results/traces_v5/apache__pulsar__25868__orch.json:88"}, "properties": {"repobilityId": "228e209ebe9b196e", "scanner": "scanner-primary", "fingerprint": "fe8398a4b55c4bc5", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "results/traces_v5/apache__pulsar__25868__orch.json"}, "region": {"startLine": 88}}}]}, {"ruleId": "scanner-22ebf14c156af11b", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in results/traces_v5/SaptarshiSarkar12__Drifty__801__orch.json:88"}, "properties": {"repobilityId": "78611f7b137f8b24", "scanner": "scanner-primary", "fingerprint": "22ebf14c156af11b", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "results/traces_v5/SaptarshiSarkar12__Drifty__801__orch.json"}, "region": {"startLine": 88}}}]}, {"ruleId": "scanner-cebe0f525be7bb92", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in results/traces_v9_smoke/hibernate__hibernate-orm__11844__orch.json:88"}, "properties": {"repobilityId": "64a1b3b92ef5d702", "scanner": "scanner-primary", "fingerprint": "cebe0f525be7bb92", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "results/traces_v9_smoke/hibernate__hibernate-orm__11844__orch.json"}, "region": {"startLine": 88}}}]}, {"ruleId": "scanner-6e3e83259e30a2e2", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in results/traces_v7/wildfly__wildfly-core__6304__orch.json:88"}, "properties": {"repobilityId": "88ff37084bf45bae", "scanner": "scanner-primary", "fingerprint": "6e3e83259e30a2e2", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "results/traces_v7/wildfly__wildfly-core__6304__orch.json"}, "region": {"startLine": 88}}}]}, {"ruleId": "scanner-54dbf1c9889c0d30", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in results/traces_v7/apache__pulsar__25868__orch.json:88"}, "properties": {"repobilityId": "93d0692aedd18d07", "scanner": "scanner-primary", "fingerprint": "54dbf1c9889c0d30", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "results/traces_v7/apache__pulsar__25868__orch.json"}, "region": {"startLine": 88}}}]}, {"ruleId": "scanner-494e7c795646b615", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in results/traces_v7/SaptarshiSarkar12__Drifty__801__orch.json:88"}, "properties": {"repobilityId": "80820f24681a4c5e", "scanner": "scanner-primary", "fingerprint": "494e7c795646b615", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "results/traces_v7/SaptarshiSarkar12__Drifty__801__orch.json"}, "region": {"startLine": 88}}}]}, {"ruleId": "scanner-05aa46dff3023e41", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in results/traces_v9_elite/hibernate__hibernate-orm__11945__orch.json:88"}, "properties": {"repobilityId": "fce2a9d0c54ad2f8", "scanner": "scanner-primary", "fingerprint": "05aa46dff3023e41", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "results/traces_v9_elite/hibernate__hibernate-orm__11945__orch.json"}, "region": {"startLine": 88}}}]}, {"ruleId": "scanner-d6e1017310bd636e", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in results/gold_pick/shard_3.json:23"}, "properties": {"repobilityId": "9115a1c34e9ad669", "scanner": "scanner-primary", "fingerprint": "d6e1017310bd636e", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "results/gold_pick/shard_3.json"}, "region": {"startLine": 23}}}]}, {"ruleId": "scanner-d988a6d620b087a4", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in results/traces_v8/SaptarshiSarkar12__Drifty__801__orch.json:88"}, "properties": {"repobilityId": "01107aded62f9098", "scanner": "scanner-primary", "fingerprint": "d988a6d620b087a4", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "results/traces_v8/SaptarshiSarkar12__Drifty__801__orch.json"}, "region": {"startLine": 88}}}]}, {"ruleId": "scanner-196c612b24d0d72d", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in results/traces_v6/wildfly__wildfly-core__6304__orch.json:88"}, "properties": {"repobilityId": "fba24dca62703ad7", "scanner": "scanner-primary", "fingerprint": "196c612b24d0d72d", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "results/traces_v6/wildfly__wildfly-core__6304__orch.json"}, "region": {"startLine": 88}}}]}, {"ruleId": "scanner-ed69425c4a84c3d8", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in results/traces_v6/apache__pulsar__25868__orch.json:88"}, "properties": {"repobilityId": "dcf0802bf35ad409", "scanner": "scanner-primary", "fingerprint": "ed69425c4a84c3d8", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "results/traces_v6/apache__pulsar__25868__orch.json"}, "region": {"startLine": 88}}}]}, {"ruleId": "scanner-f3113057214a0eb3", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in results/traces_v6/SaptarshiSarkar12__Drifty__801__orch.json:88"}, "properties": {"repobilityId": "be9dc389ce341a8c", "scanner": "scanner-primary", "fingerprint": "f3113057214a0eb3", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "results/traces_v6/SaptarshiSarkar12__Drifty__801__orch.json"}, "region": {"startLine": 88}}}]}, {"ruleId": "scanner-4601e3ad3bb28677", "level": "warning", "message": {"text": "No CI/CD pipelines detected"}, "properties": {"repobilityId": "c3ee439bce2bc51e", "scanner": "scanner-primary", "fingerprint": "4601e3ad3bb28677", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["coverage"]}}, {"ruleId": "scanner-6893a6c8b0861585", "level": "warning", "message": {"text": "Very low test-to-source ratio"}, "properties": {"repobilityId": "54a7de3f06314bf0", "scanner": "scanner-primary", "fingerprint": "6893a6c8b0861585", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["tests", "coverage"]}}, {"ruleId": "scanner-141b30a41e03817b", "level": "note", "message": {"text": "No license file detected"}, "properties": {"repobilityId": "ea13e9676b2f9fa3", "scanner": "scanner-primary", "fingerprint": "141b30a41e03817b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["license", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "1bdd04cbef66c709", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-b9088664ace7f748", "level": "warning", "message": {"text": "Composite production-readiness gap"}, "properties": {"repobilityId": "f62905565e41bb78", "scanner": "scanner-primary", "fingerprint": "b9088664ace7f748", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["production-readiness", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-749d4bc1bd66df5f", "level": "warning", "message": {"text": "Agent instructions exist but release-hardening basics are missing"}, "properties": {"repobilityId": "6a9cc6657d85838f", "scanner": "scanner-primary", "fingerprint": "749d4bc1bd66df5f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-ea8f3013f588db25", "level": "note", "message": {"text": "Shallow git history limits provenance confidence"}, "properties": {"repobilityId": "f28f0aebf8bd328a", "scanner": "scanner-primary", "fingerprint": "ea8f3013f588db25", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-8424db9c75e04ba4", "level": "none", "message": {"text": "Very short observed git history"}, "properties": {"repobilityId": "7b9fc8721c582069", "scanner": "scanner-primary", "fingerprint": "8424db9c75e04ba4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-0b9d83ee836374c8", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 src/gh_client.py:26"}, "properties": {"repobilityId": "8e62ad44418e5f30", "scanner": "scanner-primary", "fingerprint": "0b9d83ee836374c8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-e928c20d4063fd5a", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 src/enrich_bundles_fulldiff.py:33"}, "properties": {"repobilityId": "56e33340e9d67d5a", "scanner": "scanner-primary", "fingerprint": "e928c20d4063fd5a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-0b3a72e83258481c", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 src/current_version/suspicion_group.py:41"}, "properties": {"repobilityId": "4c000079939a09e9", "scanner": "scanner-primary", "fingerprint": "0b3a72e83258481c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-3615cc49daf34a8f", "level": "note", "message": {"text": "Legacy-named symbol `model_copy` in src/current_version/suspicion.py:308"}, "properties": {"repobilityId": "567df3c3287a47b8", "scanner": "scanner-primary", "fingerprint": "3615cc49daf34a8f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-dc4a1029c2aa5fe8", "level": "none", "message": {"text": "Commented-code block (6 lines) in src/current_version/llm.py:179"}, "properties": {"repobilityId": "f0c787cf2ce2085d", "scanner": "scanner-primary", "fingerprint": "dc4a1029c2aa5fe8", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-d0b92fe25691dff4", "level": "note", "message": {"text": "Legacy-named symbol `model_copy` in src/current_version/path_norm.py:47"}, "properties": {"repobilityId": "7f3779360fbc6114", "scanner": "scanner-primary", "fingerprint": "d0b92fe25691dff4", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-7da278105e462642", "level": "note", "message": {"text": "Legacy-named symbol `model_copy` in src/current_version/harness.py:195"}, "properties": {"repobilityId": "f0e642f8629dc9a8", "scanner": "scanner-primary", "fingerprint": "7da278105e462642", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-de8205d2deb2319b", "level": "note", "message": {"text": "Stub function `on_event` (body is just `pass`/`return`) \u2014 src/current_version/harness.py:143"}, "properties": {"repobilityId": "6a9095ce70066647", "scanner": "scanner-primary", "fingerprint": "de8205d2deb2319b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "empty-handler", "dead-code"]}}, {"ruleId": "scanner-4663311c64e22801", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 src/current_version/repo.py:35"}, "properties": {"repobilityId": "14469d725d98157b", "scanner": "scanner-primary", "fingerprint": "4663311c64e22801", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-42db6827dad5f62f", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 src/version_1/suspicion_group.py:41"}, "properties": {"repobilityId": "a937ab34b6a632f4", "scanner": "scanner-primary", "fingerprint": "42db6827dad5f62f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-f7b9aea9a8b62ffb", "level": "note", "message": {"text": "Legacy-named symbol `model_copy` in src/version_1/suspicion.py:281"}, "properties": {"repobilityId": "f62f44e0e4c4f988", "scanner": "scanner-primary", "fingerprint": "f7b9aea9a8b62ffb", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-65fa553df18b6ef1", "level": "note", "message": {"text": "Legacy-named symbol `model_copy` in src/version_1/path_norm.py:47"}, "properties": {"repobilityId": "3a925408e6da9b15", "scanner": "scanner-primary", "fingerprint": "65fa553df18b6ef1", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-a687307ee5692497", "level": "note", "message": {"text": "Legacy-named symbol `model_copy` in src/version_1/harness.py:195"}, "properties": {"repobilityId": "e43fc266365982e7", "scanner": "scanner-primary", "fingerprint": "a687307ee5692497", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-da8389ee7b03a4d0", "level": "note", "message": {"text": "Stub function `on_event` (body is just `pass`/`return`) \u2014 src/version_1/harness.py:143"}, "properties": {"repobilityId": "657bdecd481a7e52", "scanner": "scanner-primary", "fingerprint": "da8389ee7b03a4d0", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "empty-handler", "dead-code"]}}, {"ruleId": "scanner-c27e05fb454e577c", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 src/version_1/repo.py:35"}, "properties": {"repobilityId": "1c48ead1a28e1ad4", "scanner": "scanner-primary", "fingerprint": "c27e05fb454e577c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-030da566069872e9", "level": "note", "message": {"text": "15 env vars used in code but missing from .env.example"}, "properties": {"repobilityId": "0519c1c0e8c1f8e4", "scanner": "scanner-primary", "fingerprint": "030da566069872e9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "config-drift"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "fe1f25cd7400f640", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "8872fe96b714da1b", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "d54df7af598b7e97", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "2d43544464c41fb2", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "6d886736d7b6e3ca", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-49c98f7cedd9c977", "level": "note", "message": {"text": "Near-duplicate function bodies in 4 places"}, "properties": {"repobilityId": "711f9b3c076622c0", "scanner": "scanner-primary", "fingerprint": "49c98f7cedd9c977", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-49c98f7cedd9c977", "level": "note", "message": {"text": "Near-duplicate function bodies in 4 places"}, "properties": {"repobilityId": "571853e1839ec42f", "scanner": "scanner-primary", "fingerprint": "49c98f7cedd9c977", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "27de9a187a676757", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "e5c8492e2b71dc49", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "f8a4a9e9969a3504", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "f0e705747775d3fd", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "029f8cafcc43bbb5", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "62b20231777b24c2", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "b88077213748eb07", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "7b4a64f82b4338bf", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-49c98f7cedd9c977", "level": "note", "message": {"text": "Near-duplicate function bodies in 4 places"}, "properties": {"repobilityId": "30e487c16b81de6f", "scanner": "scanner-primary", "fingerprint": "49c98f7cedd9c977", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-49c98f7cedd9c977", "level": "note", "message": {"text": "Near-duplicate function bodies in 4 places"}, "properties": {"repobilityId": "5f77bd5d3446bc71", "scanner": "scanner-primary", "fingerprint": "49c98f7cedd9c977", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "76b3285759c858f7", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "bc6e1363923b8df5", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "c21a2cb26d12ed35", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}]}]}