{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-61ae6465cbea16c5", "name": "Runtime dotenv file present in repo: frontend/.env.development", "shortDescription": {"text": "Runtime dotenv file present in repo: frontend/.env.development"}, "fullDescription": {"text": "`frontend/.env.development` looks like a runtime dotenv file. No high-confidence secret value was matched, but runtime dotenv files often drift into live credentials. Move real values to a secret manager and keep only `.env.example` style templates in source control."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a399389f5f17b106", "name": "Runtime dotenv file present in repo: frontend/.env.production", "shortDescription": {"text": "Runtime dotenv file present in repo: frontend/.env.production"}, "fullDescription": {"text": "`frontend/.env.production` looks like a runtime dotenv file. No high-confidence secret value was matched, but runtime dotenv files often drift into live credentials. Move real values to a secret manager and keep only `.env.example` style templates in source control."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-882e8ab556bd75a2", "name": "Possible secret in frontend/src/lang/ja_JP.js", "shortDescription": {"text": "Possible secret in frontend/src/lang/ja_JP.js"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-6a1a0808f6dc4970", "name": "Possible secret in frontend/src/lang/en.js", "shortDescription": {"text": "Possible secret in frontend/src/lang/en.js"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-0793eb0025d27f94", "name": "Possible secret in frontend/src/lang/ko_KR.js", "shortDescription": {"text": "Possible secret in frontend/src/lang/ko_KR.js"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-771a84af2180effe", "name": "Possible secret in frontend/src/lang/zh_TW.js", "shortDescription": {"text": "Possible secret in frontend/src/lang/zh_TW.js"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-7cd3f3fcfe2716e4", "name": "Possible secret in frontend/src/lang/zh_CN.js", "shortDescription": {"text": "Possible secret in frontend/src/lang/zh_CN.js"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-9d4cd0b6d979c620", "name": "Possible secret in infra/keycloak/themes/access-matrix/login/resources/js/login.js", "shortDescription": {"text": "Possible secret in infra/keycloak/themes/access-matrix/login/resources/js/login.js"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-30201625ec685188", "name": "Insecure pattern 'direct_innerhtml_assignment' in infra/keycloak/themes/access-matrix/login/resources/js/login.js:218", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in infra/keycloak/themes/access-matrix/login/resources/js/login.js:218"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c4f127f7c03360a4", "name": "Possible secret in backend/core-system/src/main/java/com/platform/system/security/SystemPermissions.java", "shortDescription": {"text": "Possible secret in backend/core-system/src/main/java/com/platform/system/security/SystemPermissions.java"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-d2a4058e3be8ce89", "name": "Possible secret in backend/core-bootstrap/src/test/java/com/platform/core/bootstrap/it/OidcJitProvisioningIT.java", "shortDescription": {"text": "Possible secret in backend/core-bootstrap/src/test/java/com/platform/core/bootstrap/it/OidcJitProvisioningIT.java"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-86535f301178ea64", "name": "Possible secret in backend/business-demo/src/main/java/com/platform/business/demo/startup/DemoSeeder.java", "shortDescription": {"text": "Possible secret in backend/business-demo/src/main/java/com/platform/business/demo/startup/DemoSeeder.java"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-65141922bbebdb19", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/setup-java@v5 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-65c9bd56493a81d3", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/setup-java@v5 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-548bfbab350dca45", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/setup-node@v5 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3080d0bc92a4d39d", "name": "Very large file: frontend/src/lang/ja_JP.js (1135 lines)", "shortDescription": {"text": "Very large file: frontend/src/lang/ja_JP.js (1135 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ea3b5e389d8c9c0f", "name": "Low test-to-source ratio", "shortDescription": {"text": "Low test-to-source ratio"}, "fullDescription": {"text": "14 tests / 63 src (ratio 0.22)."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3ab5d313dda8e5f9", "name": "Debug logging residue appears in source files", "shortDescription": {"text": "Debug logging residue appears in source files"}, "fullDescription": {"text": "Found 20 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-72b2a6250083a784", "name": "Placeholder or mock-heavy implementation detected", "shortDescription": {"text": "Placeholder or mock-heavy implementation detected"}, "fullDescription": {"text": "Found 100 placeholder/mock markers across 14 source files. This often means the repo looks complete while core flows still use generated scaffolding or fake data."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9d79c4077342a7d0", "name": "Runtime service client appears to use placeholder configuration", "shortDescription": {"text": "Runtime service client appears to use placeholder configuration"}, "fullDescription": {"text": "A runtime source file appears to wire Supabase/Firebase/AI/payment-style clients to placeholder URLs, keys, or fallback values. In the Fable corpus this often means the UI/API shape is present while the backend service is not actually configured."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2d0c7b7ab8f8aacf", "name": "Critical user flow still appears backed by mock or placeholder data", "shortDescription": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "fullDescription": {"text": "A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ea8f3013f588db25", "name": "Shallow git history limits provenance confidence", "shortDescription": {"text": "Shallow git history limits provenance confidence"}, "fullDescription": {"text": "The repository is a shallow clone. Origin/evolution analysis cannot distinguish fresh generation, imported legacy code, or long-lived human code with high confidence."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8424db9c75e04ba4", "name": "Very short observed git history", "shortDescription": {"text": "Very short observed git history"}, "fullDescription": {"text": "The repo has multiple source files but two or fewer visible commits. This is not a failure by itself, but it lowers confidence in evolution-based diagnosis."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b0fe3ea6a5e87cb7", "name": "Commented-code block (5 lines) in frontend/tests/e2e/force-delete-role.spec.js:50", "shortDescription": {"text": "Commented-code block (5 lines) in frontend/tests/e2e/force-delete-role.spec.js:50"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-4d5b74ea7027e43b", "name": "`fetch()` without try/.catch or AbortSignal \u2014 frontend/scripts/dashboard/verify-agg-vs-direct.mjs:32", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 frontend/scripts/dashboard/verify-agg-vs-direct.mjs:32"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fa269cbf94cc15aa", "name": "Commented-code block (6 lines) in frontend/src/main.js:12", "shortDescription": {"text": "Commented-code block (6 lines) in frontend/src/main.js:12"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-bd507a22115195bb", "name": "Commented-code block (5 lines) in frontend/src/router/index.js:108", "shortDescription": {"text": "Commented-code block (5 lines) in frontend/src/router/index.js:108"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-038fc9c23b22fd9c", "name": "Commented-code block (6 lines) in frontend/src/stores/auth.js:90", "shortDescription": {"text": "Commented-code block (6 lines) in frontend/src/stores/auth.js:90"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-9905758098f5c50b", "name": "Commented-code block (5 lines) in frontend/src/utils/tenant.test.js:4", "shortDescription": {"text": "Commented-code block (5 lines) in frontend/src/utils/tenant.test.js:4"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1361a7be077e6a7c", "name": "Commented-code block (7 lines) in frontend/src/utils/oidc.js:226", "shortDescription": {"text": "Commented-code block (7 lines) in frontend/src/utils/oidc.js:226"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-67e7aaaa934fb3d9", "name": "Commented-code block (5 lines) in frontend/src/services/request.js:73", "shortDescription": {"text": "Commented-code block (5 lines) in frontend/src/services/request.js:73"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-23704ad62dd9d3aa", "name": "Commented-code block (7 lines) in infra/keycloak/themes/access-matrix/login/resources/js/login.js:27", "shortDescription": {"text": "Commented-code block (7 lines) in infra/keycloak/themes/access-matrix/login/resources/js/login.js:27"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ecec737e8ff0238c", "name": "`fetch()` without try/.catch or AbortSignal \u2014 infra/keycloak/themes/access-matrix/login/resources/js/login.js:385", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 infra/keycloak/themes/access-matrix/login/resources/js/login.js:385"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b334d875f2339fa1", "name": "5 env vars used in code but missing from .env.example", "shortDescription": {"text": "5 env vars used in code but missing from .env.example"}, "fullDescription": {"text": "Drift between code and config docs. The first few: `CI`, `DASHBOARD_API_BASE`, `DASHBOARD_TOKEN`, `E2E_BASE_URL`, `VITE_DEFAULT_TIMEZONE`. Add them (with a placeholder/comment) to .env.example so onboarding doesn't break."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/23504"}, "properties": {"repository": "Z-wwwwww/access-matrix", "repoUrl": "https://github.com/Z-wwwwww/access-matrix", "branch": "main"}, "results": [{"ruleId": "scanner-61ae6465cbea16c5", "level": "error", "message": {"text": "Runtime dotenv file present in repo: frontend/.env.development"}, "properties": {"repobilityId": "85995dca4d2ac4b9", "scanner": "scanner-primary", "fingerprint": "61ae6465cbea16c5", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["secrets", "config", "env-file", "runtime-env"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/.env.development"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a399389f5f17b106", "level": "error", "message": {"text": "Runtime dotenv file present in repo: frontend/.env.production"}, "properties": {"repobilityId": "f727d22a89e309c5", "scanner": "scanner-primary", "fingerprint": "a399389f5f17b106", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["secrets", "config", "env-file", "runtime-env"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/.env.production"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-882e8ab556bd75a2", "level": "error", "message": {"text": "Possible secret in frontend/src/lang/ja_JP.js"}, "properties": {"repobilityId": "0db6ad498da334a3", "scanner": "scanner-primary", "fingerprint": "882e8ab556bd75a2", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/src/lang/ja_JP.js"}, "region": {"startLine": 176}}}]}, {"ruleId": "scanner-882e8ab556bd75a2", "level": "error", "message": {"text": "Possible secret in frontend/src/lang/ja_JP.js"}, "properties": {"repobilityId": "0db6ad498da334a3", "scanner": "scanner-primary", "fingerprint": "882e8ab556bd75a2", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/src/lang/ja_JP.js"}, "region": {"startLine": 215}}}]}, {"ruleId": "scanner-882e8ab556bd75a2", "level": "error", "message": {"text": "Possible secret in frontend/src/lang/ja_JP.js"}, "properties": {"repobilityId": "0db6ad498da334a3", "scanner": "scanner-primary", "fingerprint": "882e8ab556bd75a2", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/src/lang/ja_JP.js"}, "region": {"startLine": 233}}}]}, {"ruleId": "scanner-882e8ab556bd75a2", "level": "error", "message": {"text": "Possible secret in frontend/src/lang/ja_JP.js"}, "properties": {"repobilityId": "0db6ad498da334a3", "scanner": "scanner-primary", "fingerprint": "882e8ab556bd75a2", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/src/lang/ja_JP.js"}, "region": {"startLine": 292}}}]}, {"ruleId": "scanner-882e8ab556bd75a2", "level": "error", "message": {"text": "Possible secret in frontend/src/lang/ja_JP.js"}, "properties": {"repobilityId": "0db6ad498da334a3", "scanner": "scanner-primary", "fingerprint": "882e8ab556bd75a2", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/src/lang/ja_JP.js"}, "region": {"startLine": 585}}}]}, {"ruleId": "scanner-882e8ab556bd75a2", "level": "error", "message": {"text": "Possible secret in frontend/src/lang/ja_JP.js"}, "properties": {"repobilityId": "0db6ad498da334a3", "scanner": "scanner-primary", "fingerprint": "882e8ab556bd75a2", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/src/lang/ja_JP.js"}, "region": {"startLine": 586}}}]}, {"ruleId": "scanner-882e8ab556bd75a2", "level": "error", "message": {"text": "Possible secret in frontend/src/lang/ja_JP.js"}, "properties": {"repobilityId": "0db6ad498da334a3", "scanner": "scanner-primary", "fingerprint": "882e8ab556bd75a2", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/src/lang/ja_JP.js"}, "region": {"startLine": 589}}}]}, {"ruleId": "scanner-882e8ab556bd75a2", "level": "error", "message": {"text": "Possible secret in frontend/src/lang/ja_JP.js"}, "properties": {"repobilityId": "0db6ad498da334a3", "scanner": "scanner-primary", "fingerprint": "882e8ab556bd75a2", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/src/lang/ja_JP.js"}, "region": {"startLine": 590}}}]}, {"ruleId": "scanner-882e8ab556bd75a2", "level": "error", "message": {"text": "Possible secret in frontend/src/lang/ja_JP.js"}, "properties": {"repobilityId": "0db6ad498da334a3", "scanner": "scanner-primary", "fingerprint": "882e8ab556bd75a2", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/src/lang/ja_JP.js"}, "region": {"startLine": 659}}}]}, {"ruleId": "scanner-882e8ab556bd75a2", "level": "error", "message": {"text": "Possible secret in frontend/src/lang/ja_JP.js"}, "properties": {"repobilityId": "0db6ad498da334a3", "scanner": "scanner-primary", "fingerprint": "882e8ab556bd75a2", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/src/lang/ja_JP.js"}, "region": {"startLine": 665}}}]}, {"ruleId": "scanner-882e8ab556bd75a2", "level": "error", "message": {"text": "Possible secret in frontend/src/lang/ja_JP.js"}, "properties": {"repobilityId": "0db6ad498da334a3", "scanner": "scanner-primary", "fingerprint": "882e8ab556bd75a2", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/src/lang/ja_JP.js"}, "region": {"startLine": 666}}}]}, {"ruleId": "scanner-882e8ab556bd75a2", "level": "error", "message": {"text": "Possible secret in frontend/src/lang/ja_JP.js"}, "properties": {"repobilityId": "0db6ad498da334a3", "scanner": "scanner-primary", "fingerprint": "882e8ab556bd75a2", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/src/lang/ja_JP.js"}, "region": {"startLine": 667}}}]}, {"ruleId": "scanner-882e8ab556bd75a2", "level": "error", "message": {"text": "Possible secret in frontend/src/lang/ja_JP.js"}, "properties": {"repobilityId": "0db6ad498da334a3", "scanner": "scanner-primary", "fingerprint": "882e8ab556bd75a2", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/src/lang/ja_JP.js"}, "region": {"startLine": 727}}}]}, {"ruleId": "scanner-882e8ab556bd75a2", "level": "error", "message": {"text": "Possible secret in frontend/src/lang/ja_JP.js"}, "properties": {"repobilityId": "0db6ad498da334a3", "scanner": "scanner-primary", "fingerprint": "882e8ab556bd75a2", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/src/lang/ja_JP.js"}, "region": {"startLine": 773}}}]}, {"ruleId": "scanner-882e8ab556bd75a2", "level": "error", "message": {"text": "Possible secret in frontend/src/lang/ja_JP.js"}, "properties": {"repobilityId": "0db6ad498da334a3", "scanner": "scanner-primary", "fingerprint": "882e8ab556bd75a2", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/src/lang/ja_JP.js"}, "region": {"startLine": 788}}}]}, {"ruleId": "scanner-6a1a0808f6dc4970", "level": "error", "message": {"text": "Possible secret in frontend/src/lang/en.js"}, "properties": {"repobilityId": "81e0108c072b7290", "scanner": "scanner-primary", "fingerprint": "6a1a0808f6dc4970", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/src/lang/en.js"}, "region": {"startLine": 169}}}]}, {"ruleId": "scanner-6a1a0808f6dc4970", "level": "error", "message": {"text": "Possible secret in frontend/src/lang/en.js"}, "properties": {"repobilityId": "81e0108c072b7290", "scanner": "scanner-primary", "fingerprint": "6a1a0808f6dc4970", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/src/lang/en.js"}, "region": {"startLine": 208}}}]}, {"ruleId": "scanner-6a1a0808f6dc4970", "level": "error", "message": {"text": "Possible secret in frontend/src/lang/en.js"}, "properties": {"repobilityId": "81e0108c072b7290", "scanner": "scanner-primary", "fingerprint": "6a1a0808f6dc4970", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/src/lang/en.js"}, "region": {"startLine": 226}}}]}, {"ruleId": "scanner-6a1a0808f6dc4970", "level": "error", "message": {"text": "Possible secret in frontend/src/lang/en.js"}, "properties": {"repobilityId": "81e0108c072b7290", "scanner": "scanner-primary", "fingerprint": "6a1a0808f6dc4970", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/src/lang/en.js"}, "region": {"startLine": 285}}}]}, {"ruleId": "scanner-6a1a0808f6dc4970", "level": "error", "message": {"text": "Possible secret in frontend/src/lang/en.js"}, "properties": {"repobilityId": "81e0108c072b7290", "scanner": "scanner-primary", "fingerprint": "6a1a0808f6dc4970", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/src/lang/en.js"}, "region": {"startLine": 575}}}]}, {"ruleId": "scanner-6a1a0808f6dc4970", "level": "error", "message": {"text": "Possible secret in frontend/src/lang/en.js"}, "properties": {"repobilityId": "81e0108c072b7290", "scanner": "scanner-primary", "fingerprint": "6a1a0808f6dc4970", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/src/lang/en.js"}, "region": {"startLine": 576}}}]}, {"ruleId": "scanner-6a1a0808f6dc4970", "level": "error", "message": {"text": "Possible secret in frontend/src/lang/en.js"}, "properties": {"repobilityId": "81e0108c072b7290", "scanner": "scanner-primary", "fingerprint": "6a1a0808f6dc4970", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/src/lang/en.js"}, "region": {"startLine": 579}}}]}, {"ruleId": "scanner-6a1a0808f6dc4970", "level": "error", "message": {"text": "Possible secret in frontend/src/lang/en.js"}, "properties": {"repobilityId": "81e0108c072b7290", "scanner": "scanner-primary", "fingerprint": "6a1a0808f6dc4970", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/src/lang/en.js"}, "region": {"startLine": 580}}}]}, {"ruleId": "scanner-6a1a0808f6dc4970", "level": "error", "message": {"text": "Possible secret in frontend/src/lang/en.js"}, "properties": {"repobilityId": "81e0108c072b7290", "scanner": "scanner-primary", "fingerprint": "6a1a0808f6dc4970", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/src/lang/en.js"}, "region": {"startLine": 649}}}]}, {"ruleId": "scanner-6a1a0808f6dc4970", "level": "error", "message": {"text": "Possible secret in frontend/src/lang/en.js"}, "properties": {"repobilityId": "81e0108c072b7290", "scanner": "scanner-primary", "fingerprint": "6a1a0808f6dc4970", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/src/lang/en.js"}, "region": {"startLine": 655}}}]}, {"ruleId": "scanner-6a1a0808f6dc4970", "level": "error", "message": {"text": "Possible secret in frontend/src/lang/en.js"}, "properties": {"repobilityId": "81e0108c072b7290", "scanner": "scanner-primary", "fingerprint": "6a1a0808f6dc4970", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/src/lang/en.js"}, "region": {"startLine": 656}}}]}, {"ruleId": "scanner-6a1a0808f6dc4970", "level": "error", "message": {"text": "Possible secret in frontend/src/lang/en.js"}, "properties": {"repobilityId": "81e0108c072b7290", "scanner": "scanner-primary", "fingerprint": "6a1a0808f6dc4970", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/src/lang/en.js"}, "region": {"startLine": 657}}}]}, {"ruleId": "scanner-6a1a0808f6dc4970", "level": "error", "message": {"text": "Possible secret in frontend/src/lang/en.js"}, "properties": {"repobilityId": "81e0108c072b7290", "scanner": "scanner-primary", "fingerprint": "6a1a0808f6dc4970", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/src/lang/en.js"}, "region": {"startLine": 717}}}]}, {"ruleId": "scanner-6a1a0808f6dc4970", "level": "error", "message": {"text": "Possible secret in frontend/src/lang/en.js"}, "properties": {"repobilityId": "81e0108c072b7290", "scanner": "scanner-primary", "fingerprint": "6a1a0808f6dc4970", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/src/lang/en.js"}, "region": {"startLine": 741}}}]}, {"ruleId": "scanner-6a1a0808f6dc4970", "level": "error", "message": {"text": "Possible secret in frontend/src/lang/en.js"}, "properties": {"repobilityId": "81e0108c072b7290", "scanner": "scanner-primary", "fingerprint": "6a1a0808f6dc4970", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/src/lang/en.js"}, "region": {"startLine": 763}}}]}, {"ruleId": "scanner-6a1a0808f6dc4970", "level": "error", "message": {"text": "Possible secret in frontend/src/lang/en.js"}, "properties": {"repobilityId": "81e0108c072b7290", "scanner": "scanner-primary", "fingerprint": "6a1a0808f6dc4970", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/src/lang/en.js"}, "region": {"startLine": 778}}}]}, {"ruleId": "scanner-0793eb0025d27f94", "level": "error", "message": {"text": "Possible secret in frontend/src/lang/ko_KR.js"}, "properties": {"repobilityId": "fa586cb85c3fdab0", "scanner": "scanner-primary", "fingerprint": "0793eb0025d27f94", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/src/lang/ko_KR.js"}, "region": {"startLine": 169}}}]}, {"ruleId": "scanner-0793eb0025d27f94", "level": "error", "message": {"text": "Possible secret in frontend/src/lang/ko_KR.js"}, "properties": {"repobilityId": "fa586cb85c3fdab0", "scanner": "scanner-primary", "fingerprint": "0793eb0025d27f94", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/src/lang/ko_KR.js"}, "region": {"startLine": 208}}}]}, {"ruleId": "scanner-0793eb0025d27f94", "level": "error", "message": {"text": "Possible secret in frontend/src/lang/ko_KR.js"}, "properties": {"repobilityId": "fa586cb85c3fdab0", "scanner": "scanner-primary", "fingerprint": "0793eb0025d27f94", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/src/lang/ko_KR.js"}, "region": {"startLine": 226}}}]}, {"ruleId": "scanner-0793eb0025d27f94", "level": "error", "message": {"text": "Possible secret in frontend/src/lang/ko_KR.js"}, "properties": {"repobilityId": "fa586cb85c3fdab0", "scanner": "scanner-primary", "fingerprint": "0793eb0025d27f94", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/src/lang/ko_KR.js"}, "region": {"startLine": 285}}}]}, {"ruleId": "scanner-0793eb0025d27f94", "level": "error", "message": {"text": "Possible secret in frontend/src/lang/ko_KR.js"}, "properties": {"repobilityId": "fa586cb85c3fdab0", "scanner": "scanner-primary", "fingerprint": "0793eb0025d27f94", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/src/lang/ko_KR.js"}, "region": {"startLine": 575}}}]}, {"ruleId": "scanner-0793eb0025d27f94", "level": "error", "message": {"text": "Possible secret in frontend/src/lang/ko_KR.js"}, "properties": {"repobilityId": "fa586cb85c3fdab0", "scanner": "scanner-primary", "fingerprint": "0793eb0025d27f94", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/src/lang/ko_KR.js"}, "region": {"startLine": 576}}}]}, {"ruleId": "scanner-0793eb0025d27f94", "level": "error", "message": {"text": "Possible secret in frontend/src/lang/ko_KR.js"}, "properties": {"repobilityId": "fa586cb85c3fdab0", "scanner": "scanner-primary", "fingerprint": "0793eb0025d27f94", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/src/lang/ko_KR.js"}, "region": {"startLine": 579}}}]}, {"ruleId": "scanner-0793eb0025d27f94", "level": "error", "message": {"text": "Possible secret in frontend/src/lang/ko_KR.js"}, "properties": {"repobilityId": "fa586cb85c3fdab0", "scanner": "scanner-primary", "fingerprint": "0793eb0025d27f94", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/src/lang/ko_KR.js"}, "region": {"startLine": 580}}}]}, {"ruleId": "scanner-0793eb0025d27f94", "level": "error", "message": {"text": "Possible secret in frontend/src/lang/ko_KR.js"}, "properties": {"repobilityId": "fa586cb85c3fdab0", "scanner": "scanner-primary", "fingerprint": "0793eb0025d27f94", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/src/lang/ko_KR.js"}, "region": {"startLine": 649}}}]}, {"ruleId": "scanner-0793eb0025d27f94", "level": "error", "message": {"text": "Possible secret in frontend/src/lang/ko_KR.js"}, "properties": {"repobilityId": "fa586cb85c3fdab0", "scanner": "scanner-primary", "fingerprint": "0793eb0025d27f94", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/src/lang/ko_KR.js"}, "region": {"startLine": 655}}}]}, {"ruleId": "scanner-0793eb0025d27f94", "level": "error", "message": {"text": "Possible secret in frontend/src/lang/ko_KR.js"}, "properties": {"repobilityId": "fa586cb85c3fdab0", "scanner": "scanner-primary", "fingerprint": "0793eb0025d27f94", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/src/lang/ko_KR.js"}, "region": {"startLine": 656}}}]}, {"ruleId": "scanner-0793eb0025d27f94", "level": "error", "message": {"text": "Possible secret in frontend/src/lang/ko_KR.js"}, "properties": {"repobilityId": "fa586cb85c3fdab0", "scanner": "scanner-primary", "fingerprint": "0793eb0025d27f94", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/src/lang/ko_KR.js"}, "region": {"startLine": 657}}}]}, {"ruleId": "scanner-0793eb0025d27f94", "level": "error", "message": {"text": "Possible secret in frontend/src/lang/ko_KR.js"}, "properties": {"repobilityId": "fa586cb85c3fdab0", "scanner": "scanner-primary", "fingerprint": "0793eb0025d27f94", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/src/lang/ko_KR.js"}, "region": {"startLine": 717}}}]}, {"ruleId": "scanner-0793eb0025d27f94", "level": "error", "message": {"text": "Possible secret in frontend/src/lang/ko_KR.js"}, "properties": {"repobilityId": "fa586cb85c3fdab0", "scanner": "scanner-primary", "fingerprint": "0793eb0025d27f94", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/src/lang/ko_KR.js"}, "region": {"startLine": 763}}}]}, {"ruleId": "scanner-0793eb0025d27f94", "level": "error", "message": {"text": "Possible secret in frontend/src/lang/ko_KR.js"}, "properties": {"repobilityId": "fa586cb85c3fdab0", "scanner": "scanner-primary", "fingerprint": "0793eb0025d27f94", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/src/lang/ko_KR.js"}, "region": {"startLine": 778}}}]}, {"ruleId": "scanner-771a84af2180effe", "level": "error", "message": {"text": "Possible secret in frontend/src/lang/zh_TW.js"}, "properties": {"repobilityId": "0b480b7c7515b850", "scanner": "scanner-primary", "fingerprint": "771a84af2180effe", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/src/lang/zh_TW.js"}, "region": {"startLine": 575}}}]}, {"ruleId": "scanner-771a84af2180effe", "level": "error", "message": {"text": "Possible secret in frontend/src/lang/zh_TW.js"}, "properties": {"repobilityId": "0b480b7c7515b850", "scanner": "scanner-primary", "fingerprint": "771a84af2180effe", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/src/lang/zh_TW.js"}, "region": {"startLine": 576}}}]}, {"ruleId": "scanner-771a84af2180effe", "level": "error", "message": {"text": "Possible secret in frontend/src/lang/zh_TW.js"}, "properties": {"repobilityId": "0b480b7c7515b850", "scanner": "scanner-primary", "fingerprint": "771a84af2180effe", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/src/lang/zh_TW.js"}, "region": {"startLine": 579}}}]}, {"ruleId": "scanner-771a84af2180effe", "level": "error", "message": {"text": "Possible secret in frontend/src/lang/zh_TW.js"}, "properties": {"repobilityId": "0b480b7c7515b850", "scanner": "scanner-primary", "fingerprint": "771a84af2180effe", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/src/lang/zh_TW.js"}, "region": {"startLine": 580}}}]}, {"ruleId": "scanner-771a84af2180effe", "level": "error", "message": {"text": "Possible secret in frontend/src/lang/zh_TW.js"}, "properties": {"repobilityId": "0b480b7c7515b850", "scanner": "scanner-primary", "fingerprint": "771a84af2180effe", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/src/lang/zh_TW.js"}, "region": {"startLine": 649}}}]}, {"ruleId": "scanner-771a84af2180effe", "level": "error", "message": {"text": "Possible secret in frontend/src/lang/zh_TW.js"}, "properties": {"repobilityId": "0b480b7c7515b850", "scanner": "scanner-primary", "fingerprint": "771a84af2180effe", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/src/lang/zh_TW.js"}, "region": {"startLine": 763}}}]}, {"ruleId": "scanner-7cd3f3fcfe2716e4", "level": "error", "message": {"text": "Possible secret in frontend/src/lang/zh_CN.js"}, "properties": {"repobilityId": "484dd49867cb7bb5", "scanner": "scanner-primary", "fingerprint": "7cd3f3fcfe2716e4", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/src/lang/zh_CN.js"}, "region": {"startLine": 575}}}]}, {"ruleId": "scanner-7cd3f3fcfe2716e4", "level": "error", "message": {"text": "Possible secret in frontend/src/lang/zh_CN.js"}, "properties": {"repobilityId": "484dd49867cb7bb5", "scanner": "scanner-primary", "fingerprint": "7cd3f3fcfe2716e4", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/src/lang/zh_CN.js"}, "region": {"startLine": 576}}}]}, {"ruleId": "scanner-7cd3f3fcfe2716e4", "level": "error", "message": {"text": "Possible secret in frontend/src/lang/zh_CN.js"}, "properties": {"repobilityId": "484dd49867cb7bb5", "scanner": "scanner-primary", "fingerprint": "7cd3f3fcfe2716e4", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/src/lang/zh_CN.js"}, "region": {"startLine": 579}}}]}, {"ruleId": "scanner-7cd3f3fcfe2716e4", "level": "error", "message": {"text": "Possible secret in frontend/src/lang/zh_CN.js"}, "properties": {"repobilityId": "484dd49867cb7bb5", "scanner": "scanner-primary", "fingerprint": "7cd3f3fcfe2716e4", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/src/lang/zh_CN.js"}, "region": {"startLine": 580}}}]}, {"ruleId": "scanner-7cd3f3fcfe2716e4", "level": "error", "message": {"text": "Possible secret in frontend/src/lang/zh_CN.js"}, "properties": {"repobilityId": "484dd49867cb7bb5", "scanner": "scanner-primary", "fingerprint": "7cd3f3fcfe2716e4", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/src/lang/zh_CN.js"}, "region": {"startLine": 649}}}]}, {"ruleId": "scanner-7cd3f3fcfe2716e4", "level": "error", "message": {"text": "Possible secret in frontend/src/lang/zh_CN.js"}, "properties": {"repobilityId": "484dd49867cb7bb5", "scanner": "scanner-primary", "fingerprint": "7cd3f3fcfe2716e4", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/src/lang/zh_CN.js"}, "region": {"startLine": 763}}}]}, {"ruleId": "scanner-9d4cd0b6d979c620", "level": "error", "message": {"text": "Possible secret in infra/keycloak/themes/access-matrix/login/resources/js/login.js"}, "properties": {"repobilityId": "ca47c051fd4ad2bb", "scanner": "scanner-primary", "fingerprint": "9d4cd0b6d979c620", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "infra/keycloak/themes/access-matrix/login/resources/js/login.js"}, "region": {"startLine": 91}}}]}, {"ruleId": "scanner-9d4cd0b6d979c620", "level": "error", "message": {"text": "Possible secret in infra/keycloak/themes/access-matrix/login/resources/js/login.js"}, "properties": {"repobilityId": "ca47c051fd4ad2bb", "scanner": "scanner-primary", "fingerprint": "9d4cd0b6d979c620", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "infra/keycloak/themes/access-matrix/login/resources/js/login.js"}, "region": {"startLine": 92}}}]}, {"ruleId": "scanner-9d4cd0b6d979c620", "level": "error", "message": {"text": "Possible secret in infra/keycloak/themes/access-matrix/login/resources/js/login.js"}, "properties": {"repobilityId": "ca47c051fd4ad2bb", "scanner": "scanner-primary", "fingerprint": "9d4cd0b6d979c620", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "infra/keycloak/themes/access-matrix/login/resources/js/login.js"}, "region": {"startLine": 123}}}]}, {"ruleId": "scanner-9d4cd0b6d979c620", "level": "error", "message": {"text": "Possible secret in infra/keycloak/themes/access-matrix/login/resources/js/login.js"}, "properties": {"repobilityId": "ca47c051fd4ad2bb", "scanner": "scanner-primary", "fingerprint": "9d4cd0b6d979c620", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "infra/keycloak/themes/access-matrix/login/resources/js/login.js"}, "region": {"startLine": 124}}}]}, {"ruleId": "scanner-30201625ec685188", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in infra/keycloak/themes/access-matrix/login/resources/js/login.js:218"}, "properties": {"repobilityId": "bc1f851d24799bfa", "scanner": "scanner-primary", "fingerprint": "30201625ec685188", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "infra/keycloak/themes/access-matrix/login/resources/js/login.js"}, "region": {"startLine": 218}}}]}, {"ruleId": "scanner-c4f127f7c03360a4", "level": "error", "message": {"text": "Possible secret in backend/core-system/src/main/java/com/platform/system/security/SystemPermissions.java"}, "properties": {"repobilityId": "a208e094f07b8795", "scanner": "scanner-primary", "fingerprint": "c4f127f7c03360a4", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "backend/core-system/src/main/java/com/platform/system/security/SystemPermissions.java"}, "region": {"startLine": 62}}}]}, {"ruleId": "scanner-d2a4058e3be8ce89", "level": "error", "message": {"text": "Possible secret in backend/core-bootstrap/src/test/java/com/platform/core/bootstrap/it/OidcJitProvisioningIT.java"}, "properties": {"repobilityId": "6255b82e2440d543", "scanner": "scanner-primary", "fingerprint": "d2a4058e3be8ce89", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "backend/core-bootstrap/src/test/java/com/platform/core/bootstrap/it/OidcJitProvisioningIT.java"}, "region": {"startLine": 85}}}]}, {"ruleId": "scanner-86535f301178ea64", "level": "error", "message": {"text": "Possible secret in backend/business-demo/src/main/java/com/platform/business/demo/startup/DemoSeeder.java"}, "properties": {"repobilityId": "8b83dce6671e8863", "scanner": "scanner-primary", "fingerprint": "86535f301178ea64", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "backend/business-demo/src/main/java/com/platform/business/demo/startup/DemoSeeder.java"}, "region": {"startLine": 64}}}]}, {"ruleId": "scanner-65141922bbebdb19", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "11e274e97b9666d5", "scanner": "scanner-primary", "fingerprint": "65141922bbebdb19", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/backend.yml"}, "region": {"startLine": 26}}}]}, {"ruleId": "scanner-65c9bd56493a81d3", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "0ed1778ab7cd4d92", "scanner": "scanner-primary", "fingerprint": "65c9bd56493a81d3", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/e2e.yml"}, "region": {"startLine": 94}}}]}, {"ruleId": "scanner-65c9bd56493a81d3", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "b1ab3c3bf570d7b2", "scanner": "scanner-primary", "fingerprint": "65c9bd56493a81d3", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/e2e.yml"}, "region": {"startLine": 101}}}]}, {"ruleId": "scanner-65c9bd56493a81d3", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "8e879d8d5d310b9f", "scanner": "scanner-primary", "fingerprint": "65c9bd56493a81d3", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/e2e.yml"}, "region": {"startLine": 193}}}]}, {"ruleId": "scanner-548bfbab350dca45", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "237c38b96d62958b", "scanner": "scanner-primary", "fingerprint": "548bfbab350dca45", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/frontend.yml"}, "region": {"startLine": 26}}}]}, {"ruleId": "scanner-3080d0bc92a4d39d", "level": "note", "message": {"text": "Very large file: frontend/src/lang/ja_JP.js (1135 lines)"}, "properties": {"repobilityId": "6fe497587f7b3ee5", "scanner": "scanner-primary", "fingerprint": "3080d0bc92a4d39d", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-ea3b5e389d8c9c0f", "level": "note", "message": {"text": "Low test-to-source ratio"}, "properties": {"repobilityId": "ef7b2552cc00a375", "scanner": "scanner-primary", "fingerprint": "ea3b5e389d8c9c0f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["tests"]}}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "607d50289d602a5e", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-72b2a6250083a784", "level": "warning", "message": {"text": "Placeholder or mock-heavy implementation detected"}, "properties": {"repobilityId": "9d6aa36ba9c8c391", "scanner": "scanner-primary", "fingerprint": "72b2a6250083a784", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "incomplete", "generated-repo-pattern"]}}, {"ruleId": "scanner-9d79c4077342a7d0", "level": "warning", "message": {"text": "Runtime service client appears to use placeholder configuration"}, "properties": {"repobilityId": "15555b4a071d0e30", "scanner": "scanner-primary", "fingerprint": "9d79c4077342a7d0", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "runtime-config", "service-client", "generated-repo-pattern"]}}, {"ruleId": "scanner-2d0c7b7ab8f8aacf", "level": "warning", "message": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "properties": {"repobilityId": "96b0682bc8b57360", "scanner": "scanner-primary", "fingerprint": "2d0c7b7ab8f8aacf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "critical-flow", "generated-repo-pattern"]}}, {"ruleId": "scanner-ea8f3013f588db25", "level": "note", "message": {"text": "Shallow git history limits provenance confidence"}, "properties": {"repobilityId": "b683eb442f95d6fa", "scanner": "scanner-primary", "fingerprint": "ea8f3013f588db25", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-8424db9c75e04ba4", "level": "none", "message": {"text": "Very short observed git history"}, "properties": {"repobilityId": "5c0557c7d49ee58f", "scanner": "scanner-primary", "fingerprint": "8424db9c75e04ba4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-b0fe3ea6a5e87cb7", "level": "none", "message": {"text": "Commented-code block (5 lines) in frontend/tests/e2e/force-delete-role.spec.js:50"}, "properties": {"repobilityId": "13d3b45fc0c0e3bf", "scanner": "scanner-primary", "fingerprint": "b0fe3ea6a5e87cb7", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-4d5b74ea7027e43b", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 frontend/scripts/dashboard/verify-agg-vs-direct.mjs:32"}, "properties": {"repobilityId": "80ad3f1cf2d6ee1f", "scanner": "scanner-primary", "fingerprint": "4d5b74ea7027e43b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-fa269cbf94cc15aa", "level": "none", "message": {"text": "Commented-code block (6 lines) in frontend/src/main.js:12"}, "properties": {"repobilityId": "94e8aadf3fd38191", "scanner": "scanner-primary", "fingerprint": "fa269cbf94cc15aa", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-bd507a22115195bb", "level": "none", "message": {"text": "Commented-code block (5 lines) in frontend/src/router/index.js:108"}, "properties": {"repobilityId": "8dcabbbaeb9524b5", "scanner": "scanner-primary", "fingerprint": "bd507a22115195bb", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-038fc9c23b22fd9c", "level": "none", "message": {"text": "Commented-code block (6 lines) in frontend/src/stores/auth.js:90"}, "properties": {"repobilityId": "d72f7f84f8966cee", "scanner": "scanner-primary", "fingerprint": "038fc9c23b22fd9c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-9905758098f5c50b", "level": "none", "message": {"text": "Commented-code block (5 lines) in frontend/src/utils/tenant.test.js:4"}, "properties": {"repobilityId": "204f5578ec0ee73b", "scanner": "scanner-primary", "fingerprint": "9905758098f5c50b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-1361a7be077e6a7c", "level": "none", "message": {"text": "Commented-code block (7 lines) in frontend/src/utils/oidc.js:226"}, "properties": {"repobilityId": "0c5b5b6e8274a05a", "scanner": "scanner-primary", "fingerprint": "1361a7be077e6a7c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-67e7aaaa934fb3d9", "level": "none", "message": {"text": "Commented-code block (5 lines) in frontend/src/services/request.js:73"}, "properties": {"repobilityId": "175d0e6049d33143", "scanner": "scanner-primary", "fingerprint": "67e7aaaa934fb3d9", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-23704ad62dd9d3aa", "level": "none", "message": {"text": "Commented-code block (7 lines) in infra/keycloak/themes/access-matrix/login/resources/js/login.js:27"}, "properties": {"repobilityId": "356b08cfad74ec8d", "scanner": "scanner-primary", "fingerprint": "23704ad62dd9d3aa", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-ecec737e8ff0238c", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 infra/keycloak/themes/access-matrix/login/resources/js/login.js:385"}, "properties": {"repobilityId": "0b71bbf5d6140733", "scanner": "scanner-primary", "fingerprint": "ecec737e8ff0238c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-b334d875f2339fa1", "level": "note", "message": {"text": "5 env vars used in code but missing from .env.example"}, "properties": {"repobilityId": "faa38682016f5d53", "scanner": "scanner-primary", "fingerprint": "b334d875f2339fa1", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "config-drift"]}}]}]}