{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-4dfe1c49ec102a10", "name": "Privileged port 6 in use", "shortDescription": {"text": "Privileged port 6 in use"}, "fullDescription": {"text": "Port 6 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-73bf58f153b39cb2", "name": "Privileged port 636 in use", "shortDescription": {"text": "Privileged port 636 in use"}, "fullDescription": {"text": "Port 636 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-31479a517e53741f", "name": "Dockerfile runs as root: packaging/deb/debian-systemd/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: packaging/deb/debian-systemd/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-929c8c9d2af4fb3d", "name": "Docker base image is tag-pinned but not digest-pinned: debian:12", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: debian:12"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ad2725bdd4cd7512", "name": "Dockerfile runs as root: packaging/fpm/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: packaging/fpm/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1375efde4360edd3", "name": "Docker base image is tag-pinned but not digest-pinned: alpine:3.23", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: alpine:3.23"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-af5e745a3af29c99", "name": "Dockerfile runs as root: packaging/rpm/rockylinux-systemd/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: packaging/rpm/rockylinux-systemd/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-615d3dc77fa2d687", "name": "Docker base image is tag-pinned but not digest-pinned: rockylinux:9", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: rockylinux:9"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7f515c222cdd8bc5", "name": "Dockerfile runs as root: build-image/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: build-image/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-113ba57c3e02cca0", "name": "Docker base image is tag-pinned but not digest-pinned: golang:1.26.2-trixie", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: golang:1.26.2-trixie"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2acd2ccf9cc992bb", "name": "Dockerfile pipes a remote installer into a shell", "shortDescription": {"text": "Dockerfile pipes a remote installer into a shell"}, "fullDescription": {"text": "Executing downloaded code during image build gives the remote endpoint build-time code execution. Prefer pinned packages or verify downloaded installers by checksum/signature."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e5153d1da320ae5b", "name": "Dockerfile runs as root: cmd/thanosconvert/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: cmd/thanosconvert/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4ae42dbe07be6e11", "name": "Docker base image is tag-pinned but not digest-pinned: alpine:3.23", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: alpine:3.23"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-96a5839e68891456", "name": "Dockerfile runs as root: cmd/test-exporter/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: cmd/test-exporter/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-949ffdd3a489c68e", "name": "Docker base image is tag-pinned but not digest-pinned: alpine:3.23", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: alpine:3.23"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f559640b42174957", "name": "Dockerfile runs as root: cmd/cortex/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: cmd/cortex/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-24559665e6933f4d", "name": "Docker base image is tag-pinned but not digest-pinned: alpine:3.23", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: alpine:3.23"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f6283107b70d4b78", "name": "Dockerfile runs as root: cmd/query-tee/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: cmd/query-tee/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0f38589eae113966", "name": "Docker base image is tag-pinned but not digest-pinned: alpine:3.23", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: alpine:3.23"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-dc2fa329d6c2b0c0", "name": "Runtime dotenv file present in repo: docs/getting-started/.env", "shortDescription": {"text": "Runtime dotenv file present in repo: docs/getting-started/.env"}, "fullDescription": {"text": "`docs/getting-started/.env` looks like a runtime dotenv file. No high-confidence secret value was matched, but runtime dotenv files often drift into live credentials. Move real values to a secret manager and keep only `.env.example` style templates in source control."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-1b0c993fb9783b1e", "name": "Insecure pattern 'weak_hash' in pkg/ruler/ruler_pagination_test.go:31", "shortDescription": {"text": "Insecure pattern 'weak_hash' in pkg/ruler/ruler_pagination_test.go:31"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-10788c36a4061e82", "name": "Insecure pattern 'private_key_in_repo' in pkg/storage/bucket/client_test.go:42", "shortDescription": {"text": "Insecure pattern 'private_key_in_repo' in pkg/storage/bucket/client_test.go:42"}, "fullDescription": {"text": "Found a known-risky pattern (private_key_in_repo). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-cfb3687c0d467ec6", "name": "Insecure pattern 'weak_hash' in pkg/storage/bucket/s3/config.go:98", "shortDescription": {"text": "Insecure pattern 'weak_hash' in pkg/storage/bucket/s3/config.go:98"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-575fe6e3caf1b5af", "name": "Insecure pattern 'weak_hash' in schemas/cortex-config-schema.json:793", "shortDescription": {"text": "Insecure pattern 'weak_hash' in schemas/cortex-config-schema.json:793"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f3d7c1a5b122c3bd", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-594abf1455d93e7e", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-252b3360f5e47466", "name": "Very large file: pkg/distributed_execution/querierpb/querier.pb.go (2551 lines)", "shortDescription": {"text": "Very large file: pkg/distributed_execution/querierpb/querier.pb.go (2551 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bc24f364c01ab496", "name": "Very large file: pkg/ring/ring_test.go (3477 lines)", "shortDescription": {"text": "Very large file: pkg/ring/ring_test.go (3477 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e3a6d57ada9f0561", "name": "Very large file: pkg/ring/kv/memberlist/memberlist_client_test.go (1976 lines)", "shortDescription": {"text": "Very large file: pkg/ring/kv/memberlist/memberlist_client_test.go (1976 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9dbaa86539ce36d1", "name": "Very large file: pkg/ring/kv/memberlist/memberlist_client.go (1528 lines)", "shortDescription": {"text": "Very large file: pkg/ring/kv/memberlist/memberlist_client.go (1528 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-63eb24cb4bfebce5", "name": "Very large file: pkg/ruler/ruler.pb.go (3470 lines)", "shortDescription": {"text": "Very large file: pkg/ruler/ruler.pb.go (3470 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0f06c8b369d71ee9", "name": "Very large file: pkg/ruler/ruler_test.go (3458 lines)", "shortDescription": {"text": "Very large file: pkg/ruler/ruler_test.go (3458 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2947acac4308e00e", "name": "Very large file: pkg/ruler/ruler.go (1782 lines)", "shortDescription": {"text": "Very large file: pkg/ruler/ruler.go (1782 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-84a17286b1ab2901", "name": "Very large file: pkg/util/metrics_helper_test.go (1604 lines)", "shortDescription": {"text": "Very large file: pkg/util/metrics_helper_test.go (1604 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b7d71c6882485e95", "name": "Very large file: pkg/util/validation/limits.go (1399 lines)", "shortDescription": {"text": "Very large file: pkg/util/validation/limits.go (1399 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b926b445b42d1206", "name": "Very large file: pkg/alertmanager/multitenant_test.go (2600 lines)", "shortDescription": {"text": "Very large file: pkg/alertmanager/multitenant_test.go (2600 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5b5c1d20dc6ab9d7", "name": "Very large file: pkg/alertmanager/alertmanager_metrics_test.go (1276 lines)", "shortDescription": {"text": "Very large file: pkg/alertmanager/alertmanager_metrics_test.go (1276 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-81030175bec61b20", "name": "Very large file: pkg/alertmanager/multitenant.go (1337 lines)", "shortDescription": {"text": "Very large file: pkg/alertmanager/multitenant.go (1337 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e8b6a44f609e63ad", "name": "Very large file: pkg/cortexpb/cortex.pb.go (7225 lines)", "shortDescription": {"text": "Very large file: pkg/cortexpb/cortex.pb.go (7225 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9bd15582e2bb2731", "name": "Very large file: pkg/storegateway/bucket_store_metrics_test.go (988 lines)", "shortDescription": {"text": "Very large file: pkg/storegateway/bucket_store_metrics_test.go (988 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7b93685b23ccbd13", "name": "Very large file: pkg/storegateway/gateway_test.go (1400 lines)", "shortDescription": {"text": "Very large file: pkg/storegateway/gateway_test.go (1400 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4a408ec2e80a9e34", "name": "Very large file: pkg/querier/querier_test.go (2027 lines)", "shortDescription": {"text": "Very large file: pkg/querier/querier_test.go (2027 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-911ae09a090e36dc", "name": "Very large file: pkg/querier/blocks_store_queryable_test.go (3192 lines)", "shortDescription": {"text": "Very large file: pkg/querier/blocks_store_queryable_test.go (3192 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-faf4ef3230f4d2b1", "name": "Very large file: pkg/querier/tenantfederation/merge_queryable_test.go (1349 lines)", "shortDescription": {"text": "Very large file: pkg/querier/tenantfederation/merge_queryable_test.go (1349 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ddccfd45d5544327", "name": "Very large file: pkg/querier/tripperware/query.pb.go (5666 lines)", "shortDescription": {"text": "Very large file: pkg/querier/tripperware/query.pb.go (5666 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cfaa82e72a072f86", "name": "Very large file: pkg/querier/tripperware/instantquery/instant_query_test.go (1941 lines)", "shortDescription": {"text": "Very large file: pkg/querier/tripperware/instantquery/instant_query_test.go (1941 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bb08a93456c70286", "name": "Very large file: pkg/querier/tripperware/queryrange/results_cache_test.go (2221 lines)", "shortDescription": {"text": "Very large file: pkg/querier/tripperware/queryrange/results_cache_test.go (2221 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-45e30afadcb87937", "name": "Very large file: pkg/compactor/compactor_test.go (2476 lines)", "shortDescription": {"text": "Very large file: pkg/compactor/compactor_test.go (2476 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-adca26b321451154", "name": "Very large file: pkg/compactor/partition_compaction_grouper_test.go (2296 lines)", "shortDescription": {"text": "Very large file: pkg/compactor/partition_compaction_grouper_test.go (2296 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ef662f0580aea182", "name": "Very large file: pkg/compactor/blocks_cleaner_test.go (1392 lines)", "shortDescription": {"text": "Very large file: pkg/compactor/blocks_cleaner_test.go (1392 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0fbe49dd0fe5ce40", "name": "Very large file: pkg/compactor/compactor.go (1333 lines)", "shortDescription": {"text": "Very large file: pkg/compactor/compactor.go (1333 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f7135860de87f0ed", "name": "Very large file: pkg/compactor/compactor_paritioning_test.go (2006 lines)", "shortDescription": {"text": "Very large file: pkg/compactor/compactor_paritioning_test.go (2006 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d09a0ee3179cb6bd", "name": "Very large file: pkg/distributor/distributor_test.go (4973 lines)", "shortDescription": {"text": "Very large file: pkg/distributor/distributor_test.go (4973 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a60794a65dfbb469", "name": "Very large file: pkg/distributor/distributor.go (1820 lines)", "shortDescription": {"text": "Very large file: pkg/distributor/distributor.go (1820 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8beedb0fb9a3048e", "name": "Very large file: pkg/ingester/ingester_test.go (8115 lines)", "shortDescription": {"text": "Very large file: pkg/ingester/ingester_test.go (8115 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-de19dfc3c1746bca", "name": "Very large file: pkg/ingester/ingester.go (3993 lines)", "shortDescription": {"text": "Very large file: pkg/ingester/ingester.go (3993 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8c2eabdbbb5d096c", "name": "Very large file: pkg/ingester/metrics_test.go (1268 lines)", "shortDescription": {"text": "Very large file: pkg/ingester/metrics_test.go (1268 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ace6bb3b91d96ae8", "name": "Very large file: pkg/ingester/client/ingester.pb.go (8646 lines)", "shortDescription": {"text": "Very large file: pkg/ingester/client/ingester.pb.go (8646 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-39fb165ea9a10efc", "name": "Very large file: pkg/scheduler/schedulerpb/scheduler.pb.go (2655 lines)", "shortDescription": {"text": "Very large file: pkg/scheduler/schedulerpb/scheduler.pb.go (2655 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0a8bbdac0a229742", "name": "Very large file: integration/ruler_test.go (1889 lines)", "shortDescription": {"text": "Very large file: integration/ruler_test.go (1889 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-80635656efe85abd", "name": "Very large file: integration/query_fuzz_test.go (2328 lines)", "shortDescription": {"text": "Very large file: integration/query_fuzz_test.go (2328 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c1c50b392d6630c3", "name": "46 TODO/FIXME markers", "shortDescription": {"text": "46 TODO/FIXME markers"}, "fullDescription": {"text": "High count of TODO/FIXME/HACK markers \u2014 track them as issues so they're not forgotten."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-72b2a6250083a784", "name": "Placeholder or mock-heavy implementation detected", "shortDescription": {"text": "Placeholder or mock-heavy implementation detected"}, "fullDescription": {"text": "Found 826 placeholder/mock markers across 101 source files. This often means the repo looks complete while core flows still use generated scaffolding or fake data."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2d0c7b7ab8f8aacf", "name": "Critical user flow still appears backed by mock or placeholder data", "shortDescription": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "fullDescription": {"text": "A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/25095"}, "properties": {"repository": "cortexproject/cortex", "repoUrl": "https://github.com/cortexproject/cortex", "branch": "main"}, "results": [{"ruleId": "scanner-4dfe1c49ec102a10", "level": "warning", "message": {"text": "Privileged port 6 in use"}, "properties": {"repobilityId": "888a3c205ea7334c", "scanner": "scanner-primary", "fingerprint": "4dfe1c49ec102a10", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/query-audit/example-config.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-73bf58f153b39cb2", "level": "warning", "message": {"text": "Privileged port 636 in use"}, "properties": {"repobilityId": "75eec1c07d535674", "scanner": "scanner-primary", "fingerprint": "73bf58f153b39cb2", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/getting-started/grafana-values.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-31479a517e53741f", "level": "warning", "message": {"text": "Dockerfile runs as root: packaging/deb/debian-systemd/Dockerfile"}, "properties": {"repobilityId": "cbf37b866bdb0a32", "scanner": "scanner-primary", "fingerprint": "31479a517e53741f", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-929c8c9d2af4fb3d", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: debian:12"}, "properties": {"repobilityId": "1584b80b043bb8a1", "scanner": "scanner-primary", "fingerprint": "929c8c9d2af4fb3d", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packaging/deb/debian-systemd/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ad2725bdd4cd7512", "level": "warning", "message": {"text": "Dockerfile runs as root: packaging/fpm/Dockerfile"}, "properties": {"repobilityId": "549c573707ce4372", "scanner": "scanner-primary", "fingerprint": "ad2725bdd4cd7512", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-1375efde4360edd3", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: alpine:3.23"}, "properties": {"repobilityId": "d89225e6884fc897", "scanner": "scanner-primary", "fingerprint": "1375efde4360edd3", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packaging/fpm/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-af5e745a3af29c99", "level": "warning", "message": {"text": "Dockerfile runs as root: packaging/rpm/rockylinux-systemd/Dockerfile"}, "properties": {"repobilityId": "9632b630e0ef2434", "scanner": "scanner-primary", "fingerprint": "af5e745a3af29c99", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-615d3dc77fa2d687", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: rockylinux:9"}, "properties": {"repobilityId": "c61b2c37b9c66f86", "scanner": "scanner-primary", "fingerprint": "615d3dc77fa2d687", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packaging/rpm/rockylinux-systemd/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7f515c222cdd8bc5", "level": "warning", "message": {"text": "Dockerfile runs as root: build-image/Dockerfile"}, "properties": {"repobilityId": "704678cce3ca6a81", "scanner": "scanner-primary", "fingerprint": "7f515c222cdd8bc5", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-113ba57c3e02cca0", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: golang:1.26.2-trixie"}, "properties": {"repobilityId": "c1c8c195c08a1fe7", "scanner": "scanner-primary", "fingerprint": "113ba57c3e02cca0", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "build-image/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2acd2ccf9cc992bb", "level": "error", "message": {"text": "Dockerfile pipes a remote installer into a shell"}, "properties": {"repobilityId": "da6da1514f5ad046", "scanner": "scanner-primary", "fingerprint": "2acd2ccf9cc992bb", "layer": "hardware", "severity": "high", "confidence": 1.0, "tags": ["supply-chain", "docker", "remote-installer"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "build-image/Dockerfile"}, "region": {"startLine": 19}}}]}, {"ruleId": "scanner-e5153d1da320ae5b", "level": "warning", "message": {"text": "Dockerfile runs as root: cmd/thanosconvert/Dockerfile"}, "properties": {"repobilityId": "2cdf127fbe9873d4", "scanner": "scanner-primary", "fingerprint": "e5153d1da320ae5b", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-4ae42dbe07be6e11", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: alpine:3.23"}, "properties": {"repobilityId": "1bc9669e0cf09b65", "scanner": "scanner-primary", "fingerprint": "4ae42dbe07be6e11", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cmd/thanosconvert/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-96a5839e68891456", "level": "warning", "message": {"text": "Dockerfile runs as root: cmd/test-exporter/Dockerfile"}, "properties": {"repobilityId": "da04104a125f4626", "scanner": "scanner-primary", "fingerprint": "96a5839e68891456", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-949ffdd3a489c68e", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: alpine:3.23"}, "properties": {"repobilityId": "b647c6171e0f85c3", "scanner": "scanner-primary", "fingerprint": "949ffdd3a489c68e", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cmd/test-exporter/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f559640b42174957", "level": "warning", "message": {"text": "Dockerfile runs as root: cmd/cortex/Dockerfile"}, "properties": {"repobilityId": "f37fce0878791ea8", "scanner": "scanner-primary", "fingerprint": "f559640b42174957", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-24559665e6933f4d", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: alpine:3.23"}, "properties": {"repobilityId": "12cc0966a3faf69c", "scanner": "scanner-primary", "fingerprint": "24559665e6933f4d", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cmd/cortex/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f6283107b70d4b78", "level": "warning", "message": {"text": "Dockerfile runs as root: cmd/query-tee/Dockerfile"}, "properties": {"repobilityId": "b9dd13a1d4d5c8b5", "scanner": "scanner-primary", "fingerprint": "f6283107b70d4b78", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-0f38589eae113966", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: alpine:3.23"}, "properties": {"repobilityId": "8879b6d9a3ff8fa6", "scanner": "scanner-primary", "fingerprint": "0f38589eae113966", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cmd/query-tee/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-dc2fa329d6c2b0c0", "level": "error", "message": {"text": "Runtime dotenv file present in repo: docs/getting-started/.env"}, "properties": {"repobilityId": "d10db7c5af22b2f3", "scanner": "scanner-primary", "fingerprint": "dc2fa329d6c2b0c0", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["secrets", "config", "env-file", "runtime-env"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/getting-started/.env"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1b0c993fb9783b1e", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in pkg/ruler/ruler_pagination_test.go:31"}, "properties": {"repobilityId": "be57fc3212689ceb", "scanner": "scanner-primary", "fingerprint": "1b0c993fb9783b1e", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/ruler/ruler_pagination_test.go"}, "region": {"startLine": 31}}}]}, {"ruleId": "scanner-10788c36a4061e82", "level": "error", "message": {"text": "Insecure pattern 'private_key_in_repo' in pkg/storage/bucket/client_test.go:42"}, "properties": {"repobilityId": "c656ed7bec11b792", "scanner": "scanner-primary", "fingerprint": "10788c36a4061e82", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["owasp", "private_key_in_repo"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/storage/bucket/client_test.go"}, "region": {"startLine": 42}}}]}, {"ruleId": "scanner-cfb3687c0d467ec6", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in pkg/storage/bucket/s3/config.go:98"}, "properties": {"repobilityId": "9be16228f40f3be7", "scanner": "scanner-primary", "fingerprint": "cfb3687c0d467ec6", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/storage/bucket/s3/config.go"}, "region": {"startLine": 98}}}]}, {"ruleId": "scanner-575fe6e3caf1b5af", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in schemas/cortex-config-schema.json:793"}, "properties": {"repobilityId": "dad1db1e50550ad3", "scanner": "scanner-primary", "fingerprint": "575fe6e3caf1b5af", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "schemas/cortex-config-schema.json"}, "region": {"startLine": 793}}}]}, {"ruleId": "scanner-f3d7c1a5b122c3bd", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "699eac9660609446", "scanner": "scanner-primary", "fingerprint": "f3d7c1a5b122c3bd", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/scorecards.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-594abf1455d93e7e", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "d51dcf0831511d16", "scanner": "scanner-primary", "fingerprint": "594abf1455d93e7e", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/web.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-252b3360f5e47466", "level": "note", "message": {"text": "Very large file: pkg/distributed_execution/querierpb/querier.pb.go (2551 lines)"}, "properties": {"repobilityId": "dd2d786c628a3b70", "scanner": "scanner-primary", "fingerprint": "252b3360f5e47466", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-bc24f364c01ab496", "level": "note", "message": {"text": "Very large file: pkg/ring/ring_test.go (3477 lines)"}, "properties": {"repobilityId": "9e7ef0cde687f9a7", "scanner": "scanner-primary", "fingerprint": "bc24f364c01ab496", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-e3a6d57ada9f0561", "level": "note", "message": {"text": "Very large file: pkg/ring/kv/memberlist/memberlist_client_test.go (1976 lines)"}, "properties": {"repobilityId": "2cc72cc277f88062", "scanner": "scanner-primary", "fingerprint": "e3a6d57ada9f0561", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-9dbaa86539ce36d1", "level": "note", "message": {"text": "Very large file: pkg/ring/kv/memberlist/memberlist_client.go (1528 lines)"}, "properties": {"repobilityId": "49add5e7ca00ea88", "scanner": "scanner-primary", "fingerprint": "9dbaa86539ce36d1", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-63eb24cb4bfebce5", "level": "note", "message": {"text": "Very large file: pkg/ruler/ruler.pb.go (3470 lines)"}, "properties": {"repobilityId": "43a51cb5b1028e0b", "scanner": "scanner-primary", "fingerprint": "63eb24cb4bfebce5", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-0f06c8b369d71ee9", "level": "note", "message": {"text": "Very large file: pkg/ruler/ruler_test.go (3458 lines)"}, "properties": {"repobilityId": "651c98040d202908", "scanner": "scanner-primary", "fingerprint": "0f06c8b369d71ee9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-2947acac4308e00e", "level": "note", "message": {"text": "Very large file: pkg/ruler/ruler.go (1782 lines)"}, "properties": {"repobilityId": "b485223f8ab473b2", "scanner": "scanner-primary", "fingerprint": "2947acac4308e00e", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-84a17286b1ab2901", "level": "note", "message": {"text": "Very large file: pkg/util/metrics_helper_test.go (1604 lines)"}, "properties": {"repobilityId": "0777206c52856138", "scanner": "scanner-primary", "fingerprint": "84a17286b1ab2901", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-b7d71c6882485e95", "level": "note", "message": {"text": "Very large file: pkg/util/validation/limits.go (1399 lines)"}, "properties": {"repobilityId": "62af46ab98787f70", "scanner": "scanner-primary", "fingerprint": "b7d71c6882485e95", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-b926b445b42d1206", "level": "note", "message": {"text": "Very large file: pkg/alertmanager/multitenant_test.go (2600 lines)"}, "properties": {"repobilityId": "dd3164bc5179d14a", "scanner": "scanner-primary", "fingerprint": "b926b445b42d1206", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-5b5c1d20dc6ab9d7", "level": "note", "message": {"text": "Very large file: pkg/alertmanager/alertmanager_metrics_test.go (1276 lines)"}, "properties": {"repobilityId": "f45b1c2077cb83b1", "scanner": "scanner-primary", "fingerprint": "5b5c1d20dc6ab9d7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-81030175bec61b20", "level": "note", "message": {"text": "Very large file: pkg/alertmanager/multitenant.go (1337 lines)"}, "properties": {"repobilityId": "893992563adf934b", "scanner": "scanner-primary", "fingerprint": "81030175bec61b20", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-e8b6a44f609e63ad", "level": "note", "message": {"text": "Very large file: pkg/cortexpb/cortex.pb.go (7225 lines)"}, "properties": {"repobilityId": "75e4c50530b183b8", "scanner": "scanner-primary", "fingerprint": "e8b6a44f609e63ad", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-9bd15582e2bb2731", "level": "note", "message": {"text": "Very large file: pkg/storegateway/bucket_store_metrics_test.go (988 lines)"}, "properties": {"repobilityId": "0185cfa4dcb60833", "scanner": "scanner-primary", "fingerprint": "9bd15582e2bb2731", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-7b93685b23ccbd13", "level": "note", "message": {"text": "Very large file: pkg/storegateway/gateway_test.go (1400 lines)"}, "properties": {"repobilityId": "10a657e63d37c51b", "scanner": "scanner-primary", "fingerprint": "7b93685b23ccbd13", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-4a408ec2e80a9e34", "level": "note", "message": {"text": "Very large file: pkg/querier/querier_test.go (2027 lines)"}, "properties": {"repobilityId": "db4977dc4957b0b8", "scanner": "scanner-primary", "fingerprint": "4a408ec2e80a9e34", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-911ae09a090e36dc", "level": "note", "message": {"text": "Very large file: pkg/querier/blocks_store_queryable_test.go (3192 lines)"}, "properties": {"repobilityId": "9f144d9cbdf4f18b", "scanner": "scanner-primary", "fingerprint": "911ae09a090e36dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-faf4ef3230f4d2b1", "level": "note", "message": {"text": "Very large file: pkg/querier/tenantfederation/merge_queryable_test.go (1349 lines)"}, "properties": {"repobilityId": "74cee0d32d8d2476", "scanner": "scanner-primary", "fingerprint": "faf4ef3230f4d2b1", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-ddccfd45d5544327", "level": "note", "message": {"text": "Very large file: pkg/querier/tripperware/query.pb.go (5666 lines)"}, "properties": {"repobilityId": "57adcef2a58ffc80", "scanner": "scanner-primary", "fingerprint": "ddccfd45d5544327", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-cfaa82e72a072f86", "level": "note", "message": {"text": "Very large file: pkg/querier/tripperware/instantquery/instant_query_test.go (1941 lines)"}, "properties": {"repobilityId": "a207d5242cbb29f9", "scanner": "scanner-primary", "fingerprint": "cfaa82e72a072f86", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-bb08a93456c70286", "level": "note", "message": {"text": "Very large file: pkg/querier/tripperware/queryrange/results_cache_test.go (2221 lines)"}, "properties": {"repobilityId": "dfd0ace934e3f183", "scanner": "scanner-primary", "fingerprint": "bb08a93456c70286", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-45e30afadcb87937", "level": "note", "message": {"text": "Very large file: pkg/compactor/compactor_test.go (2476 lines)"}, "properties": {"repobilityId": "8b73cea1a78e0667", "scanner": "scanner-primary", "fingerprint": "45e30afadcb87937", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-adca26b321451154", "level": "note", "message": {"text": "Very large file: pkg/compactor/partition_compaction_grouper_test.go (2296 lines)"}, "properties": {"repobilityId": "ec15a6607a23aed5", "scanner": "scanner-primary", "fingerprint": "adca26b321451154", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-ef662f0580aea182", "level": "note", "message": {"text": "Very large file: pkg/compactor/blocks_cleaner_test.go (1392 lines)"}, "properties": {"repobilityId": "783cee9821117231", "scanner": "scanner-primary", "fingerprint": "ef662f0580aea182", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-0fbe49dd0fe5ce40", "level": "note", "message": {"text": "Very large file: pkg/compactor/compactor.go (1333 lines)"}, "properties": {"repobilityId": "4eb1a9c4dd7ae876", "scanner": "scanner-primary", "fingerprint": "0fbe49dd0fe5ce40", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-f7135860de87f0ed", "level": "note", "message": {"text": "Very large file: pkg/compactor/compactor_paritioning_test.go (2006 lines)"}, "properties": {"repobilityId": "0c6a48ea289d9f6e", "scanner": "scanner-primary", "fingerprint": "f7135860de87f0ed", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-d09a0ee3179cb6bd", "level": "note", "message": {"text": "Very large file: pkg/distributor/distributor_test.go (4973 lines)"}, "properties": {"repobilityId": "fbae0bb56e5f4814", "scanner": "scanner-primary", "fingerprint": "d09a0ee3179cb6bd", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-a60794a65dfbb469", "level": "note", "message": {"text": "Very large file: pkg/distributor/distributor.go (1820 lines)"}, "properties": {"repobilityId": "273814f5440ac3cb", "scanner": "scanner-primary", "fingerprint": "a60794a65dfbb469", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-8beedb0fb9a3048e", "level": "note", "message": {"text": "Very large file: pkg/ingester/ingester_test.go (8115 lines)"}, "properties": {"repobilityId": "757f6151e96c44b8", "scanner": "scanner-primary", "fingerprint": "8beedb0fb9a3048e", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-de19dfc3c1746bca", "level": "note", "message": {"text": "Very large file: pkg/ingester/ingester.go (3993 lines)"}, "properties": {"repobilityId": "ddbddeb774cc9118", "scanner": "scanner-primary", "fingerprint": "de19dfc3c1746bca", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-8c2eabdbbb5d096c", "level": "note", "message": {"text": "Very large file: pkg/ingester/metrics_test.go (1268 lines)"}, "properties": {"repobilityId": "c5cfd58724b1e870", "scanner": "scanner-primary", "fingerprint": "8c2eabdbbb5d096c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-ace6bb3b91d96ae8", "level": "note", "message": {"text": "Very large file: pkg/ingester/client/ingester.pb.go (8646 lines)"}, "properties": {"repobilityId": "f9e202b70b504863", "scanner": "scanner-primary", "fingerprint": "ace6bb3b91d96ae8", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-39fb165ea9a10efc", "level": "note", "message": {"text": "Very large file: pkg/scheduler/schedulerpb/scheduler.pb.go (2655 lines)"}, "properties": {"repobilityId": "39f6fa11e2c4a890", "scanner": "scanner-primary", "fingerprint": "39fb165ea9a10efc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-0a8bbdac0a229742", "level": "note", "message": {"text": "Very large file: integration/ruler_test.go (1889 lines)"}, "properties": {"repobilityId": "a2809e8a7cd05a5f", "scanner": "scanner-primary", "fingerprint": "0a8bbdac0a229742", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-80635656efe85abd", "level": "note", "message": {"text": "Very large file: integration/query_fuzz_test.go (2328 lines)"}, "properties": {"repobilityId": "4375e25c9a81e282", "scanner": "scanner-primary", "fingerprint": "80635656efe85abd", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-c1c50b392d6630c3", "level": "note", "message": {"text": "46 TODO/FIXME markers"}, "properties": {"repobilityId": "4b38c118003e07d2", "scanner": "scanner-primary", "fingerprint": "c1c50b392d6630c3", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["maintenance"]}}, {"ruleId": "scanner-72b2a6250083a784", "level": "warning", "message": {"text": "Placeholder or mock-heavy implementation detected"}, "properties": {"repobilityId": "ca394bc9aea027a1", "scanner": "scanner-primary", "fingerprint": "72b2a6250083a784", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "incomplete", "generated-repo-pattern"]}}, {"ruleId": "scanner-2d0c7b7ab8f8aacf", "level": "warning", "message": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "properties": {"repobilityId": "194633f273637731", "scanner": "scanner-primary", "fingerprint": "2d0c7b7ab8f8aacf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "critical-flow", "generated-repo-pattern"]}}]}]}