{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-5edbe96da2b6a63f", "name": "Insecure pattern 'direct_innerhtml_assignment' in dashboard.html:1146", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in dashboard.html:1146"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-573ff7b645fe4463", "name": "Insecure pattern 'direct_outerhtml_assignment' in dashboard.html:1788", "shortDescription": {"text": "Insecure pattern 'direct_outerhtml_assignment' in dashboard.html:1788"}, "fullDescription": {"text": "Found a known-risky pattern (direct_outerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ebbb84de5d05fdb0", "name": "Insecure pattern 'direct_innerhtml_assignment' in projects.html:205", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in projects.html:205"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bfb03bf2192d3fa5", "name": "Insecure pattern 'direct_innerhtml_assignment' in checkin.html:333", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in checkin.html:333"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8132d7f67664fd00", "name": "Insecure pattern 'direct_outerhtml_assignment' in about.html:135", "shortDescription": {"text": "Insecure pattern 'direct_outerhtml_assignment' in about.html:135"}, "fullDescription": {"text": "Found a known-risky pattern (direct_outerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-349d40a263e5a6dc", "name": "Insecure pattern 'direct_innerhtml_assignment' in materials.html:1222", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in materials.html:1222"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c0fc6a295fd200e9", "name": "Insecure pattern 'direct_innerhtml_assignment' in daily.html:701", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in daily.html:701"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-90427568f5a4b094", "name": "Insecure pattern 'direct_innerhtml_assignment' in client.html:1379", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in client.html:1379"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e698d90d957f989c", "name": "Insecure pattern 'direct_innerhtml_assignment' in team.html:272", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in team.html:272"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-01707ea33896acde", "name": "Insecure pattern 'direct_innerhtml_assignment' in index.html:76", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in index.html:76"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8cb0d3932cf8a041", "name": "Insecure pattern 'direct_innerhtml_assignment' in users.html:121", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in users.html:121"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6372cebde0220094", "name": "No auth library detected", "shortDescription": {"text": "No auth library detected"}, "fullDescription": {"text": "The scanner did not find any standard auth library (JWT, OAuth, NextAuth, Auth0, etc.). The repo has auth/admin/session surface indicators, so auth may live in custom code, in a separate service, or be missing."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/27117"}, "properties": {"repository": "keatudom/DSTR-PM-V2", "repoUrl": "https://github.com/keatudom/DSTR-PM-V2", "branch": "main"}, "results": [{"ruleId": "scanner-5edbe96da2b6a63f", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in dashboard.html:1146"}, "properties": {"repobilityId": "3cddbad051d0bcc9", "scanner": "scanner-primary", "fingerprint": "5edbe96da2b6a63f", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "dashboard.html"}, "region": {"startLine": 1146}}}]}, {"ruleId": "scanner-573ff7b645fe4463", "level": "warning", "message": {"text": "Insecure pattern 'direct_outerhtml_assignment' in dashboard.html:1788"}, "properties": {"repobilityId": "f774b219cf8afa4f", "scanner": "scanner-primary", "fingerprint": "573ff7b645fe4463", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_outerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "dashboard.html"}, "region": {"startLine": 1788}}}]}, {"ruleId": "scanner-ebbb84de5d05fdb0", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in projects.html:205"}, "properties": {"repobilityId": "198cb1a82f07b312", "scanner": "scanner-primary", "fingerprint": "ebbb84de5d05fdb0", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "projects.html"}, "region": {"startLine": 205}}}]}, {"ruleId": "scanner-bfb03bf2192d3fa5", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in checkin.html:333"}, "properties": {"repobilityId": "fb666fb53076aeb6", "scanner": "scanner-primary", "fingerprint": "bfb03bf2192d3fa5", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "checkin.html"}, "region": {"startLine": 333}}}]}, {"ruleId": "scanner-8132d7f67664fd00", "level": "warning", "message": {"text": "Insecure pattern 'direct_outerhtml_assignment' in about.html:135"}, "properties": {"repobilityId": "28aaacee8bade0b0", "scanner": "scanner-primary", "fingerprint": "8132d7f67664fd00", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_outerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "about.html"}, "region": {"startLine": 135}}}]}, {"ruleId": "scanner-349d40a263e5a6dc", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in materials.html:1222"}, "properties": {"repobilityId": "2d1a0afd53554a4d", "scanner": "scanner-primary", "fingerprint": "349d40a263e5a6dc", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "materials.html"}, "region": {"startLine": 1222}}}]}, {"ruleId": "scanner-c0fc6a295fd200e9", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in daily.html:701"}, "properties": {"repobilityId": "33e3bf8dc9778dda", "scanner": "scanner-primary", "fingerprint": "c0fc6a295fd200e9", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "daily.html"}, "region": {"startLine": 701}}}]}, {"ruleId": "scanner-90427568f5a4b094", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in client.html:1379"}, "properties": {"repobilityId": "fb8c7a6c827d20c2", "scanner": "scanner-primary", "fingerprint": "90427568f5a4b094", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "client.html"}, "region": {"startLine": 1379}}}]}, {"ruleId": "scanner-e698d90d957f989c", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in team.html:272"}, "properties": {"repobilityId": "dae012f0588fc4b2", "scanner": "scanner-primary", "fingerprint": "e698d90d957f989c", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "team.html"}, "region": {"startLine": 272}}}]}, {"ruleId": "scanner-01707ea33896acde", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in index.html:76"}, "properties": {"repobilityId": "f91708437a3a5445", "scanner": "scanner-primary", "fingerprint": "01707ea33896acde", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "index.html"}, "region": {"startLine": 76}}}]}, {"ruleId": "scanner-8cb0d3932cf8a041", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in users.html:121"}, "properties": {"repobilityId": "ec569cc0755d7f59", "scanner": "scanner-primary", "fingerprint": "8cb0d3932cf8a041", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "users.html"}, "region": {"startLine": 121}}}]}, {"ruleId": "scanner-6372cebde0220094", "level": "warning", "message": {"text": "No auth library detected"}, "properties": {"repobilityId": "a5b6035a5bbf8054", "scanner": "scanner-primary", "fingerprint": "6372cebde0220094", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["coverage", "auth"]}}]}]}