{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-41ee6671c151679f", "name": "Possibly dead Python function: cmd_create_case", "shortDescription": {"text": "Possibly dead Python function: cmd_create_case"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cf2cc581bde109f6", "name": "Possibly dead Python function: cmd_report", "shortDescription": {"text": "Possibly dead Python function: cmd_report"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4ce7bc7b827a5c81", "name": "Possibly dead Python function: cmd_weekly", "shortDescription": {"text": "Possibly dead Python function: cmd_weekly"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7ef510366ac34778", "name": "Possibly dead Python function: cmd_close", "shortDescription": {"text": "Possibly dead Python function: cmd_close"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cc557df9719f7724", "name": "Possibly dead Python function: cmd_list", "shortDescription": {"text": "Possibly dead Python function: cmd_list"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2fa334acb4a01b0c", "name": "Possibly dead Python function: cmd_enrich", "shortDescription": {"text": "Possibly dead Python function: cmd_enrich"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7818e8ea0ad5eccd", "name": "Possibly dead Python function: cmd_client_query", "shortDescription": {"text": "Possibly dead Python function: cmd_client_query"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-66c5c02f75d45ddd", "name": "Possibly dead Python function: cmd_mdr_report", "shortDescription": {"text": "Possibly dead Python function: cmd_mdr_report"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-855aa43a11216013", "name": "Possibly dead Python function: cmd_pup_report", "shortDescription": {"text": "Possibly dead Python function: cmd_pup_report"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-31598f87dc94c250", "name": "Possibly dead Python function: cmd_secarch", "shortDescription": {"text": "Possibly dead Python function: cmd_secarch"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ecc40f8c521474c3", "name": "Possibly dead Python function: cmd_queries", "shortDescription": {"text": "Possibly dead Python function: cmd_queries"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7ef67f33f35afc02", "name": "Possibly dead Python function: cmd_triage", "shortDescription": {"text": "Possibly dead Python function: cmd_triage"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a1de347d9106a961", "name": "Possibly dead Python function: cmd_email_analyse", "shortDescription": {"text": "Possibly dead Python function: cmd_email_analyse"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-657a6a5631e2b496", "name": "Possibly dead Python function: cmd_landscape", "shortDescription": {"text": "Possibly dead Python function: cmd_landscape"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-da70ed7b1315f513", "name": "Possibly dead Python function: cmd_campaigns", "shortDescription": {"text": "Possibly dead Python function: cmd_campaigns"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-59963da7125e9203", "name": "Possibly dead Python function: cmd_errors", "shortDescription": {"text": "Possibly dead Python function: cmd_errors"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-10a7d9495a61c154", "name": "Possibly dead Python function: cmd_mcp_usage", "shortDescription": {"text": "Possibly dead Python function: cmd_mcp_usage"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4077cbcb8ce28ff0", "name": "Possibly dead Python function: cmd_sandbox", "shortDescription": {"text": "Possibly dead Python function: cmd_sandbox"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2e91c4795cb72fc6", "name": "Possibly dead Python function: cmd_exposure", "shortDescription": {"text": "Possibly dead Python function: cmd_exposure"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a54a630ea91db86a", "name": "Possibly dead Python function: cmd_coverage", "shortDescription": {"text": "Possibly dead Python function: cmd_coverage"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6d403c935cf3b974", "name": "Possibly dead Python function: cmd_anomalies", "shortDescription": {"text": "Possibly dead Python function: cmd_anomalies"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b14fa407a926e1e2", "name": "Possibly dead Python function: cmd_timeline", "shortDescription": {"text": "Possibly dead Python function: cmd_timeline"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a08d113bc642ce15", "name": "Possibly dead Python function: cmd_pe_analysis", "shortDescription": {"text": "Possibly dead Python function: cmd_pe_analysis"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b7bcb5395316bea8", "name": "Possibly dead Python function: cmd_yara", "shortDescription": {"text": "Possibly dead Python function: cmd_yara"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-172c25cc82b8bb53", "name": "Possibly dead Python function: cmd_evtx", "shortDescription": {"text": "Possibly dead Python function: cmd_evtx"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7dfbe90ba90dc1a5", "name": "Possibly dead Python function: cmd_cve_context", "shortDescription": {"text": "Possibly dead Python function: cmd_cve_context"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f2c114f1882df2d9", "name": "Possibly dead Python function: cmd_exec_summary", "shortDescription": {"text": "Possibly dead Python function: cmd_exec_summary"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5dda3d58c8efca15", "name": "Possibly dead Python function: cmd_response_actions", "shortDescription": {"text": "Possibly dead Python function: cmd_response_actions"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e7d91960cf246147", "name": "Possibly dead Python function: cmd_closure_comment", "shortDescription": {"text": "Possibly dead Python function: cmd_closure_comment"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f748b8d91dd76705", "name": "Possibly dead Python function: cmd_fp_tuning", "shortDescription": {"text": "Possibly dead Python function: cmd_fp_tuning"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bead75b0f9233e05", "name": "No API endpoints detected", "shortDescription": {"text": "No API endpoints detected"}, "fullDescription": {"text": "The scanner did not find FastAPI/Flask/Express/NestJS/GraphQL/gRPC routes. If this repo exposes APIs, the framework may be unsupported."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f0b78a68599f68cb", "name": "Privileged port 11 in use", "shortDescription": {"text": "Privileged port 11 in use"}, "fullDescription": {"text": "Port 11 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-31f38c56a0d67db6", "name": "Privileged port 19 in use", "shortDescription": {"text": "Privileged port 19 in use"}, "fullDescription": {"text": "Port 19 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d63da3583b14afc0", "name": "Dockerfile runs as root: Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-de3c1f217d72a063", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-21df465f38f4932d", "name": "Dockerfile runs as root: docker/sandbox/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: docker/sandbox/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-248fbbfe4012d40e", "name": "Docker base image is tag-pinned but not digest-pinned: debian:bookworm-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: debian:bookworm-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9d36edcb5537f932", "name": "Dockerfile runs as root: docker/browser/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: docker/browser/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ea7188dc2174a133", "name": "Docker base image is tag-pinned but not digest-pinned: debian:bookworm-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: debian:bookworm-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-aa5acaa49eb8315b", "name": "Containers defined but no K8s/orchestration manifest found", "shortDescription": {"text": "Containers defined but no K8s/orchestration manifest found"}, "fullDescription": {"text": "Repo has Dockerfiles/compose but no Kubernetes/Nomad manifests. If the target deployment is K8s, the manifests may live in a separate ops repo."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9710c8d059e53154", "name": "No frontend routes/components detected", "shortDescription": {"text": "No frontend routes/components detected"}, "fullDescription": {"text": "No React/Vue/Next routes were found. This is fine for backend-only repos."}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-9c0a9db95c9c8d4f", "name": "Insecure pattern 'weak_hash' in config/sentinel_schema.py:54", "shortDescription": {"text": "Insecure pattern 'weak_hash' in config/sentinel_schema.py:54"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b198ba47fb14cb6c", "name": "Insecure pattern 'eval_used' in config/ngsiem/cql_grammar.json:411", "shortDescription": {"text": "Insecure pattern 'eval_used' in config/ngsiem/cql_grammar.json:411"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-5944d91a2bac0133", "name": "Insecure pattern 'weak_hash' in config/ngsiem/cql_grammar.json:1045", "shortDescription": {"text": "Insecure pattern 'weak_hash' in config/ngsiem/cql_grammar.json:1045"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7ac99ab8f314dd67", "name": "Insecure pattern 'weak_hash' in config/ngsiem/ngsiem_columns.yaml:1666", "shortDescription": {"text": "Insecure pattern 'weak_hash' in config/ngsiem/ngsiem_columns.yaml:1666"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b05410c830bc31e3", "name": "Insecure pattern 'weak_hash' in tools/velociraptor_ingest.py:226", "shortDescription": {"text": "Insecure pattern 'weak_hash' in tools/velociraptor_ingest.py:226"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2b7abc48d3ca7a6d", "name": "Insecure pattern 'weak_hash' in tools/generate_capabilities_pptx.py:433", "shortDescription": {"text": "Insecure pattern 'weak_hash' in tools/generate_capabilities_pptx.py:433"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-72aec4c7b7c85e2a", "name": "Insecure pattern 'weak_hash' in tools/opencti_publish.py:49", "shortDescription": {"text": "Insecure pattern 'weak_hash' in tools/opencti_publish.py:49"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bec412c9a6f00426", "name": "Insecure pattern 'weak_hash' in tools/generate_queries.py:156", "shortDescription": {"text": "Insecure pattern 'weak_hash' in tools/generate_queries.py:156"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4601e3ad3bb28677", "name": "No CI/CD pipelines detected", "shortDescription": {"text": "No CI/CD pipelines detected"}, "fullDescription": {"text": "No GitHub Actions, GitLab CI, or CircleCI configs found. Without CI you can't gate deploys on tests/lints."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d392bf1fed0da432", "name": "Very large file: socai.py (1827 lines)", "shortDescription": {"text": "Very large file: socai.py (1827 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d149188583b70c9b", "name": "Very large file: tools/eql.py (1600 lines)", "shortDescription": {"text": "Very large file: tools/eql.py (1600 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0968bf2f9cccf7a4", "name": "Very large file: tools/enrich.py (3170 lines)", "shortDescription": {"text": "Very large file: tools/enrich.py (3170 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2800ef67d0b0c221", "name": "Very large file: tools/generate_capabilities_pptx.py (1167 lines)", "shortDescription": {"text": "Very large file: tools/generate_capabilities_pptx.py (1167 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0318a7dd0011063d", "name": "Very large file: tools/browser_session.py (1727 lines)", "shortDescription": {"text": "Very large file: tools/browser_session.py (1727 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a1c361d755ec4f91", "name": "Very large file: mcp_server/prompts.py (2695 lines)", "shortDescription": {"text": "Very large file: mcp_server/prompts.py (2695 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-25378bb0704b21d1", "name": "Very large file: mcp_server/tools.py (5696 lines)", "shortDescription": {"text": "Very large file: mcp_server/tools.py (5696 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-793319a92c95ddab", "name": "Very large file: mcp_server/resources.py (1533 lines)", "shortDescription": {"text": "Very large file: mcp_server/resources.py (1533 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ea3b5e389d8c9c0f", "name": "Low test-to-source ratio", "shortDescription": {"text": "Low test-to-source ratio"}, "fullDescription": {"text": "27 tests / 127 src (ratio 0.21)."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-141b30a41e03817b", "name": "No license file detected", "shortDescription": {"text": "No license file detected"}, "fullDescription": {"text": "No LICENSE/COPYING/NOTICE file was found. Generated repositories often omit licensing, which blocks reuse and automated intake."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3ab5d313dda8e5f9", "name": "Debug logging residue appears in source files", "shortDescription": {"text": "Debug logging residue appears in source files"}, "fullDescription": {"text": "Found 597 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-72b2a6250083a784", "name": "Placeholder or mock-heavy implementation detected", "shortDescription": {"text": "Placeholder or mock-heavy implementation detected"}, "fullDescription": {"text": "Found 30 placeholder/mock markers across 13 source files. This often means the repo looks complete while core flows still use generated scaffolding or fake data."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2d0c7b7ab8f8aacf", "name": "Critical user flow still appears backed by mock or placeholder data", "shortDescription": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "fullDescription": {"text": "A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b9088664ace7f748", "name": "Composite production-readiness gap", "shortDescription": {"text": "Composite production-readiness gap"}, "fullDescription": {"text": "Multiple low-cost hardening controls are missing together: license, ci. Opus verification showed these co-occurring gaps are a better readiness signal than reading each flag in isolation."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-749d4bc1bd66df5f", "name": "Agent instructions exist but release-hardening basics are missing", "shortDescription": {"text": "Agent instructions exist but release-hardening basics are missing"}, "fullDescription": {"text": "AI-coder instruction files were found, but the repo is missing license, ci. Treat this as a contract gap: the agent is guided, but the generated output is not yet guarded by the controls that make it repeatable."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ea8f3013f588db25", "name": "Shallow git history limits provenance confidence", "shortDescription": {"text": "Shallow git history limits provenance confidence"}, "fullDescription": {"text": "The repository is a shallow clone. Origin/evolution analysis cannot distinguish fresh generation, imported legacy code, or long-lived human code with high confidence."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8424db9c75e04ba4", "name": "Very short observed git history", "shortDescription": {"text": "Very short observed git history"}, "fullDescription": {"text": "The repo has multiple source files but two or fewer visible commits. This is not a failure by itself, but it lowers confidence in evolution-based diagnosis."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-cc55229a7a3c078d", "name": "Agent authority lacks a verifier contract: .mcp.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: .mcp.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-391af68473b9bb00", "name": "Commented-code block (5 lines) in config/sentinel_schema.py:385", "shortDescription": {"text": "Commented-code block (5 lines) in config/sentinel_schema.py:385"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-0b8ab11bdf547a65", "name": "Legacy-named symbol `mock_copy` in tests/test_sandbox_session.py:318", "shortDescription": {"text": "Legacy-named symbol `mock_copy` in tests/test_sandbox_session.py:318"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1b431c38ada1a8ad", "name": "Commented-code block (6 lines) in api/auth.py:21", "shortDescription": {"text": "Commented-code block (6 lines) in api/auth.py:21"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1b2201b5ee035c41", "name": "Commented-code block (5 lines) in api/actions.py:246", "shortDescription": {"text": "Commented-code block (5 lines) in api/actions.py:246"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1a9fee553077c4ac", "name": "Commented-code block (7 lines) in scripts/token_cost_report.py:86", "shortDescription": {"text": "Commented-code block (7 lines) in scripts/token_cost_report.py:86"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e99f8c470ea2e4ac", "name": "Commented-code block (6 lines) in tools/case_memory.py:41", "shortDescription": {"text": "Commented-code block (6 lines) in tools/case_memory.py:41"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b68548482e5779e0", "name": "Commented-code block (5 lines) in tools/darkweb.py:286", "shortDescription": {"text": "Commented-code block (5 lines) in tools/darkweb.py:286"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-4d9f38ea4ec79c54", "name": "Commented-code block (5 lines) in tools/evtx_correlate.py:228", "shortDescription": {"text": "Commented-code block (5 lines) in tools/evtx_correlate.py:228"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-71b68c1eb525ff1d", "name": "Commented-code block (5 lines) in tools/save_report.py:67", "shortDescription": {"text": "Commented-code block (5 lines) in tools/save_report.py:67"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-98273b0702369fbc", "name": "Commented-code block (6 lines) in tools/response_actions.py:108", "shortDescription": {"text": "Commented-code block (6 lines) in tools/response_actions.py:108"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-5800decd1ccb1d97", "name": "Commented-code block (5 lines) in tools/case_landscape.py:107", "shortDescription": {"text": "Commented-code block (5 lines) in tools/case_landscape.py:107"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8cff89adbed6e1d4", "name": "Commented-code block (5 lines) in tools/score_verdicts.py:48", "shortDescription": {"text": "Commented-code block (5 lines) in tools/score_verdicts.py:48"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7cda909c67339d26", "name": "Commented-code block (5 lines) in tools/static_file_analyse.py:327", "shortDescription": {"text": "Commented-code block (5 lines) in tools/static_file_analyse.py:327"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7bc6654d55f7f1fe", "name": "Commented-code block (12 lines) in tools/playbooks.py:340", "shortDescription": {"text": "Commented-code block (12 lines) in tools/playbooks.py:340"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f28e3229d422b8aa", "name": "Commented-code block (5 lines) in tools/audit_user.py:107", "shortDescription": {"text": "Commented-code block (5 lines) in tools/audit_user.py:107"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8096df5e5740787b", "name": "Commented-code block (11 lines) in tools/common.py:71", "shortDescription": {"text": "Commented-code block (11 lines) in tools/common.py:71"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-05f13908c036b5d3", "name": "Network/subprocess call without timeout or try/except \u2014 tools/browser_session.py:206", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 tools/browser_session.py:206"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b7ccec455b26e848", "name": "Commented-code block (5 lines) in tools/geoip.py:180", "shortDescription": {"text": "Commented-code block (5 lines) in tools/geoip.py:180"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e113c6a1bf8c5a83", "name": "Commented-code block (7 lines) in tools/fp_tuning_ticket.py:277", "shortDescription": {"text": "Commented-code block (7 lines) in tools/fp_tuning_ticket.py:277"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b2ba31fb6b79a566", "name": "Commented-code block (5 lines) in tools/campaign_cluster.py:35", "shortDescription": {"text": "Commented-code block (5 lines) in tools/campaign_cluster.py:35"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-24c17ac303bc3515", "name": "Commented-code block (8 lines) in mcp_server/tools.py:56", "shortDescription": {"text": "Commented-code block (8 lines) in mcp_server/tools.py:56"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c4578ee0ddca672b", "name": "Commented-code block (8 lines) in mcp_server/config.py:12", "shortDescription": {"text": "Commented-code block (8 lines) in mcp_server/config.py:12"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-9b6f65ebd542ac87", "name": "Commented-code block (7 lines) in mcp_server/watchdog.py:75", "shortDescription": {"text": "Commented-code block (7 lines) in mcp_server/watchdog.py:75"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-dece8a48a8bf0757", "name": "Commented-code block (11 lines) in mcp_server/usage.py:67", "shortDescription": {"text": "Commented-code block (11 lines) in mcp_server/usage.py:67"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a960de296e2675ec", "name": "Commented-code block (6 lines) in mcp_server/server.py:580", "shortDescription": {"text": "Commented-code block (6 lines) in mcp_server/server.py:580"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2c04133e54348533", "name": "Near-duplicate function bodies in 2 places", "shortDescription": {"text": "Near-duplicate function bodies in 2 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\napi/actions.py:memory_dump_guide, mcp_server/tools.py:memory_dump_guide\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/22745"}, "properties": {"repository": "WillBanasik/socai", "repoUrl": "https://github.com/WillBanasik/socai", "branch": "main"}, "results": [{"ruleId": "scanner-41ee6671c151679f", "level": "note", "message": {"text": "Possibly dead Python function: cmd_create_case"}, "properties": {"repobilityId": "3db049f02fb7b546", "scanner": "scanner-primary", "fingerprint": "41ee6671c151679f", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "socai.py:80"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cf2cc581bde109f6", "level": "note", "message": {"text": "Possibly dead Python function: cmd_report"}, "properties": {"repobilityId": "e07177dc4040e77f", "scanner": "scanner-primary", "fingerprint": "cf2cc581bde109f6", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "socai.py:97"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4ce7bc7b827a5c81", "level": "note", "message": {"text": "Possibly dead Python function: cmd_weekly"}, "properties": {"repobilityId": "155955d53f092462", "scanner": "scanner-primary", "fingerprint": "4ce7bc7b827a5c81", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "socai.py:105"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7ef510366ac34778", "level": "note", "message": {"text": "Possibly dead Python function: cmd_close"}, "properties": {"repobilityId": "6b2e577632ad5daf", "scanner": "scanner-primary", "fingerprint": "7ef510366ac34778", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "socai.py:115"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cc557df9719f7724", "level": "note", "message": {"text": "Possibly dead Python function: cmd_list"}, "properties": {"repobilityId": "bd09044da90857da", "scanner": "scanner-primary", "fingerprint": "cc557df9719f7724", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "socai.py:123"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2fa334acb4a01b0c", "level": "note", "message": {"text": "Possibly dead Python function: cmd_enrich"}, "properties": {"repobilityId": "711e68eefdac2bc7", "scanner": "scanner-primary", "fingerprint": "2fa334acb4a01b0c", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "socai.py:139"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7818e8ea0ad5eccd", "level": "note", "message": {"text": "Possibly dead Python function: cmd_client_query"}, "properties": {"repobilityId": "b9b5f9cf95131966", "scanner": "scanner-primary", "fingerprint": "7818e8ea0ad5eccd", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "socai.py:149"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-66c5c02f75d45ddd", "level": "note", "message": {"text": "Possibly dead Python function: cmd_mdr_report"}, "properties": {"repobilityId": "c4322357e985d442", "scanner": "scanner-primary", "fingerprint": "66c5c02f75d45ddd", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "socai.py:154"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-855aa43a11216013", "level": "note", "message": {"text": "Possibly dead Python function: cmd_pup_report"}, "properties": {"repobilityId": "3a179f83e994f084", "scanner": "scanner-primary", "fingerprint": "855aa43a11216013", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "socai.py:160"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-31598f87dc94c250", "level": "note", "message": {"text": "Possibly dead Python function: cmd_secarch"}, "properties": {"repobilityId": "479301a34bad1836", "scanner": "scanner-primary", "fingerprint": "31598f87dc94c250", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "socai.py:166"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ecc40f8c521474c3", "level": "note", "message": {"text": "Possibly dead Python function: cmd_queries"}, "properties": {"repobilityId": "603c8e79fc76839f", "scanner": "scanner-primary", "fingerprint": "ecc40f8c521474c3", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "socai.py:172"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7ef67f33f35afc02", "level": "note", "message": {"text": "Possibly dead Python function: cmd_triage"}, "properties": {"repobilityId": "536f0bea0c8a052a", "scanner": "scanner-primary", "fingerprint": "7ef67f33f35afc02", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "socai.py:189"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a1de347d9106a961", "level": "note", "message": {"text": "Possibly dead Python function: cmd_email_analyse"}, "properties": {"repobilityId": "598c88810248558b", "scanner": "scanner-primary", "fingerprint": "a1de347d9106a961", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "socai.py:196"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-657a6a5631e2b496", "level": "note", "message": {"text": "Possibly dead Python function: cmd_landscape"}, "properties": {"repobilityId": "ebca14fe9a913619", "scanner": "scanner-primary", "fingerprint": "657a6a5631e2b496", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "socai.py:204"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-da70ed7b1315f513", "level": "note", "message": {"text": "Possibly dead Python function: cmd_campaigns"}, "properties": {"repobilityId": "1336d189b5cf3722", "scanner": "scanner-primary", "fingerprint": "da70ed7b1315f513", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "socai.py:216"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-59963da7125e9203", "level": "note", "message": {"text": "Possibly dead Python function: cmd_errors"}, "properties": {"repobilityId": "2f18e40b54133291", "scanner": "scanner-primary", "fingerprint": "59963da7125e9203", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "socai.py:223"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-10a7d9495a61c154", "level": "note", "message": {"text": "Possibly dead Python function: cmd_mcp_usage"}, "properties": {"repobilityId": "92e197223c0aa20e", "scanner": "scanner-primary", "fingerprint": "10a7d9495a61c154", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "socai.py:234"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4077cbcb8ce28ff0", "level": "note", "message": {"text": "Possibly dead Python function: cmd_sandbox"}, "properties": {"repobilityId": "984a03e592024629", "scanner": "scanner-primary", "fingerprint": "4077cbcb8ce28ff0", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "socai.py:247"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2e91c4795cb72fc6", "level": "note", "message": {"text": "Possibly dead Python function: cmd_exposure"}, "properties": {"repobilityId": "4904f7071435eba4", "scanner": "scanner-primary", "fingerprint": "2e91c4795cb72fc6", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "socai.py:254"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a54a630ea91db86a", "level": "note", "message": {"text": "Possibly dead Python function: cmd_coverage"}, "properties": {"repobilityId": "27e451675a10891a", "scanner": "scanner-primary", "fingerprint": "a54a630ea91db86a", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "socai.py:292"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6d403c935cf3b974", "level": "note", "message": {"text": "Possibly dead Python function: cmd_anomalies"}, "properties": {"repobilityId": "d3d940f2dd7f0b42", "scanner": "scanner-primary", "fingerprint": "6d403c935cf3b974", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "socai.py:338"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b14fa407a926e1e2", "level": "note", "message": {"text": "Possibly dead Python function: cmd_timeline"}, "properties": {"repobilityId": "16ddf9ea6991672e", "scanner": "scanner-primary", "fingerprint": "b14fa407a926e1e2", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "socai.py:345"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a08d113bc642ce15", "level": "note", "message": {"text": "Possibly dead Python function: cmd_pe_analysis"}, "properties": {"repobilityId": "11e962aae13dd7ab", "scanner": "scanner-primary", "fingerprint": "a08d113bc642ce15", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "socai.py:356"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b7bcb5395316bea8", "level": "note", "message": {"text": "Possibly dead Python function: cmd_yara"}, "properties": {"repobilityId": "98f58bb97edac595", "scanner": "scanner-primary", "fingerprint": "b7bcb5395316bea8", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "socai.py:368"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-172c25cc82b8bb53", "level": "note", "message": {"text": "Possibly dead Python function: cmd_evtx"}, "properties": {"repobilityId": "0dd2454d23db5c05", "scanner": "scanner-primary", "fingerprint": "172c25cc82b8bb53", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "socai.py:379"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7dfbe90ba90dc1a5", "level": "note", "message": {"text": "Possibly dead Python function: cmd_cve_context"}, "properties": {"repobilityId": "2b6e18eac2ea1998", "scanner": "scanner-primary", "fingerprint": "7dfbe90ba90dc1a5", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "socai.py:391"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f2c114f1882df2d9", "level": "note", "message": {"text": "Possibly dead Python function: cmd_exec_summary"}, "properties": {"repobilityId": "6a62d004c34612f7", "scanner": "scanner-primary", "fingerprint": "f2c114f1882df2d9", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "socai.py:402"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5dda3d58c8efca15", "level": "note", "message": {"text": "Possibly dead Python function: cmd_response_actions"}, "properties": {"repobilityId": "ee1ea3e6f17b27ee", "scanner": "scanner-primary", "fingerprint": "5dda3d58c8efca15", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "socai.py:408"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e7d91960cf246147", "level": "note", "message": {"text": "Possibly dead Python function: cmd_closure_comment"}, "properties": {"repobilityId": "43af9a868bcaffe1", "scanner": "scanner-primary", "fingerprint": "e7d91960cf246147", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "socai.py:421"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f748b8d91dd76705", "level": "note", "message": {"text": "Possibly dead Python function: cmd_fp_tuning"}, "properties": {"repobilityId": "aa4d47ca45385ed9", "scanner": "scanner-primary", "fingerprint": "f748b8d91dd76705", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "socai.py:461"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bead75b0f9233e05", "level": "none", "message": {"text": "No API endpoints detected"}, "properties": {"repobilityId": "0f8bb852027c38f8", "scanner": "scanner-primary", "fingerprint": "bead75b0f9233e05", "layer": "api", "severity": "info", "confidence": 1.0, "tags": ["coverage"]}}, {"ruleId": "scanner-f0b78a68599f68cb", "level": "warning", "message": {"text": "Privileged port 11 in use"}, "properties": {"repobilityId": "5b3038c67fabb4c8", "scanner": "scanner-primary", "fingerprint": "f0b78a68599f68cb", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tail-usage.sh"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-31f38c56a0d67db6", "level": "warning", "message": {"text": "Privileged port 19 in use"}, "properties": {"repobilityId": "a6b5b06deac36eac", "scanner": "scanner-primary", "fingerprint": "31f38c56a0d67db6", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tail-usage.sh"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d63da3583b14afc0", "level": "warning", "message": {"text": "Dockerfile runs as root: Dockerfile"}, "properties": {"repobilityId": "a2ed1bd120e507db", "scanner": "scanner-primary", "fingerprint": "d63da3583b14afc0", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-de3c1f217d72a063", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "properties": {"repobilityId": "907cfd6198c0f2e7", "scanner": "scanner-primary", "fingerprint": "de3c1f217d72a063", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Dockerfile"}, "region": {"startLine": 11}}}]}, {"ruleId": "scanner-21df465f38f4932d", "level": "warning", "message": {"text": "Dockerfile runs as root: docker/sandbox/Dockerfile"}, "properties": {"repobilityId": "e6e2f7f3dc844007", "scanner": "scanner-primary", "fingerprint": "21df465f38f4932d", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-248fbbfe4012d40e", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: debian:bookworm-slim"}, "properties": {"repobilityId": "18127ed8cf537445", "scanner": "scanner-primary", "fingerprint": "248fbbfe4012d40e", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docker/sandbox/Dockerfile"}, "region": {"startLine": 3}}}]}, {"ruleId": "scanner-9d36edcb5537f932", "level": "warning", "message": {"text": "Dockerfile runs as root: docker/browser/Dockerfile"}, "properties": {"repobilityId": "e793b61b1a0d6efc", "scanner": "scanner-primary", "fingerprint": "9d36edcb5537f932", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-ea7188dc2174a133", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: debian:bookworm-slim"}, "properties": {"repobilityId": "a689a74bda1539bf", "scanner": "scanner-primary", "fingerprint": "ea7188dc2174a133", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docker/browser/Dockerfile"}, "region": {"startLine": 7}}}]}, {"ruleId": "scanner-aa5acaa49eb8315b", "level": "note", "message": {"text": "Containers defined but no K8s/orchestration manifest found"}, "properties": {"repobilityId": "b230ea9b68736081", "scanner": "scanner-primary", "fingerprint": "aa5acaa49eb8315b", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["coverage", "deployment"]}}, {"ruleId": "scanner-9710c8d059e53154", "level": "none", "message": {"text": "No frontend routes/components detected"}, "properties": {"repobilityId": "44ca61485762e494", "scanner": "scanner-primary", "fingerprint": "9710c8d059e53154", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["coverage"]}}, {"ruleId": "scanner-9c0a9db95c9c8d4f", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in config/sentinel_schema.py:54"}, "properties": {"repobilityId": "505e787badd8833b", "scanner": "scanner-primary", "fingerprint": "9c0a9db95c9c8d4f", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "config/sentinel_schema.py"}, "region": {"startLine": 54}}}]}, {"ruleId": "scanner-b198ba47fb14cb6c", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in config/ngsiem/cql_grammar.json:411"}, "properties": {"repobilityId": "61751a871e90679f", "scanner": "scanner-primary", "fingerprint": "b198ba47fb14cb6c", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "config/ngsiem/cql_grammar.json"}, "region": {"startLine": 411}}}]}, {"ruleId": "scanner-5944d91a2bac0133", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in config/ngsiem/cql_grammar.json:1045"}, "properties": {"repobilityId": "5747640c88d76dab", "scanner": "scanner-primary", "fingerprint": "5944d91a2bac0133", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "config/ngsiem/cql_grammar.json"}, "region": {"startLine": 1045}}}]}, {"ruleId": "scanner-7ac99ab8f314dd67", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in config/ngsiem/ngsiem_columns.yaml:1666"}, "properties": {"repobilityId": "352515935c4177b8", "scanner": "scanner-primary", "fingerprint": "7ac99ab8f314dd67", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "config/ngsiem/ngsiem_columns.yaml"}, "region": {"startLine": 1666}}}]}, {"ruleId": "scanner-b05410c830bc31e3", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in tools/velociraptor_ingest.py:226"}, "properties": {"repobilityId": "4693ba81e499f5e7", "scanner": "scanner-primary", "fingerprint": "b05410c830bc31e3", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/velociraptor_ingest.py"}, "region": {"startLine": 226}}}]}, {"ruleId": "scanner-2b7abc48d3ca7a6d", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in tools/generate_capabilities_pptx.py:433"}, "properties": {"repobilityId": "00335ad1b0b4f29b", "scanner": "scanner-primary", "fingerprint": "2b7abc48d3ca7a6d", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/generate_capabilities_pptx.py"}, "region": {"startLine": 433}}}]}, {"ruleId": "scanner-72aec4c7b7c85e2a", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in tools/opencti_publish.py:49"}, "properties": {"repobilityId": "b7874a77e6b7986a", "scanner": "scanner-primary", "fingerprint": "72aec4c7b7c85e2a", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/opencti_publish.py"}, "region": {"startLine": 49}}}]}, {"ruleId": "scanner-bec412c9a6f00426", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in tools/generate_queries.py:156"}, "properties": {"repobilityId": "c5c58f0b3d5a6bb0", "scanner": "scanner-primary", "fingerprint": "bec412c9a6f00426", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/generate_queries.py"}, "region": {"startLine": 156}}}]}, {"ruleId": "scanner-4601e3ad3bb28677", "level": "warning", "message": {"text": "No CI/CD pipelines detected"}, "properties": {"repobilityId": "c3ee439bce2bc51e", "scanner": "scanner-primary", "fingerprint": "4601e3ad3bb28677", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["coverage"]}}, {"ruleId": "scanner-d392bf1fed0da432", "level": "note", "message": {"text": "Very large file: socai.py (1827 lines)"}, "properties": {"repobilityId": "ab453d6c3b1b45d9", "scanner": "scanner-primary", "fingerprint": "d392bf1fed0da432", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-d149188583b70c9b", "level": "note", "message": {"text": "Very large file: tools/eql.py (1600 lines)"}, "properties": {"repobilityId": "045c0a8ca6bad3d2", "scanner": "scanner-primary", "fingerprint": "d149188583b70c9b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-0968bf2f9cccf7a4", "level": "note", "message": {"text": "Very large file: tools/enrich.py (3170 lines)"}, "properties": {"repobilityId": "86819d2074649494", "scanner": "scanner-primary", "fingerprint": "0968bf2f9cccf7a4", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-2800ef67d0b0c221", "level": "note", "message": {"text": "Very large file: tools/generate_capabilities_pptx.py (1167 lines)"}, "properties": {"repobilityId": "d128b2ce06779522", "scanner": "scanner-primary", "fingerprint": "2800ef67d0b0c221", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-0318a7dd0011063d", "level": "note", "message": {"text": "Very large file: tools/browser_session.py (1727 lines)"}, "properties": {"repobilityId": "730272852131997e", "scanner": "scanner-primary", "fingerprint": "0318a7dd0011063d", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-a1c361d755ec4f91", "level": "note", "message": {"text": "Very large file: mcp_server/prompts.py (2695 lines)"}, "properties": {"repobilityId": "e6d3d22e3a4993e6", "scanner": "scanner-primary", "fingerprint": "a1c361d755ec4f91", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-25378bb0704b21d1", "level": "note", "message": {"text": "Very large file: mcp_server/tools.py (5696 lines)"}, "properties": {"repobilityId": "01ba89c188ed8ce5", "scanner": "scanner-primary", "fingerprint": "25378bb0704b21d1", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-793319a92c95ddab", "level": "note", "message": {"text": "Very large file: mcp_server/resources.py (1533 lines)"}, "properties": {"repobilityId": "bf8a8aa24d7c0293", "scanner": "scanner-primary", "fingerprint": "793319a92c95ddab", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-ea3b5e389d8c9c0f", "level": "note", "message": {"text": "Low test-to-source ratio"}, "properties": {"repobilityId": "ef7b2552cc00a375", "scanner": "scanner-primary", "fingerprint": "ea3b5e389d8c9c0f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["tests"]}}, {"ruleId": "scanner-141b30a41e03817b", "level": "note", "message": {"text": "No license file detected"}, "properties": {"repobilityId": "d0b1590e1d410032", "scanner": "scanner-primary", "fingerprint": "141b30a41e03817b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["license", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "6296426b58b8e434", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-72b2a6250083a784", "level": "warning", "message": {"text": "Placeholder or mock-heavy implementation detected"}, "properties": {"repobilityId": "e196a9f25cd2cc47", "scanner": "scanner-primary", "fingerprint": "72b2a6250083a784", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "incomplete", "generated-repo-pattern"]}}, {"ruleId": "scanner-2d0c7b7ab8f8aacf", "level": "warning", "message": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "properties": {"repobilityId": "060d3651b948fc12", "scanner": "scanner-primary", "fingerprint": "2d0c7b7ab8f8aacf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "critical-flow", "generated-repo-pattern"]}}, {"ruleId": "scanner-b9088664ace7f748", "level": "note", "message": {"text": "Composite production-readiness gap"}, "properties": {"repobilityId": "5e92c24612f5b0d6", "scanner": "scanner-primary", "fingerprint": "b9088664ace7f748", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["production-readiness", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-749d4bc1bd66df5f", "level": "warning", "message": {"text": "Agent instructions exist but release-hardening basics are missing"}, "properties": {"repobilityId": "bb2192092744e0c8", "scanner": "scanner-primary", "fingerprint": "749d4bc1bd66df5f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-ea8f3013f588db25", "level": "note", "message": {"text": "Shallow git history limits provenance confidence"}, "properties": {"repobilityId": "612207e29326cd45", "scanner": "scanner-primary", "fingerprint": "ea8f3013f588db25", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-8424db9c75e04ba4", "level": "none", "message": {"text": "Very short observed git history"}, "properties": {"repobilityId": "5de84a4d41affd82", "scanner": "scanner-primary", "fingerprint": "8424db9c75e04ba4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-cc55229a7a3c078d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .mcp.json"}, "properties": {"repobilityId": "51942fb3d5b8b5b4", "scanner": "scanner-primary", "fingerprint": "cc55229a7a3c078d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "mcp_config"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".mcp.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-391af68473b9bb00", "level": "none", "message": {"text": "Commented-code block (5 lines) in config/sentinel_schema.py:385"}, "properties": {"repobilityId": "316dfedb9d6a199d", "scanner": "scanner-primary", "fingerprint": "391af68473b9bb00", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-0b8ab11bdf547a65", "level": "note", "message": {"text": "Legacy-named symbol `mock_copy` in tests/test_sandbox_session.py:318"}, "properties": {"repobilityId": "e7834eb3460bc3cc", "scanner": "scanner-primary", "fingerprint": "0b8ab11bdf547a65", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-1b431c38ada1a8ad", "level": "none", "message": {"text": "Commented-code block (6 lines) in api/auth.py:21"}, "properties": {"repobilityId": "ab36bb348968fe44", "scanner": "scanner-primary", "fingerprint": "1b431c38ada1a8ad", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-1b2201b5ee035c41", "level": "none", "message": {"text": "Commented-code block (5 lines) in api/actions.py:246"}, "properties": {"repobilityId": "bf18ed52ddebc06d", "scanner": "scanner-primary", "fingerprint": "1b2201b5ee035c41", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-1a9fee553077c4ac", "level": "none", "message": {"text": "Commented-code block (7 lines) in scripts/token_cost_report.py:86"}, "properties": {"repobilityId": "1ef2b9d8c6df9e9a", "scanner": "scanner-primary", "fingerprint": "1a9fee553077c4ac", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-e99f8c470ea2e4ac", "level": "none", "message": {"text": "Commented-code block (6 lines) in tools/case_memory.py:41"}, "properties": {"repobilityId": "90402e98f6171845", "scanner": "scanner-primary", "fingerprint": "e99f8c470ea2e4ac", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b68548482e5779e0", "level": "none", "message": {"text": "Commented-code block (5 lines) in tools/darkweb.py:286"}, "properties": {"repobilityId": "3dfac70fc0d0a0c2", "scanner": "scanner-primary", "fingerprint": "b68548482e5779e0", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-4d9f38ea4ec79c54", "level": "none", "message": {"text": "Commented-code block (5 lines) in tools/evtx_correlate.py:228"}, "properties": {"repobilityId": "a17583603e767c82", "scanner": "scanner-primary", "fingerprint": "4d9f38ea4ec79c54", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-71b68c1eb525ff1d", "level": "none", "message": {"text": "Commented-code block (5 lines) in tools/save_report.py:67"}, "properties": {"repobilityId": "872eebb41fc4b2a1", "scanner": "scanner-primary", "fingerprint": "71b68c1eb525ff1d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-98273b0702369fbc", "level": "none", "message": {"text": "Commented-code block (6 lines) in tools/response_actions.py:108"}, "properties": {"repobilityId": "c7c298a5583c8853", "scanner": "scanner-primary", "fingerprint": "98273b0702369fbc", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-5800decd1ccb1d97", "level": "none", "message": {"text": "Commented-code block (5 lines) in tools/case_landscape.py:107"}, "properties": {"repobilityId": "dfefb410e4f3e6ba", "scanner": "scanner-primary", "fingerprint": "5800decd1ccb1d97", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-8cff89adbed6e1d4", "level": "none", "message": {"text": "Commented-code block (5 lines) in tools/score_verdicts.py:48"}, "properties": {"repobilityId": "3bd00e2694c9150a", "scanner": "scanner-primary", "fingerprint": "8cff89adbed6e1d4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-7cda909c67339d26", "level": "none", "message": {"text": "Commented-code block (5 lines) in tools/static_file_analyse.py:327"}, "properties": {"repobilityId": "5bc01d758058a9df", "scanner": "scanner-primary", "fingerprint": "7cda909c67339d26", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-7bc6654d55f7f1fe", "level": "none", "message": {"text": "Commented-code block (12 lines) in tools/playbooks.py:340"}, "properties": {"repobilityId": "a212ce8afcb2f1f7", "scanner": "scanner-primary", "fingerprint": "7bc6654d55f7f1fe", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-f28e3229d422b8aa", "level": "none", "message": {"text": "Commented-code block (5 lines) in tools/audit_user.py:107"}, "properties": {"repobilityId": "26c177a2d4a9baa7", "scanner": "scanner-primary", "fingerprint": "f28e3229d422b8aa", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-8096df5e5740787b", "level": "none", "message": {"text": "Commented-code block (11 lines) in tools/common.py:71"}, "properties": {"repobilityId": "301faec3d7b6eb50", "scanner": "scanner-primary", "fingerprint": "8096df5e5740787b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-05f13908c036b5d3", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 tools/browser_session.py:206"}, "properties": {"repobilityId": "6bec00628ddf3e5a", "scanner": "scanner-primary", "fingerprint": "05f13908c036b5d3", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-b7ccec455b26e848", "level": "none", "message": {"text": "Commented-code block (5 lines) in tools/geoip.py:180"}, "properties": {"repobilityId": "c20268d557c1cb22", "scanner": "scanner-primary", "fingerprint": "b7ccec455b26e848", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-e113c6a1bf8c5a83", "level": "none", "message": {"text": "Commented-code block (7 lines) in tools/fp_tuning_ticket.py:277"}, "properties": {"repobilityId": "3e29b7da51d9ccb6", "scanner": "scanner-primary", "fingerprint": "e113c6a1bf8c5a83", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b2ba31fb6b79a566", "level": "none", "message": {"text": "Commented-code block (5 lines) in tools/campaign_cluster.py:35"}, "properties": {"repobilityId": "d6faca4b52a99e1f", "scanner": "scanner-primary", "fingerprint": "b2ba31fb6b79a566", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-24c17ac303bc3515", "level": "none", "message": {"text": "Commented-code block (8 lines) in mcp_server/tools.py:56"}, "properties": {"repobilityId": "69f0b984c64257ce", "scanner": "scanner-primary", "fingerprint": "24c17ac303bc3515", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-c4578ee0ddca672b", "level": "none", "message": {"text": "Commented-code block (8 lines) in mcp_server/config.py:12"}, "properties": {"repobilityId": "d53fd3ff586e1c1c", "scanner": "scanner-primary", "fingerprint": "c4578ee0ddca672b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-9b6f65ebd542ac87", "level": "none", "message": {"text": "Commented-code block (7 lines) in mcp_server/watchdog.py:75"}, "properties": {"repobilityId": "2e2d22838beb1155", "scanner": "scanner-primary", "fingerprint": "9b6f65ebd542ac87", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-dece8a48a8bf0757", "level": "none", "message": {"text": "Commented-code block (11 lines) in mcp_server/usage.py:67"}, "properties": {"repobilityId": "9ec45888392a41b5", "scanner": "scanner-primary", "fingerprint": "dece8a48a8bf0757", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a960de296e2675ec", "level": "none", "message": {"text": "Commented-code block (6 lines) in mcp_server/server.py:580"}, "properties": {"repobilityId": "444b2eb947c0dba2", "scanner": "scanner-primary", "fingerprint": "a960de296e2675ec", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "59633b721c3e973b", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "9caa51b7df3deaac", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "60b4802b38cb89ec", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "d32b52aabf07715b", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "fd21b2fe6c8f6e90", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}]}]}