/
/installation`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-0b4ad9c5b101129c", "name": "Unused endpoint: GET /circuit-breaker/status", "shortDescription": {"text": "Unused endpoint: GET /circuit-breaker/status"}, "fullDescription": {"text": "`services/ai-analysis/src/main.py` declares `GET /circuit-breaker/status` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-93cbe9356b385a92", "name": "Unused endpoint: GET /quota", "shortDescription": {"text": "Unused endpoint: GET /quota"}, "fullDescription": {"text": "`services/ai-analysis/src/main.py` declares `GET /quota` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-808c0c45b963022d", "name": "Unused endpoint: POST /quota/check", "shortDescription": {"text": "Unused endpoint: POST /quota/check"}, "fullDescription": {"text": "`services/ai-analysis/src/main.py` declares `POST /quota/check` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-41395ab8527d7206", "name": "Unused endpoint: POST /group-analysis", "shortDescription": {"text": "Unused endpoint: POST /group-analysis"}, "fullDescription": {"text": "`services/ai-analysis/src/main.py` declares `POST /group-analysis` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ad8372e840fc3477", "name": "Unused endpoint: GET /week/:weekNumber", "shortDescription": {"text": "Unused endpoint: GET /week/:weekNumber"}, "fullDescription": {"text": "`services/problem/src/problem/problem.controller.ts` declares `GET /week/:weekNumber` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2c3d1d103b19a7f6", "name": "Unused endpoint: GET /all", "shortDescription": {"text": "Unused endpoint: GET /all"}, "fullDescription": {"text": "`services/problem/src/problem/problem.controller.ts` declares `GET /all` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-72eb8a13269a8eb3", "name": "Unused endpoint: GET /active", "shortDescription": {"text": "Unused endpoint: GET /active"}, "fullDescription": {"text": "`services/problem/src/problem/problem.controller.ts` declares `GET /active` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ca5756175765b49d", "name": "Unused endpoint: GET /:id", "shortDescription": {"text": "Unused endpoint: GET /:id"}, "fullDescription": {"text": "`services/problem/src/problem/problem.controller.ts` declares `GET /:id` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7776095065496d26", "name": "Unused endpoint: GET /search/tags", "shortDescription": {"text": "Unused endpoint: GET /search/tags"}, "fullDescription": {"text": "`services/problem/src/problem/problem.controller.ts` declares `GET /search/tags` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7a61c112b611f4bb", "name": "Unused endpoint: DELETE /:id", "shortDescription": {"text": "Unused endpoint: DELETE /:id"}, "fullDescription": {"text": "`services/problem/src/problem/problem.controller.ts` declares `DELETE /:id` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5fbc954f63526821", "name": "Unused endpoint: PATCH /:id", "shortDescription": {"text": "Unused endpoint: PATCH /:id"}, "fullDescription": {"text": "`services/problem/src/problem/problem.controller.ts` declares `PATCH /:id` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7e8374c0c45e45f9", "name": "Unused endpoint: GET /internal/active-ids/:studyId", "shortDescription": {"text": "Unused endpoint: GET /internal/active-ids/:studyId"}, "fullDescription": {"text": "`services/problem/src/problem/internal-problem.controller.ts` declares `GET /internal/active-ids/:studyId` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7382daa6fc7e05b3", "name": "Unused endpoint: GET /internal/deadline/:id", "shortDescription": {"text": "Unused endpoint: GET /internal/deadline/:id"}, "fullDescription": {"text": "`services/problem/src/problem/internal-problem.controller.ts` declares `GET /internal/deadline/:id` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2fd4a01f633e8905", "name": "Unused endpoint: GET /internal/:id", "shortDescription": {"text": "Unused endpoint: GET /internal/:id"}, "fullDescription": {"text": "`services/problem/src/problem/internal-problem.controller.ts` declares `GET /internal/:id` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-523dbf59d116556f", "name": "Unused endpoint: GET /api/notifications/by-user/:userId", "shortDescription": {"text": "Unused endpoint: GET /api/notifications/by-user/:userId"}, "fullDescription": {"text": "`services/identity/src/notification/notification.controller.ts` declares `GET /api/notifications/by-user/:userId` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-25f196b4a695e108", "name": "Unused endpoint: GET /api/notifications/by-user/:userId/unread-count", "shortDescription": {"text": "Unused endpoint: GET /api/notifications/by-user/:userId/unread-count"}, "fullDescription": {"text": "`services/identity/src/notification/notification.controller.ts` declares `GET /api/notifications/by-user/:userId/unread-count` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d402628df8ec0c6e", "name": "Unused endpoint: PATCH /api/notifications/:id/read", "shortDescription": {"text": "Unused endpoint: PATCH /api/notifications/:id/read"}, "fullDescription": {"text": "`services/identity/src/notification/notification.controller.ts` declares `PATCH /api/notifications/:id/read` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-48f0457cae8e74b7", "name": "Unused endpoint: PATCH /api/notifications/by-user/:userId/read-all", "shortDescription": {"text": "Unused endpoint: PATCH /api/notifications/by-user/:userId/read-all"}, "fullDescription": {"text": "`services/identity/src/notification/notification.controller.ts` declares `PATCH /api/notifications/by-user/:userId/read-all` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6d2efebab60ac321", "name": "Unused endpoint: DELETE /api/notifications/old", "shortDescription": {"text": "Unused endpoint: DELETE /api/notifications/old"}, "fullDescription": {"text": "`services/identity/src/notification/notification.controller.ts` declares `DELETE /api/notifications/old` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a5349378eed87f95", "name": "Unused endpoint: DELETE /api/notifications/by-user/:userId", "shortDescription": {"text": "Unused endpoint: DELETE /api/notifications/by-user/:userId"}, "fullDescription": {"text": "`services/identity/src/notification/notification.controller.ts` declares `DELETE /api/notifications/by-user/:userId` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9fac4c69c6aba807", "name": "Unused endpoint: POST /api/studies", "shortDescription": {"text": "Unused endpoint: POST /api/studies"}, "fullDescription": {"text": "`services/identity/src/study/study.controller.ts` declares `POST /api/studies` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-52bef6129ede2a15", "name": "Unused endpoint: GET /api/studies/:id", "shortDescription": {"text": "Unused endpoint: GET /api/studies/:id"}, "fullDescription": {"text": "`services/identity/src/study/study.controller.ts` declares `GET /api/studies/:id` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a2cc96a3e2d57172", "name": "Unused endpoint: GET /api/studies/by-user/:userId", "shortDescription": {"text": "Unused endpoint: GET /api/studies/by-user/:userId"}, "fullDescription": {"text": "`services/identity/src/study/study.controller.ts` declares `GET /api/studies/by-user/:userId` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6d120ccb011bdfda", "name": "Unused endpoint: PUT /api/studies/:id", "shortDescription": {"text": "Unused endpoint: PUT /api/studies/:id"}, "fullDescription": {"text": "`services/identity/src/study/study.controller.ts` declares `PUT /api/studies/:id` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-39c021a299e88874", "name": "Unused endpoint: DELETE /api/studies/:id", "shortDescription": {"text": "Unused endpoint: DELETE /api/studies/:id"}, "fullDescription": {"text": "`services/identity/src/study/study.controller.ts` declares `DELETE /api/studies/:id` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4be6abad2c7e9fe4", "name": "Unused endpoint: POST /api/studies/:id/members", "shortDescription": {"text": "Unused endpoint: POST /api/studies/:id/members"}, "fullDescription": {"text": "`services/identity/src/study/study.controller.ts` declares `POST /api/studies/:id/members` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fa2aad31044af42c", "name": "Unused endpoint: GET /api/studies/:id/members", "shortDescription": {"text": "Unused endpoint: GET /api/studies/:id/members"}, "fullDescription": {"text": "`services/identity/src/study/study.controller.ts` declares `GET /api/studies/:id/members` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9c8fddae8be157c2", "name": "Unused endpoint: GET /api/studies/:id/members/:userId", "shortDescription": {"text": "Unused endpoint: GET /api/studies/:id/members/:userId"}, "fullDescription": {"text": "`services/identity/src/study/study.controller.ts` declares `GET /api/studies/:id/members/:userId` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a6ea8ee7809001d9", "name": "Unused endpoint: DELETE /api/studies/:id/members/:userId", "shortDescription": {"text": "Unused endpoint: DELETE /api/studies/:id/members/:userId"}, "fullDescription": {"text": "`services/identity/src/study/study.controller.ts` declares `DELETE /api/studies/:id/members/:userId` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7ebad9a80ca68546", "name": "Unused endpoint: PATCH /api/studies/:id/members/:userId/role", "shortDescription": {"text": "Unused endpoint: PATCH /api/studies/:id/members/:userId/role"}, "fullDescription": {"text": "`services/identity/src/study/study.controller.ts` declares `PATCH /api/studies/:id/members/:userId/role` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e399f5c864efbccb", "name": "Unused endpoint: PATCH /api/studies/:id/members/:userId/nickname", "shortDescription": {"text": "Unused endpoint: PATCH /api/studies/:id/members/:userId/nickname"}, "fullDescription": {"text": "`services/identity/src/study/study.controller.ts` declares `PATCH /api/studies/:id/members/:userId/nickname` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-099bb91c23920bf2", "name": "Unused endpoint: POST /api/studies/:id/invites", "shortDescription": {"text": "Unused endpoint: POST /api/studies/:id/invites"}, "fullDescription": {"text": "`services/identity/src/study/study.controller.ts` declares `POST /api/studies/:id/invites` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-616916086b1bc506", "name": "Unused endpoint: GET /api/invites/by-code/:code", "shortDescription": {"text": "Unused endpoint: GET /api/invites/by-code/:code"}, "fullDescription": {"text": "`services/identity/src/study/study.controller.ts` declares `GET /api/invites/by-code/:code` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-15c483d457e18d8b", "name": "Unused endpoint: PATCH /api/invites/:id/consume", "shortDescription": {"text": "Unused endpoint: PATCH /api/invites/:id/consume"}, "fullDescription": {"text": "`services/identity/src/study/study.controller.ts` declares `PATCH /api/invites/:id/consume` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d9a1a2c75bdbe1fe", "name": "Unused endpoint: GET /api/share-links/by-user/:userId/study/:studyId", "shortDescription": {"text": "Unused endpoint: GET /api/share-links/by-user/:userId/study/:studyId"}, "fullDescription": {"text": "`services/identity/src/share/share-link.controller.ts` declares `GET /api/share-links/by-user/:userId/study/:studyId` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-49a36eddfddadf01", "name": "Unused endpoint: PATCH /api/share-links/:id/deactivate", "shortDescription": {"text": "Unused endpoint: PATCH /api/share-links/:id/deactivate"}, "fullDescription": {"text": "`services/identity/src/share/share-link.controller.ts` declares `PATCH /api/share-links/:id/deactivate` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e595e91ba739d9d5", "name": "Unused endpoint: GET /api/share-links/by-token/:token", "shortDescription": {"text": "Unused endpoint: GET /api/share-links/by-token/:token"}, "fullDescription": {"text": "`services/identity/src/share/share-link.controller.ts` declares `GET /api/share-links/by-token/:token` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-49286e497fd235b1", "name": "Unused endpoint: POST /api/users/upsert", "shortDescription": {"text": "Unused endpoint: POST /api/users/upsert"}, "fullDescription": {"text": "`services/identity/src/user/user.controller.ts` declares `POST /api/users/upsert` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-08126f2af7a6a07a", "name": "Unused endpoint: GET /api/users/by-slug/:slug", "shortDescription": {"text": "Unused endpoint: GET /api/users/by-slug/:slug"}, "fullDescription": {"text": "`services/identity/src/user/user.controller.ts` declares `GET /api/users/by-slug/:slug` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-812760b081b9ff1a", "name": "Unused endpoint: GET /api/users/:id", "shortDescription": {"text": "Unused endpoint: GET /api/users/:id"}, "fullDescription": {"text": "`services/identity/src/user/user.controller.ts` declares `GET /api/users/:id` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-78dbe25cdcd00bc0", "name": "Unused endpoint: PATCH /api/users/:id", "shortDescription": {"text": "Unused endpoint: PATCH /api/users/:id"}, "fullDescription": {"text": "`services/identity/src/user/user.controller.ts` declares `PATCH /api/users/:id` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2f0a8a9d0faa32d1", "name": "Unused endpoint: DELETE /api/users/:id", "shortDescription": {"text": "Unused endpoint: DELETE /api/users/:id"}, "fullDescription": {"text": "`services/identity/src/user/user.controller.ts` declares `DELETE /api/users/:id` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9f4379d5f5f72126", "name": "Unused endpoint: PATCH /api/users/:id/github", "shortDescription": {"text": "Unused endpoint: PATCH /api/users/:id/github"}, "fullDescription": {"text": "`services/identity/src/user/user.controller.ts` declares `PATCH /api/users/:id/github` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2cd038223d0b5a76", "name": "Unused endpoint: GET /api/users/:id/github-status", "shortDescription": {"text": "Unused endpoint: GET /api/users/:id/github-status"}, "fullDescription": {"text": "`services/identity/src/user/user.controller.ts` declares `GET /api/users/:id/github-status` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-711bd9b2e6a5c949", "name": "Unused endpoint: GET /api/users/:id/github-token", "shortDescription": {"text": "Unused endpoint: GET /api/users/:id/github-token"}, "fullDescription": {"text": "`services/identity/src/user/user.controller.ts` declares `GET /api/users/:id/github-token` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7bbcd63dd47f969e", "name": "Unused endpoint: GET /api/users/:id/github-encrypted-token", "shortDescription": {"text": "Unused endpoint: GET /api/users/:id/github-encrypted-token"}, "fullDescription": {"text": "`services/identity/src/user/user.controller.ts` declares `GET /api/users/:id/github-encrypted-token` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-42d69002dfdefce9", "name": "Unused endpoint: PATCH /api/users/:id/profile-settings", "shortDescription": {"text": "Unused endpoint: PATCH /api/users/:id/profile-settings"}, "fullDescription": {"text": "`services/identity/src/user/user.controller.ts` declares `PATCH /api/users/:id/profile-settings` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a153a76c63e58f53", "name": "Unused endpoint: GET /api/quiz-records/by-user/:userId", "shortDescription": {"text": "Unused endpoint: GET /api/quiz-records/by-user/:userId"}, "fullDescription": {"text": "`services/identity/src/quiz-record/quiz-record.controller.ts` declares `GET /api/quiz-records/by-user/:userId` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0c860e73ef096a43", "name": "Unused endpoint: GET /api/feedbacks/by-user/:userId", "shortDescription": {"text": "Unused endpoint: GET /api/feedbacks/by-user/:userId"}, "fullDescription": {"text": "`services/identity/src/feedback/feedback.controller.ts` declares `GET /api/feedbacks/by-user/:userId` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-53b76c258b2e7ba5", "name": "Unused endpoint: GET /api/feedbacks/:publicId/detail", "shortDescription": {"text": "Unused endpoint: GET /api/feedbacks/:publicId/detail"}, "fullDescription": {"text": "`services/identity/src/feedback/feedback.controller.ts` declares `GET /api/feedbacks/:publicId/detail` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/21607"}, "properties": {"repository": "tpals0409/AlgoSu", "repoUrl": "https://github.com/tpals0409/AlgoSu", "branch": "main"}, "results": [{"ruleId": "scanner-38c3f093f4129565", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 blog/src/components/blog/echelon-matrix.tsx:115"}, "properties": {"repobilityId": "71326b5fd4eb6c3b", "scanner": "scanner-primary", "fingerprint": "38c3f093f4129565", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-0d7a2e5f349789b4", "level": "warning", "message": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 blog/src/app/en/layout.tsx:26"}, "properties": {"repobilityId": "887d2e653f4dab55", "scanner": "scanner-primary", "fingerprint": "0d7a2e5f349789b4", "layer": "frontend", "severity": "medium", "confidence": 1.0, "tags": ["frontend-quality", "fq.dangerous-html"]}}, {"ruleId": "scanner-0e9201e175a5a8e9", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 frontend/scripts/check-wcag.ts:207"}, "properties": {"repobilityId": "2490e374d46a5d2e", "scanner": "scanner-primary", "fingerprint": "0e9201e175a5a8e9", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-e13206b819dde6c8", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 frontend/src/components/layout/StudySidebar.tsx:140"}, "properties": {"repobilityId": "4727fcff5d3407cc", "scanner": "scanner-primary", "fingerprint": "e13206b819dde6c8", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-747c5d9f56f3247c", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 frontend/src/components/layout/AppLayout.tsx:145"}, "properties": {"repobilityId": "478af521e6bb5d3b", "scanner": "scanner-primary", "fingerprint": "747c5d9f56f3247c", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-d982a4879d797473", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 frontend/src/components/analytics/AnalyticsCharts.tsx:93"}, "properties": {"repobilityId": "36c1a0e46a3800c6", "scanner": "scanner-primary", "fingerprint": "d982a4879d797473", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-0c04bc7259116d18", "level": "warning", "message": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 frontend/src/components/ui/chart.tsx:85"}, "properties": {"repobilityId": "87d65db05fa624b0", "scanner": "scanner-primary", "fingerprint": "0c04bc7259116d18", "layer": "frontend", "severity": "medium", "confidence": 1.0, "tags": ["frontend-quality", "fq.dangerous-html"]}}, {"ruleId": "scanner-c61c8a8be1cbc069", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 frontend/src/components/ui/add-problem/SearchStep.tsx:266"}, "properties": {"repobilityId": "b0498cc29f33a931", "scanner": "scanner-primary", "fingerprint": "c61c8a8be1cbc069", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-24732251e536e2c4", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 frontend/src/components/dashboard/DashboardTwoColumn.tsx:111"}, "properties": {"repobilityId": "76a1da434644df17", "scanner": "scanner-primary", "fingerprint": "24732251e536e2c4", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-a932ea1aae23e82e", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 frontend/src/components/providers/WebVitalsReporter.tsx:26"}, "properties": {"repobilityId": "7cd27ef48f0b52d5", "scanner": "scanner-primary", "fingerprint": "a932ea1aae23e82e", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-42d0b0775d363123", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 frontend/src/components/profile/ShareLinkManager.tsx:196"}, "properties": {"repobilityId": "f5738a8411c8afe1", "scanner": "scanner-primary", "fingerprint": "42d0b0775d363123", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-2eaa18c3b5971947", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 frontend/src/app/[locale]/shared/[token]/page.tsx:511"}, "properties": {"repobilityId": "87c6ee3ac29193a8", "scanner": "scanner-primary", "fingerprint": "2eaa18c3b5971947", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-b71f2b7dc72cdaa3", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 frontend/src/app/[locale]/studies/page.tsx:318"}, "properties": {"repobilityId": "7c6c90f3d77fbfd6", "scanner": "scanner-primary", "fingerprint": "b71f2b7dc72cdaa3", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-16b603b7d04ca74b", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 frontend/src/app/[locale]/studies/[id]/page.tsx:210"}, "properties": {"repobilityId": "40e2632f1e360d18", "scanner": "scanner-primary", "fingerprint": "16b603b7d04ca74b", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-b4195bb80ddfa83a", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 frontend/src/app/[locale]/studies/[id]/settings/_components/MembersSection.tsx:149"}, "properties": {"repobilityId": "43c21f625ffa44c1", "scanner": "scanner-primary", "fingerprint": "b4195bb80ddfa83a", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-695ae4b037c66f84", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 frontend/src/app/[locale]/reviews/[submissionId]/page.tsx:328"}, "properties": {"repobilityId": "1f6c022460c40576", "scanner": "scanner-primary", "fingerprint": "695ae4b037c66f84", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-2d02aa7043cfc03c", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 frontend/src/app/[locale]/submissions/page.tsx:292"}, "properties": {"repobilityId": "73413d41f7322f22", "scanner": "scanner-primary", "fingerprint": "2d02aa7043cfc03c", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-af96646ca8d33324", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 frontend/src/app/[locale]/submissions/[id]/analysis/page.tsx:241"}, "properties": {"repobilityId": "d03a6bd34a4e0f06", "scanner": "scanner-primary", "fingerprint": "af96646ca8d33324", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-42e990e88f68c71c", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 frontend/src/app/[locale]/problems/page.tsx:394"}, "properties": {"repobilityId": "0ac55abd27b6f856", "scanner": "scanner-primary", "fingerprint": "42e990e88f68c71c", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-01a71b1428858889", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 frontend/src/app/[locale]/problems/[id]/edit/_components/PlatformSearchSection.tsx:190"}, "properties": {"repobilityId": "6d1429fa598ff1a3", "scanner": "scanner-primary", "fingerprint": "01a71b1428858889", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-34b150aaff1b1d43", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 frontend/src/app/[locale]/problems/create/page.tsx:437"}, "properties": {"repobilityId": "e074c3aa35cf2c8b", "scanner": "scanner-primary", "fingerprint": "34b150aaff1b1d43", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-97f1b96271847704", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 frontend/src/hooks/__tests__/useAutoSave.test.ts:21"}, "properties": {"repobilityId": "42408338f9dd553e", "scanner": "scanner-primary", "fingerprint": "97f1b96271847704", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-c1066badd8adfb90", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 tests/e2e/programmers-full-flow.spec.ts:333"}, "properties": {"repobilityId": "ea39412a31d49431", "scanner": "scanner-primary", "fingerprint": "c1066badd8adfb90", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-2d10613b0b6583a1", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/verify-routes.ts:140"}, "properties": {"repobilityId": "bab204f3f2fef40d", "scanner": "scanner-primary", "fingerprint": "2d10613b0b6583a1", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-26b8a286e68a6e30", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 UI/13-problem-create.tsx:343"}, "properties": {"repobilityId": "26e1d524c0148c34", "scanner": "scanner-primary", "fingerprint": "26b8a286e68a6e30", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-db131ec725752dda", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 UI/21-review.tsx:437"}, "properties": {"repobilityId": "b501a44392b64da5", "scanner": "scanner-primary", "fingerprint": "db131ec725752dda", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-65e6f512cacb3d4a", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 UI/22-profile.tsx:259"}, "properties": {"repobilityId": "5643ce6b10975860", "scanner": "scanner-primary", "fingerprint": "65e6f512cacb3d4a", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-635a49736eb8d777", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 UI/12-problems.tsx:311"}, "properties": {"repobilityId": "d152f6b04d880745", "scanner": "scanner-primary", "fingerprint": "635a49736eb8d777", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-a2931eed7e59665d", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 UI/10-study-detail.tsx:671"}, "properties": {"repobilityId": "1930b3550ad0289e", "scanner": "scanner-primary", "fingerprint": "a2931eed7e59665d", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-7b2bbc92b1229a0e", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 UI/15-problem-edit.tsx:351"}, "properties": {"repobilityId": "a25551b680ee7a37", "scanner": "scanner-primary", "fingerprint": "7b2bbc92b1229a0e", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-cc263e49d4074932", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 UI/08-studies.tsx:229"}, "properties": {"repobilityId": "13c058bc6f838308", "scanner": "scanner-primary", "fingerprint": "cc263e49d4074932", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-e437cc6e0fd022b7", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 UI/18-submissions.tsx:341"}, "properties": {"repobilityId": "ddcfb22393ec5cc2", "scanner": "scanner-primary", "fingerprint": "e437cc6e0fd022b7", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-0479a8a06d9ef3fe", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 services/gateway/src/share/public-share.controller.spec.ts:187"}, "properties": {"repobilityId": "ac427ed7ae1a6227", "scanner": "scanner-primary", "fingerprint": "0479a8a06d9ef3fe", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-81759ac910c66b8b", "level": "warning", "message": {"text": "Privileged port 18 in use"}, "properties": {"repobilityId": "2d7b5e7d9c158e43", "scanner": "scanner-primary", "fingerprint": "81759ac910c66b8b", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci-full-validation.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-90b07d6e7298f07e", "level": "warning", "message": {"text": "Dockerfile runs as root: blog/Dockerfile"}, "properties": {"repobilityId": "1fb92a0cdbd4bef1", "scanner": "scanner-primary", "fingerprint": "90b07d6e7298f07e", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-b7b142473b57c89e", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: nginx:1.28-alpine3.21"}, "properties": {"repobilityId": "2ef06e30049caeab", "scanner": "scanner-primary", "fingerprint": "b7b142473b57c89e", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "blog/Dockerfile"}, "region": {"startLine": 4}}}]}, {"ruleId": "scanner-a7f39cdd5fa21931", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: node:22-alpine"}, "properties": {"repobilityId": "439b7c28488fdcf2", "scanner": "scanner-primary", "fingerprint": "a7f39cdd5fa21931", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/Dockerfile"}, "region": {"startLine": 3}}}]}, {"ruleId": "scanner-a7f39cdd5fa21931", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: node:22-alpine"}, "properties": {"repobilityId": "8d72099d7227e8af", "scanner": "scanner-primary", "fingerprint": "a7f39cdd5fa21931", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/Dockerfile"}, "region": {"startLine": 24}}}]}, {"ruleId": "scanner-0dc2d7b80266c546", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.13-slim"}, "properties": {"repobilityId": "26f17395734ae0ec", "scanner": "scanner-primary", "fingerprint": "0dc2d7b80266c546", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "services/ai-analysis/Dockerfile"}, "region": {"startLine": 2}}}]}, {"ruleId": "scanner-0dc2d7b80266c546", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.13-slim"}, "properties": {"repobilityId": "3cf8a1417e82ceb0", "scanner": "scanner-primary", "fingerprint": "0dc2d7b80266c546", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "services/ai-analysis/Dockerfile"}, "region": {"startLine": 11}}}]}, {"ruleId": "scanner-07d4156600a1180a", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: node:22-alpine"}, "properties": {"repobilityId": "ece8d32ff96ba3da", "scanner": "scanner-primary", "fingerprint": "07d4156600a1180a", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "services/problem/Dockerfile"}, "region": {"startLine": 3}}}]}, {"ruleId": "scanner-07d4156600a1180a", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: node:22-alpine"}, "properties": {"repobilityId": "0ca643b973cbf034", "scanner": "scanner-primary", "fingerprint": "07d4156600a1180a", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "services/problem/Dockerfile"}, "region": {"startLine": 11}}}]}, {"ruleId": "scanner-23eaabffa5ece207", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: node:22-alpine"}, "properties": {"repobilityId": "1d618c201575cd0a", "scanner": "scanner-primary", "fingerprint": "23eaabffa5ece207", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "services/identity/Dockerfile"}, "region": {"startLine": 3}}}]}, {"ruleId": "scanner-23eaabffa5ece207", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: node:22-alpine"}, "properties": {"repobilityId": "484d06b932a70091", "scanner": "scanner-primary", "fingerprint": "23eaabffa5ece207", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "services/identity/Dockerfile"}, "region": {"startLine": 11}}}]}, {"ruleId": "scanner-c45ff406f630eac6", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: node:22-alpine"}, "properties": {"repobilityId": "245821dc98380925", "scanner": "scanner-primary", "fingerprint": "c45ff406f630eac6", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "services/github-worker/Dockerfile"}, "region": {"startLine": 2}}}]}, {"ruleId": "scanner-c45ff406f630eac6", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: node:22-alpine"}, "properties": {"repobilityId": "b1a7e368b6f4d9e4", "scanner": "scanner-primary", "fingerprint": "c45ff406f630eac6", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "services/github-worker/Dockerfile"}, "region": {"startLine": 9}}}]}, {"ruleId": "scanner-4957ffdda3dae54b", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: node:22-alpine"}, "properties": {"repobilityId": "a315bb02691f3b32", "scanner": "scanner-primary", "fingerprint": "4957ffdda3dae54b", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "services/submission/Dockerfile"}, "region": {"startLine": 4}}}]}, {"ruleId": "scanner-4957ffdda3dae54b", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: node:22-alpine"}, "properties": {"repobilityId": "1f3e742317113f92", "scanner": "scanner-primary", "fingerprint": "4957ffdda3dae54b", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "services/submission/Dockerfile"}, "region": {"startLine": 12}}}]}, {"ruleId": "scanner-d5542c42823dc0be", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: node:22-alpine"}, "properties": {"repobilityId": "a26a2e1646dacd22", "scanner": "scanner-primary", "fingerprint": "d5542c42823dc0be", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "services/gateway/Dockerfile"}, "region": {"startLine": 4}}}]}, {"ruleId": "scanner-d5542c42823dc0be", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: node:22-alpine"}, "properties": {"repobilityId": "2b850e5132936405", "scanner": "scanner-primary", "fingerprint": "d5542c42823dc0be", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "services/gateway/Dockerfile"}, "region": {"startLine": 36}}}]}, {"ruleId": "scanner-aa5acaa49eb8315b", "level": "note", "message": {"text": "Containers defined but no K8s/orchestration manifest found"}, "properties": {"repobilityId": "b230ea9b68736081", "scanner": "scanner-primary", "fingerprint": "aa5acaa49eb8315b", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["coverage", "deployment"]}}, {"ruleId": "scanner-900091e8a235e0dd", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in blog/src/components/blog/mermaid.tsx:54"}, "properties": {"repobilityId": "5092334348060129", "scanner": "scanner-primary", "fingerprint": "900091e8a235e0dd", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "blog/src/components/blog/mermaid.tsx"}, "region": {"startLine": 54}}}]}, {"ruleId": "scanner-76721134021285ac", "level": "warning", "message": {"text": "Insecure pattern 'dangerous_innerhtml' in blog/src/app/en/layout.tsx:26"}, "properties": {"repobilityId": "1e972f3f144071b1", "scanner": "scanner-primary", "fingerprint": "76721134021285ac", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "dangerous_innerhtml"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "blog/src/app/en/layout.tsx"}, "region": {"startLine": 26}}}]}, {"ruleId": "scanner-caceadc7b6f1d375", "level": "warning", "message": {"text": "Insecure pattern 'dangerous_innerhtml' in frontend/src/components/ui/chart.tsx:85"}, "properties": {"repobilityId": "68d1eb3e4f8f564d", "scanner": "scanner-primary", "fingerprint": "caceadc7b6f1d375", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "dangerous_innerhtml"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/src/components/ui/chart.tsx"}, "region": {"startLine": 85}}}]}, {"ruleId": "scanner-458b6b0ab98adecd", "level": "warning", "message": {"text": "Insecure pattern 'local_storage_auth_token' in frontend/src/lib/__tests__/auth.test.ts:33"}, "properties": {"repobilityId": "aa356bd9f1bc63f1", "scanner": "scanner-primary", "fingerprint": "458b6b0ab98adecd", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "local_storage_auth_token"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/src/lib/__tests__/auth.test.ts"}, "region": {"startLine": 33}}}]}, {"ruleId": "scanner-af37b390081f3056", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in scripts/check-prometheus-rules.mjs:19"}, "properties": {"repobilityId": "b721bfe845490113", "scanner": "scanner-primary", "fingerprint": "af37b390081f3056", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/check-prometheus-rules.mjs"}, "region": {"startLine": 19}}}]}, {"ruleId": "scanner-6ca19df7fee3fce3", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in scripts/check-coverage-gate-bypass.mjs:17"}, "properties": {"repobilityId": "9e6fa24b57ce31c8", "scanner": "scanner-primary", "fingerprint": "6ca19df7fee3fce3", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/check-coverage-gate-bypass.mjs"}, "region": {"startLine": 17}}}]}, {"ruleId": "scanner-6ed0dd75b80f73a6", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in scripts/check-staging-integrity.mjs:45"}, "properties": {"repobilityId": "f6152c0265110567", "scanner": "scanner-primary", "fingerprint": "6ed0dd75b80f73a6", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/check-staging-integrity.mjs"}, "region": {"startLine": 45}}}]}, {"ruleId": "scanner-44551ec50cb13ec6", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in scripts/check-doc-refs.mjs:34"}, "properties": {"repobilityId": "6c466b801eccc485", "scanner": "scanner-primary", "fingerprint": "44551ec50cb13ec6", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/check-doc-refs.mjs"}, "region": {"startLine": 34}}}]}, {"ruleId": "scanner-bce464c7774afa0b", "level": "error", "message": {"text": "Possible secret in infra/postgres-init/01-create-databases.sh"}, "properties": {"repobilityId": "b1072d9d543c93de", "scanner": "scanner-primary", "fingerprint": "bce464c7774afa0b", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "infra/postgres-init/01-create-databases.sh"}, "region": {"startLine": 17}}}]}, {"ruleId": "scanner-bce464c7774afa0b", "level": "error", "message": {"text": "Possible secret in infra/postgres-init/01-create-databases.sh"}, "properties": {"repobilityId": "b1072d9d543c93de", "scanner": "scanner-primary", "fingerprint": "bce464c7774afa0b", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "infra/postgres-init/01-create-databases.sh"}, "region": {"startLine": 18}}}]}, {"ruleId": "scanner-bce464c7774afa0b", "level": "error", "message": {"text": "Possible secret in infra/postgres-init/01-create-databases.sh"}, "properties": {"repobilityId": "b1072d9d543c93de", "scanner": "scanner-primary", "fingerprint": "bce464c7774afa0b", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "infra/postgres-init/01-create-databases.sh"}, "region": {"startLine": 19}}}]}, {"ruleId": "scanner-bce464c7774afa0b", "level": "error", "message": {"text": "Possible secret in infra/postgres-init/01-create-databases.sh"}, "properties": {"repobilityId": "b1072d9d543c93de", "scanner": "scanner-primary", "fingerprint": "bce464c7774afa0b", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "infra/postgres-init/01-create-databases.sh"}, "region": {"startLine": 20}}}]}, {"ruleId": "scanner-058a603d73c08b86", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "050b49173c5c541c", "scanner": "scanner-primary", "fingerprint": "058a603d73c08b86", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci-full-validation.yml"}, "region": {"startLine": 41}}}]}, {"ruleId": "scanner-9f065f7ca12e4079", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "501b9f0601f53c30", "scanner": "scanner-primary", "fingerprint": "9f065f7ca12e4079", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/dependabot-automerge.yml"}, "region": {"startLine": 35}}}]}, {"ruleId": "scanner-fe82dc4c5a28d6b9", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "070ce4f7a42e0586", "scanner": "scanner-primary", "fingerprint": "fe82dc4c5a28d6b9", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/dependabot-automerge.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "a22664b58dca3181", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 324}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "a22664b58dca3181", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 442}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "8fb57e9e0362cf03", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 591}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "a22664b58dca3181", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 610}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "8fb57e9e0362cf03", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 627}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "a22664b58dca3181", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 648}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "8fb57e9e0362cf03", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 664}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "7283ccf027c9dba2", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 694}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "8fb57e9e0362cf03", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 812}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "8fb57e9e0362cf03", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 871}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "8fb57e9e0362cf03", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 963}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "97a9a5de61d82fcd", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 1035}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "7283ccf027c9dba2", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 1042}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "cb1a23126ead31cb", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 1091}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "8fb57e9e0362cf03", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 1114}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "97a9a5de61d82fcd", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 1157}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "7283ccf027c9dba2", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 1177}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "97a9a5de61d82fcd", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 1350}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "7283ccf027c9dba2", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 1358}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "a22664b58dca3181", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 1485}}}]}, {"ruleId": "scanner-64192a3c67110d01", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "87338a8bfcb6f435", "scanner": "scanner-primary", "fingerprint": "64192a3c67110d01", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cb639d9a10a47b23", "level": "note", "message": {"text": "package.json defines install-time lifecycle scripts"}, "properties": {"repobilityId": "b86179956da3a4a8", "scanner": "scanner-primary", "fingerprint": "cb639d9a10a47b23", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "npm", "install-scripts"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4581837b53eb62af", "level": "note", "message": {"text": "Very large file: scripts/check-grafana-metrics.mjs (1352 lines)"}, "properties": {"repobilityId": "6aca3a44e3b003c2", "scanner": "scanner-primary", "fingerprint": "4581837b53eb62af", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-ba14af3d6639743c", "level": "note", "message": {"text": "Very large file: services/ai-analysis/tests/test_claude_client.py (1804 lines)"}, "properties": {"repobilityId": "9de66024683d650f", "scanner": "scanner-primary", "fingerprint": "ba14af3d6639743c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-71c5ea27cf3d13d4", "level": "note", "message": {"text": "Very large file: services/ai-analysis/tests/test_worker.py (1388 lines)"}, "properties": {"repobilityId": "19bff155573b2c2e", "scanner": "scanner-primary", "fingerprint": "71c5ea27cf3d13d4", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-d08b405a93425f18", "level": "note", "message": {"text": "Very large file: services/submission/src/submission/submission.service.spec.ts (1324 lines)"}, "properties": {"repobilityId": "5a5ecb84d1a204cf", "scanner": "scanner-primary", "fingerprint": "d08b405a93425f18", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-ea3b5e389d8c9c0f", "level": "note", "message": {"text": "Low test-to-source ratio"}, "properties": {"repobilityId": "ef7b2552cc00a375", "scanner": "scanner-primary", "fingerprint": "ea3b5e389d8c9c0f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["tests"]}}, {"ruleId": "scanner-141b30a41e03817b", "level": "note", "message": {"text": "No license file detected"}, "properties": {"repobilityId": "ff837c71f53ff324", "scanner": "scanner-primary", "fingerprint": "141b30a41e03817b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["license", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "a6d497c9960e5266", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-72b2a6250083a784", "level": "warning", "message": {"text": "Placeholder or mock-heavy implementation detected"}, "properties": {"repobilityId": "50fa9ce54c243534", "scanner": "scanner-primary", "fingerprint": "72b2a6250083a784", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "incomplete", "generated-repo-pattern"]}}, {"ruleId": "scanner-2d0c7b7ab8f8aacf", "level": "warning", "message": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "properties": {"repobilityId": "0d0492f8b2e21363", "scanner": "scanner-primary", "fingerprint": "2d0c7b7ab8f8aacf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "critical-flow", "generated-repo-pattern"]}}, {"ruleId": "scanner-749d4bc1bd66df5f", "level": "warning", "message": {"text": "Agent instructions exist but release-hardening basics are missing"}, "properties": {"repobilityId": "4ac721cd8864765b", "scanner": "scanner-primary", "fingerprint": "749d4bc1bd66df5f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-ea8f3013f588db25", "level": "note", "message": {"text": "Shallow git history limits provenance confidence"}, "properties": {"repobilityId": "fcca573775ec6c7f", "scanner": "scanner-primary", "fingerprint": "ea8f3013f588db25", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-8424db9c75e04ba4", "level": "none", "message": {"text": "Very short observed git history"}, "properties": {"repobilityId": "054e8757c53455a3", "scanner": "scanner-primary", "fingerprint": "8424db9c75e04ba4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-17d866d91a7c451e", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: CLAUDE.md"}, "properties": {"repobilityId": "ccce5984e58a48f0", "scanner": "scanner-primary", "fingerprint": "17d866d91a7c451e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "CLAUDE.md"}, "region": {"startLine": 99}}}]}, {"ruleId": "scanner-2dd8a0be5c4ebfb2", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/commands/algosu-review.md"}, "properties": {"repobilityId": "a64ce8fef368b6bd", "scanner": "scanner-primary", "fingerprint": "2dd8a0be5c4ebfb2", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/algosu-review.md"}, "region": {"startLine": 24}}}]}, {"ruleId": "scanner-fc9851d2f2a8908b", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/algosu-oracle.md"}, "properties": {"repobilityId": "16de18c22bb7d366", "scanner": "scanner-primary", "fingerprint": "fc9851d2f2a8908b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/algosu-oracle.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ee2450df1c12399a", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/stop.md"}, "properties": {"repobilityId": "036128e76b87bcad", "scanner": "scanner-primary", "fingerprint": "ee2450df1c12399a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/stop.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4f1067b072259278", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/agents/_base.md"}, "properties": {"repobilityId": "72cc56a3ff034e09", "scanner": "scanner-primary", "fingerprint": "4f1067b072259278", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/agents/_base.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-dd45b98bff610cb7", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/agents/critic.md"}, "properties": {"repobilityId": "9c060e6d99a40d36", "scanner": "scanner-primary", "fingerprint": "dd45b98bff610cb7", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/agents/critic.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bda456ee07adb3c4", "level": "none", "message": {"text": "Commented-code block (6 lines) in frontend/next.config.ts:49"}, "properties": {"repobilityId": "d5362034eedb7478", "scanner": "scanner-primary", "fingerprint": "bda456ee07adb3c4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-1b13043624284b4e", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 frontend/src/contexts/AuthContext.tsx:175"}, "properties": {"repobilityId": "58c7d6f0bdf06889", "scanner": "scanner-primary", "fingerprint": "1b13043624284b4e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-8b4d8b4e8b81e635", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 frontend/src/lib/guards.ts:17"}, "properties": {"repobilityId": "db37f1ac76e55925", "scanner": "scanner-primary", "fingerprint": "8b4d8b4e8b81e635", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-6caa2195b19fc8df", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 frontend/src/lib/quiz/__tests__/api-store.test.ts:65"}, "properties": {"repobilityId": "47d88a043aeeb04f", "scanner": "scanner-primary", "fingerprint": "6caa2195b19fc8df", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-1da09653541d5859", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 frontend/src/hooks/__tests__/useSubmissionSSE.test.ts:47"}, "properties": {"repobilityId": "058c858f1919c88a", "scanner": "scanner-primary", "fingerprint": "1da09653541d5859", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-5fbc0f034e701d33", "level": "none", "message": {"text": "Commented-code block (6 lines) in scripts/check-regex-robustness.mjs:210"}, "properties": {"repobilityId": "79432a2791b23250", "scanner": "scanner-primary", "fingerprint": "5fbc0f034e701d33", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a123a86c360bcbc4", "level": "none", "message": {"text": "Commented-code block (5 lines) in scripts/check-grafana-metrics.mjs:998"}, "properties": {"repobilityId": "b3cc01bc71f78ae4", "scanner": "scanner-primary", "fingerprint": "a123a86c360bcbc4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-4c091a17ef3fe9f2", "level": "none", "message": {"text": "Commented-code block (8 lines) in services/ai-analysis/src/prompt.py:330"}, "properties": {"repobilityId": "2db57222d1a82d63", "scanner": "scanner-primary", "fingerprint": "4c091a17ef3fe9f2", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-30f78347bc9e066f", "level": "none", "message": {"text": "Commented-code block (5 lines) in services/ai-analysis/src/claude_client.py:315"}, "properties": {"repobilityId": "418363f79f04449f", "scanner": "scanner-primary", "fingerprint": "30f78347bc9e066f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b2e03c75e8d0226d", "level": "none", "message": {"text": "Commented-code block (6 lines) in services/problem/src/app.module.init.spec.ts:98"}, "properties": {"repobilityId": "a8066e0343dda89c", "scanner": "scanner-primary", "fingerprint": "b2e03c75e8d0226d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-25b363792e0f7916", "level": "note", "message": {"text": "Legacy-named symbol `missing_in_old` in services/problem/src/database/reconciliation.service.ts:85"}, "properties": {"repobilityId": "56c0ff038d4fb697", "scanner": "scanner-primary", "fingerprint": "25b363792e0f7916", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-d21720e390cd0308", "level": "note", "message": {"text": "Legacy-named symbol `deleteOld` in services/identity/src/notification/notification.service.ts:120"}, "properties": {"repobilityId": "18e373f30cc6cdbb", "scanner": "scanner-primary", "fingerprint": "d21720e390cd0308", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-c87aedf115f0957b", "level": "note", "message": {"text": "Legacy-named symbol `deleteOld` in services/identity/src/notification/notification.controller.spec.ts:41"}, "properties": {"repobilityId": "ce2b86392a75da7d", "scanner": "scanner-primary", "fingerprint": "c87aedf115f0957b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-6bbf25d0c497fe96", "level": "note", "message": {"text": "Legacy-named symbol `deleteOld` in services/identity/src/notification/notification.service.spec.ts:188"}, "properties": {"repobilityId": "a2d287ea86290223", "scanner": "scanner-primary", "fingerprint": "6bbf25d0c497fe96", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-e83b12fc003c413f", "level": "note", "message": {"text": "Legacy-named symbol `deleteOld` in services/identity/src/notification/notification.controller.ts:97"}, "properties": {"repobilityId": "88d91d68062787eb", "scanner": "scanner-primary", "fingerprint": "e83b12fc003c413f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-74b3b8775a773ef6", "level": "none", "message": {"text": "Commented-code block (5 lines) in services/github-worker/src/logger.spec.ts:163"}, "properties": {"repobilityId": "b32b81974e38f652", "scanner": "scanner-primary", "fingerprint": "74b3b8775a773ef6", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-8b4e385c9501052b", "level": "none", "message": {"text": "Commented-code block (5 lines) in services/github-worker/src/worker.spec.ts:642"}, "properties": {"repobilityId": "ba957999795a8618", "scanner": "scanner-primary", "fingerprint": "8b4e385c9501052b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-7fb0c49f545740b1", "level": "none", "message": {"text": "Commented-code block (6 lines) in services/github-worker/src/circuit-breaker.ts:130"}, "properties": {"repobilityId": "2ea5d600ef6526c2", "scanner": "scanner-primary", "fingerprint": "7fb0c49f545740b1", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-9142844f53184eb9", "level": "none", "message": {"text": "Commented-code block (6 lines) in services/submission/src/common/circuit-breaker/circuit-breaker.service.ts:107"}, "properties": {"repobilityId": "a09d54e66b4232ba", "scanner": "scanner-primary", "fingerprint": "9142844f53184eb9", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-c82a17b0be6ca0d8", "level": "none", "message": {"text": "Commented-code block (5 lines) in services/gateway/src/rate-limit/rate-limit.middleware.ts:37"}, "properties": {"repobilityId": "ce66707f9c5eb93e", "scanner": "scanner-primary", "fingerprint": "c82a17b0be6ca0d8", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-c03ac1ab0ed59a1d", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 services/gateway/src/study/study-stats.service.ts:72"}, "properties": {"repobilityId": "2f4f816cd8e68d6a", "scanner": "scanner-primary", "fingerprint": "c03ac1ab0ed59a1d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-0a0233f67b543c75", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 services/gateway/src/share/public-share.controller.ts:98"}, "properties": {"repobilityId": "cd1fe8c87079d278", "scanner": "scanner-primary", "fingerprint": "0a0233f67b543c75", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-65df07ab4020db79", "level": "note", "message": {"text": "18 env vars used in code but missing from .env.example"}, "properties": {"repobilityId": "5e334d56f52c02e1", "scanner": "scanner-primary", "fingerprint": "65df07ab4020db79", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "config-drift"]}}, {"ruleId": "scanner-9d2282876731746b", "level": "error", "message": {"text": "FastAPI POST `check_and_increment_quota` without auth dependency \u2014 services/ai-analysis/src/main.py:269"}, "properties": {"repobilityId": "e295b07d05bf6b11", "scanner": "scanner-primary", "fingerprint": "9d2282876731746b", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "services/ai-analysis/src/main.py"}, "region": {"startLine": 269}}}]}, {"ruleId": "scanner-52700d962052f7cd", "level": "error", "message": {"text": "FastAPI POST `group_analysis` without auth dependency \u2014 services/ai-analysis/src/main.py:328"}, "properties": {"repobilityId": "1deb5ec5eb41b0e4", "scanner": "scanner-primary", "fingerprint": "52700d962052f7cd", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "services/ai-analysis/src/main.py"}, "region": {"startLine": 328}}}]}, {"ruleId": "scanner-06709362f218ee6c", "level": "error", "message": {"text": "Dangling fetch: POST https://api.github.com/repos/${owner}/${repo}/installation (services/github-worker/src/token-manager.ts:75)"}, "properties": {"repobilityId": "037ecd8a524d8718", "scanner": "scanner-primary", "fingerprint": "06709362f218ee6c", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-0b4ad9c5b101129c", "level": "note", "message": {"text": "Unused endpoint: GET /circuit-breaker/status"}, "properties": {"repobilityId": "86fbe64769a6b30a", "scanner": "scanner-primary", "fingerprint": "0b4ad9c5b101129c", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-93cbe9356b385a92", "level": "note", "message": {"text": "Unused endpoint: GET /quota"}, "properties": {"repobilityId": "1971535e13e25d92", "scanner": "scanner-primary", "fingerprint": "93cbe9356b385a92", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-808c0c45b963022d", "level": "note", "message": {"text": "Unused endpoint: POST /quota/check"}, "properties": {"repobilityId": "bc4d6513798be91d", "scanner": "scanner-primary", "fingerprint": "808c0c45b963022d", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-41395ab8527d7206", "level": "note", "message": {"text": "Unused endpoint: POST /group-analysis"}, "properties": {"repobilityId": "85e832d66e0b6b1e", "scanner": "scanner-primary", "fingerprint": "41395ab8527d7206", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-ad8372e840fc3477", "level": "note", "message": {"text": "Unused endpoint: GET /week/:weekNumber"}, "properties": {"repobilityId": "2519a22f590ac0a0", "scanner": "scanner-primary", "fingerprint": "ad8372e840fc3477", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-2c3d1d103b19a7f6", "level": "note", "message": {"text": "Unused endpoint: GET /all"}, "properties": {"repobilityId": "a65e79d6d2fa4da6", "scanner": "scanner-primary", "fingerprint": "2c3d1d103b19a7f6", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-72eb8a13269a8eb3", "level": "note", "message": {"text": "Unused endpoint: GET /active"}, "properties": {"repobilityId": "73cb776c26a6d4eb", "scanner": "scanner-primary", "fingerprint": "72eb8a13269a8eb3", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-ca5756175765b49d", "level": "note", "message": {"text": "Unused endpoint: GET /:id"}, "properties": {"repobilityId": "242c963ebc73f7c3", "scanner": "scanner-primary", "fingerprint": "ca5756175765b49d", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-7776095065496d26", "level": "note", "message": {"text": "Unused endpoint: GET /search/tags"}, "properties": {"repobilityId": "7776f82435e22890", "scanner": "scanner-primary", "fingerprint": "7776095065496d26", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-7a61c112b611f4bb", "level": "note", "message": {"text": "Unused endpoint: DELETE /:id"}, "properties": {"repobilityId": "9d3040483fa51247", "scanner": "scanner-primary", "fingerprint": "7a61c112b611f4bb", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-5fbc954f63526821", "level": "note", "message": {"text": "Unused endpoint: PATCH /:id"}, "properties": {"repobilityId": "156e3570862078a5", "scanner": "scanner-primary", "fingerprint": "5fbc954f63526821", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-7e8374c0c45e45f9", "level": "note", "message": {"text": "Unused endpoint: GET /internal/active-ids/:studyId"}, "properties": {"repobilityId": "712815a343888cfa", "scanner": "scanner-primary", "fingerprint": "7e8374c0c45e45f9", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-7382daa6fc7e05b3", "level": "note", "message": {"text": "Unused endpoint: GET /internal/deadline/:id"}, "properties": {"repobilityId": "309b284ffe59a791", "scanner": "scanner-primary", "fingerprint": "7382daa6fc7e05b3", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-2fd4a01f633e8905", "level": "note", "message": {"text": "Unused endpoint: GET /internal/:id"}, "properties": {"repobilityId": "3386260f4b5a7b93", "scanner": "scanner-primary", "fingerprint": "2fd4a01f633e8905", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-523dbf59d116556f", "level": "note", "message": {"text": "Unused endpoint: GET /api/notifications/by-user/:userId"}, "properties": {"repobilityId": "cdb8e870f78a10ae", "scanner": "scanner-primary", "fingerprint": "523dbf59d116556f", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-25f196b4a695e108", "level": "note", "message": {"text": "Unused endpoint: GET /api/notifications/by-user/:userId/unread-count"}, "properties": {"repobilityId": "ca86e0bf10e24720", "scanner": "scanner-primary", "fingerprint": "25f196b4a695e108", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-d402628df8ec0c6e", "level": "note", "message": {"text": "Unused endpoint: PATCH /api/notifications/:id/read"}, "properties": {"repobilityId": "286fb8ee3e230243", "scanner": "scanner-primary", "fingerprint": "d402628df8ec0c6e", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-48f0457cae8e74b7", "level": "note", "message": {"text": "Unused endpoint: PATCH /api/notifications/by-user/:userId/read-all"}, "properties": {"repobilityId": "728ecb7016f1e4fd", "scanner": "scanner-primary", "fingerprint": "48f0457cae8e74b7", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-6d2efebab60ac321", "level": "note", "message": {"text": "Unused endpoint: DELETE /api/notifications/old"}, "properties": {"repobilityId": "9da59a528ac960f8", "scanner": "scanner-primary", "fingerprint": "6d2efebab60ac321", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-a5349378eed87f95", "level": "note", "message": {"text": "Unused endpoint: DELETE /api/notifications/by-user/:userId"}, "properties": {"repobilityId": "498a6c03b2c68dad", "scanner": "scanner-primary", "fingerprint": "a5349378eed87f95", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-9fac4c69c6aba807", "level": "note", "message": {"text": "Unused endpoint: POST /api/studies"}, "properties": {"repobilityId": "6c705b9a4db3b9c3", "scanner": "scanner-primary", "fingerprint": "9fac4c69c6aba807", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-52bef6129ede2a15", "level": "note", "message": {"text": "Unused endpoint: GET /api/studies/:id"}, "properties": {"repobilityId": "2473dda4b5d545e1", "scanner": "scanner-primary", "fingerprint": "52bef6129ede2a15", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-a2cc96a3e2d57172", "level": "note", "message": {"text": "Unused endpoint: GET /api/studies/by-user/:userId"}, "properties": {"repobilityId": "282a7ab90ba8314b", "scanner": "scanner-primary", "fingerprint": "a2cc96a3e2d57172", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-6d120ccb011bdfda", "level": "note", "message": {"text": "Unused endpoint: PUT /api/studies/:id"}, "properties": {"repobilityId": "58514af2775349bb", "scanner": "scanner-primary", "fingerprint": "6d120ccb011bdfda", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-39c021a299e88874", "level": "note", "message": {"text": "Unused endpoint: DELETE /api/studies/:id"}, "properties": {"repobilityId": "eae91c7cd5fb75d5", "scanner": "scanner-primary", "fingerprint": "39c021a299e88874", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-4be6abad2c7e9fe4", "level": "note", "message": {"text": "Unused endpoint: POST /api/studies/:id/members"}, "properties": {"repobilityId": "52e6c2fd0e9e16d4", "scanner": "scanner-primary", "fingerprint": "4be6abad2c7e9fe4", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-fa2aad31044af42c", "level": "note", "message": {"text": "Unused endpoint: GET /api/studies/:id/members"}, "properties": {"repobilityId": "e450929e4284d2e4", "scanner": "scanner-primary", "fingerprint": "fa2aad31044af42c", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-9c8fddae8be157c2", "level": "note", "message": {"text": "Unused endpoint: GET /api/studies/:id/members/:userId"}, "properties": {"repobilityId": "4a339943d0db401c", "scanner": "scanner-primary", "fingerprint": "9c8fddae8be157c2", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-a6ea8ee7809001d9", "level": "note", "message": {"text": "Unused endpoint: DELETE /api/studies/:id/members/:userId"}, "properties": {"repobilityId": "8fd3adf6c4c40051", "scanner": "scanner-primary", "fingerprint": "a6ea8ee7809001d9", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-7ebad9a80ca68546", "level": "note", "message": {"text": "Unused endpoint: PATCH /api/studies/:id/members/:userId/role"}, "properties": {"repobilityId": "f48971e864c6e771", "scanner": "scanner-primary", "fingerprint": "7ebad9a80ca68546", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-e399f5c864efbccb", "level": "note", "message": {"text": "Unused endpoint: PATCH /api/studies/:id/members/:userId/nickname"}, "properties": {"repobilityId": "3ff559ae5eb72e7f", "scanner": "scanner-primary", "fingerprint": "e399f5c864efbccb", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-099bb91c23920bf2", "level": "note", "message": {"text": "Unused endpoint: POST /api/studies/:id/invites"}, "properties": {"repobilityId": "53790c1daa21ce43", "scanner": "scanner-primary", "fingerprint": "099bb91c23920bf2", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-616916086b1bc506", "level": "note", "message": {"text": "Unused endpoint: GET /api/invites/by-code/:code"}, "properties": {"repobilityId": "08cd4fe1953639c6", "scanner": "scanner-primary", "fingerprint": "616916086b1bc506", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-15c483d457e18d8b", "level": "note", "message": {"text": "Unused endpoint: PATCH /api/invites/:id/consume"}, "properties": {"repobilityId": "7d47361d451c8e34", "scanner": "scanner-primary", "fingerprint": "15c483d457e18d8b", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-d9a1a2c75bdbe1fe", "level": "note", "message": {"text": "Unused endpoint: GET /api/share-links/by-user/:userId/study/:studyId"}, "properties": {"repobilityId": "447a66da645dc546", "scanner": "scanner-primary", "fingerprint": "d9a1a2c75bdbe1fe", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-49a36eddfddadf01", "level": "note", "message": {"text": "Unused endpoint: PATCH /api/share-links/:id/deactivate"}, "properties": {"repobilityId": "908811d5b8ad51eb", "scanner": "scanner-primary", "fingerprint": "49a36eddfddadf01", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-e595e91ba739d9d5", "level": "note", "message": {"text": "Unused endpoint: GET /api/share-links/by-token/:token"}, "properties": {"repobilityId": "06c57c45589f49cc", "scanner": "scanner-primary", "fingerprint": "e595e91ba739d9d5", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-49286e497fd235b1", "level": "note", "message": {"text": "Unused endpoint: POST /api/users/upsert"}, "properties": {"repobilityId": "b54bd3d603d71f90", "scanner": "scanner-primary", "fingerprint": "49286e497fd235b1", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-08126f2af7a6a07a", "level": "note", "message": {"text": "Unused endpoint: GET /api/users/by-slug/:slug"}, "properties": {"repobilityId": "89058edefaf972d6", "scanner": "scanner-primary", "fingerprint": "08126f2af7a6a07a", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-812760b081b9ff1a", "level": "note", "message": {"text": "Unused endpoint: GET /api/users/:id"}, "properties": {"repobilityId": "382cd7422ca57eb6", "scanner": "scanner-primary", "fingerprint": "812760b081b9ff1a", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-78dbe25cdcd00bc0", "level": "note", "message": {"text": "Unused endpoint: PATCH /api/users/:id"}, "properties": {"repobilityId": "b9ce26543ef33135", "scanner": "scanner-primary", "fingerprint": "78dbe25cdcd00bc0", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-2f0a8a9d0faa32d1", "level": "note", "message": {"text": "Unused endpoint: DELETE /api/users/:id"}, "properties": {"repobilityId": "0edcb89d98bd8ea9", "scanner": "scanner-primary", "fingerprint": "2f0a8a9d0faa32d1", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-9f4379d5f5f72126", "level": "note", "message": {"text": "Unused endpoint: PATCH /api/users/:id/github"}, "properties": {"repobilityId": "7d44789b9fd630a5", "scanner": "scanner-primary", "fingerprint": "9f4379d5f5f72126", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-2cd038223d0b5a76", "level": "note", "message": {"text": "Unused endpoint: GET /api/users/:id/github-status"}, "properties": {"repobilityId": "e5cb102e287020d8", "scanner": "scanner-primary", "fingerprint": "2cd038223d0b5a76", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-711bd9b2e6a5c949", "level": "note", "message": {"text": "Unused endpoint: GET /api/users/:id/github-token"}, "properties": {"repobilityId": "36735e7644d109bd", "scanner": "scanner-primary", "fingerprint": "711bd9b2e6a5c949", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-7bbcd63dd47f969e", "level": "note", "message": {"text": "Unused endpoint: GET /api/users/:id/github-encrypted-token"}, "properties": {"repobilityId": "e41154f6a4b17bb2", "scanner": "scanner-primary", "fingerprint": "7bbcd63dd47f969e", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-42d69002dfdefce9", "level": "note", "message": {"text": "Unused endpoint: PATCH /api/users/:id/profile-settings"}, "properties": {"repobilityId": "4a30e744453e0e1b", "scanner": "scanner-primary", "fingerprint": "42d69002dfdefce9", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-a153a76c63e58f53", "level": "note", "message": {"text": "Unused endpoint: GET /api/quiz-records/by-user/:userId"}, "properties": {"repobilityId": "26bba162a39fedf7", "scanner": "scanner-primary", "fingerprint": "a153a76c63e58f53", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-0c860e73ef096a43", "level": "note", "message": {"text": "Unused endpoint: GET /api/feedbacks/by-user/:userId"}, "properties": {"repobilityId": "46a2a08c8a0d334d", "scanner": "scanner-primary", "fingerprint": "0c860e73ef096a43", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-53b76c258b2e7ba5", "level": "note", "message": {"text": "Unused endpoint: GET /api/feedbacks/:publicId/detail"}, "properties": {"repobilityId": "156524ac4858b69e", "scanner": "scanner-primary", "fingerprint": "53b76c258b2e7ba5", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}]}]}