{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "MINED124", "name": "[MINED124] requirements.txt: `pyyaml` has no version pin: Unpinned pip requirement means every fresh install may resolve", "shortDescription": {"text": "[MINED124] requirements.txt: `pyyaml` has no version pin: Unpinned pip requirement means every fresh install may resolve a different version. Newer releases can introduce malicious code (typosquats, account compromises). Reproducible instal"}, "fullDescription": {"text": "Replace `pyyaml` with `pyyaml==<version>` and manage upgrades through PRs / Dependabot."}, "properties": {"scanner": "repobility-supply-chain", "category": "dependency", "severity": "medium", "confidence": 0.9, "cwe": "", "owasp": ""}}, {"id": "MINED109", "name": "[MINED109] Mutable default argument in `get_bounds` (dict): `def get_bounds(... = []/{}/set())` \u2014 Python's default value", "shortDescription": {"text": "[MINED109] Mutable default argument in `get_bounds` (dict): `def get_bounds(... = []/{}/set())` \u2014 Python's default value is constructed ONCE at function definition time and shared across all calls. Mutating it in one call mutates it for eve"}, "fullDescription": {"text": "Use None as the default and create the collection inside the function: `def get_bounds(x=None): x = x or []`"}, "properties": {"scanner": "repobility-ast-engine", "category": "quality", "severity": "medium", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "MINED111", "name": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or ", "shortDescription": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "fullDescription": {"text": "Either narrow the exception type, log the exception with `logger.exception(...)`, or re-raise after handling."}, "properties": {"scanner": "repobility-ast-engine", "category": "quality", "severity": "medium", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "AIC004", "name": "Suspicious implementation file appears unreferenced", "shortDescription": {"text": "Suspicious implementation file appears unreferenced"}, "fullDescription": {"text": "Confirm whether this file is reachable. If not, delete it; if yes, wire it through explicit imports, routes, or entry points and add a test that proves the path executes."}, "properties": {"scanner": "repobility-ai-code-hygiene", "category": "quality", "severity": "medium", "confidence": 0.78, "cwe": "", "owasp": ""}}, {"id": "AIC001", "name": "Parallel implementation file sits beside a canonical file", "shortDescription": {"text": "Parallel implementation file sits beside a canonical file"}, "fullDescription": {"text": "Merge the intended change into the canonical file, update tests/imports, and delete the parallel implementation if it is not the active entry point."}, "properties": {"scanner": "repobility-ai-code-hygiene", "category": "quality", "severity": "medium", "confidence": 0.82, "cwe": "", "owasp": ""}}, {"id": "COMP001", "name": "[COMP001] High cognitive complexity: Function `parse_table` has cognitive complexity 15 (SonarSource scale). Cognitive c", "shortDescription": {"text": "[COMP001] High cognitive complexity: Function `parse_table` has cognitive complexity 15 (SonarSource scale). Cognitive complexity measures how hard the function is for a human to understand \u2014 nested branches, boolean chains, and recursion a"}, "fullDescription": {"text": "Extract nested branches into named helper functions; flatten early-return / guard clauses; replace long if/elif chains with dispatch dicts or polymorphism. SonarQube's threshold for 'should refactor' is 15 \u2014 yours is 15."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "medium", "confidence": 0.95, "cwe": "", "owasp": ""}}, {"id": "AIC003", "name": "Duplicated implementation block across source files", "shortDescription": {"text": "Duplicated implementation block across source files"}, "fullDescription": {"text": "Extract the shared behavior into one function/module or delete the inactive duplicate after proving which path is used."}, "properties": {"scanner": "repobility-ai-code-hygiene", "category": "quality", "severity": "low", "confidence": 0.86, "cwe": "", "owasp": ""}}, {"id": "AIC002", "name": "Source file name looks like an AI patch artifact", "shortDescription": {"text": "Source file name looks like an AI patch artifact"}, "fullDescription": {"text": "Rename it to the domain concept it implements or merge it into the existing module it was meant to change."}, "properties": {"scanner": "repobility-ai-code-hygiene", "category": "quality", "severity": "low", "confidence": 0.62, "cwe": "", "owasp": ""}}, {"id": "MINED042", "name": "[MINED042] Cpp New Without Delete: C++ raw new without RAII / unique_ptr \u2014 memory leak risk.", "shortDescription": {"text": "[MINED042] Cpp New Without Delete: C++ raw new without RAII / unique_ptr \u2014 memory leak risk."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-401 /  for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "MINED043", "name": "[MINED043] Http Not Https: Hardcoded http:// (not localhost) for endpoints that handle credentials or data.", "shortDescription": {"text": "[MINED043] Http Not Https: Hardcoded http:// (not localhost) for endpoints that handle credentials or data."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-319 / A02:2021 for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "MINED075", "name": "[MINED075] C Malloc No Check: malloc/calloc/realloc return value used without checking for NULL.", "shortDescription": {"text": "[MINED075] C Malloc No Check: malloc/calloc/realloc return value used without checking for NULL."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-690 /  for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "MINED022", "name": "[MINED022] C Strcpy (and 11 more): Same pattern found in 11 additional files. Review if needed.", "shortDescription": {"text": "[MINED022] C Strcpy (and 11 more): Same pattern found in 11 additional files. Review if needed."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-120 /  for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 0.2, "cwe": "", "owasp": ""}}, {"id": "MINED072", "name": "[MINED072] Python Pass Only Class: class Foo: pass \u2014 stub waiting to be filled in.", "shortDescription": {"text": "[MINED072] Python Pass Only Class: class Foo: pass \u2014 stub waiting to be filled in."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-1188 /  for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "MINED050", "name": "[MINED050] Stub Only Function: Function declared but body is just pass, return None, raise NotImplementedError, or TODO ", "shortDescription": {"text": "[MINED050] Stub Only Function: Function declared but body is just pass, return None, raise NotImplementedError, or TODO comment."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-1188 /  for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "MINED067", "name": "[MINED067] Python Requests No Timeout: requests.get/post/etc. without timeout= can hang forever.", "shortDescription": {"text": "[MINED067] Python Requests No Timeout: requests.get/post/etc. without timeout= can hang forever."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-400 /  for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "MINED134", "name": "[MINED134] Binary file `tools/perf/tests/pe-file.exe` committed in source repo: `tools/perf/tests/pe-file.exe` is a .exe", "shortDescription": {"text": "[MINED134] Binary file `tools/perf/tests/pe-file.exe` committed in source repo: `tools/perf/tests/pe-file.exe` is a .exe binary (75,595 bytes) committed to a repo that otherwise has 63886 source files. Trojan binaries inside otherwise-norma"}, "fullDescription": {"text": "Audit the binary's provenance. If it's vendored library code, document it in a VENDORED.md. If it's a build artifact, add the extension to .gitignore and rebuild from source."}, "properties": {"scanner": "repobility-supply-chain", "category": "dependency", "severity": "high", "confidence": 0.9, "cwe": "", "owasp": ""}}, {"id": "MINED115", "name": "[MINED115] Action `libbpf/ci/build-selftests` pinned to mutable ref `@v4`: `uses: libbpf/ci/build-selftests@v4` resolves", "shortDescription": {"text": "[MINED115] Action `libbpf/ci/build-selftests` pinned to mutable ref `@v4`: `uses: libbpf/ci/build-selftests@v4` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-actions/changed-files co"}, "fullDescription": {"text": "Replace with: `uses: libbpf/ci/build-selftests@<40-char-sha>  # v4` and let Dependabot bump it on a scheduled cadence."}, "properties": {"scanner": "repobility-supply-chain", "category": "dependency", "severity": "high", "confidence": 0.9, "cwe": "", "owasp": ""}}, {"id": "MINED110", "name": "[MINED110] Blocking call `input` inside async function `_handle_version`: `input` is a synchronous (blocking) call. When", "shortDescription": {"text": "[MINED110] Blocking call `input` inside async function `_handle_version`: `input` is a synchronous (blocking) call. When invoked inside an `async def` it stalls the event loop, preventing every other coroutine in the process from making pro"}, "fullDescription": {"text": "Use the async equivalent: `aiohttp` instead of `requests`, `asyncio.sleep` instead of `time.sleep`, `aiofiles` instead of `open`."}, "properties": {"scanner": "repobility-ast-engine", "category": "quality", "severity": "high", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "MINED106", "name": "[MINED106] Phantom test coverage: test_struct_group: Test function `test_struct_group` runs code but contains no assert ", "shortDescription": {"text": "[MINED106] Phantom test coverage: test_struct_group: Test function `test_struct_group` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "fullDescription": {"text": "Add an explicit assertion that captures the test's intent, or remove the test."}, "properties": {"scanner": "repobility-ast-engine", "category": "quality", "severity": "high", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "MINED108", "name": "[MINED108] `self.assertIn` used but never assigned in __init__: Method `test_cc_unset` of class `TestRustIsAvailable` re", "shortDescription": {"text": "[MINED108] `self.assertIn` used but never assigned in __init__: Method `test_cc_unset` of class `TestRustIsAvailable` reads `self.assertIn`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeErro"}, "fullDescription": {"text": "Initialize `self.assertIn = <default>` in __init__, or add a class-level default."}, "properties": {"scanner": "repobility-ast-engine", "category": "quality", "severity": "high", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "SEC103", "name": "[SEC103] LDAP injection \u2014 non-constant search filter: User input concatenated into an LDAP search filter. Attackers inje", "shortDescription": {"text": "[SEC103] LDAP injection \u2014 non-constant search filter: User input concatenated into an LDAP search filter. Attackers inject `*)(uid=*` style payloads to bypass auth or enumerate accounts."}, "fullDescription": {"text": "Escape with javax.naming.ldap.Rdn.escapeValue or equivalent. For python-ldap, use ldap.filter.escape_filter_chars. Better: use parameterized search APIs (Spring LdapTemplate filter encoders)."}, "properties": {"scanner": "repobility-threat-engine", "category": "injection", "severity": "high", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "MINED001", "name": "[MINED001] Bare Except Pass: except: pass or except Exception: pass \u2014 silently swallows everything including KeyboardInt", "shortDescription": {"text": "[MINED001] Bare Except Pass: except: pass or except Exception: pass \u2014 silently swallows everything including KeyboardInterrupt and bugs."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-755 /  for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "high", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "SEC078", "name": "[SEC078] Python: requests without timeout: requests.get/post without a timeout will hang indefinitely on a non-responsiv", "shortDescription": {"text": "[SEC078] Python: requests without timeout: requests.get/post without a timeout will hang indefinitely on a non-responsive server, causing thread exhaustion and ReDoS. Ported from bandit B113 (Apache-2.0). NOTE: this regex is heuristic; a re"}, "fullDescription": {"text": "Add `timeout=10` (or appropriate value) to every requests call."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "high", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "MINED116", "name": "[MINED116] Workflow uses `secrets.KP_REVIEW_BOT_APP_PRIVATE_KEY` on a `pull_request` trigger: This workflow triggers on ", "shortDescription": {"text": "[MINED116] Workflow uses `secrets.KP_REVIEW_BOT_APP_PRIVATE_KEY` on a `pull_request` trigger: This workflow triggers on `pull_request`, which checks out the FORK's code. Referencing `${ secrets.KP_REVIEW_BOT_APP_PRIVATE_KEY }` lets a PR fro"}, "fullDescription": {"text": "Either remove the secret reference, or switch the trigger to `pull_request_target` AND ensure no fork-controlled code runs before the secret is consumed."}, "properties": {"scanner": "repobility-supply-chain", "category": "dependency", "severity": "critical", "confidence": 0.9, "cwe": "", "owasp": ""}}, {"id": "MINED107", "name": "[MINED107] Missing import: `html` used but not imported: The file uses `html.something(...)` but never imports `html`. T", "shortDescription": {"text": "[MINED107] Missing import: `html` used but not imported: The file uses `html.something(...)` but never imports `html`. This raises NameError at runtime the first time the line executes."}, "fullDescription": {"text": "Add `import html` at the top of the file."}, "properties": {"scanner": "repobility-ast-engine", "category": "quality", "severity": "critical", "confidence": 1.0, "cwe": "", "owasp": ""}}]}}, "automationDetails": {"id": "repobility/1354"}, "properties": {"repository": "kernel-patches/bpf", "repoUrl": "https://github.com/kernel-patches/bpf", "branch": "bpf-next_base"}, "results": [{"ruleId": "MINED124", "level": "warning", "message": {"text": "[MINED124] requirements.txt: `pyyaml` has no version pin: Unpinned pip requirement means every fresh install may resolve a different version. Newer releases can introduce malicious code (typosquats, account compromises). Reproducible installs need exact pins."}, "properties": {"repobilityId": 139974, "scanner": "repobility-supply-chain", "fingerprint": "163261f3f47950d8ef1d9baf716c982002b51b4ec25aee232ed1b748d4171f90", "category": "dependency", "severity": "medium", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "unpinned-pip-requirement", "owasp": null, "cwe_ids": ["CWE-1357"], "languages": ["python"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|163261f3f47950d8ef1d9baf716c982002b51b4ec25aee232ed1b748d4171f90"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Documentation/sphinx/requirements.txt"}, "region": {"startLine": 4}}}]}, {"ruleId": "MINED124", "level": "warning", "message": {"text": "[MINED124] requirements.txt: `Sphinx` has no version pin: Unpinned pip requirement means every fresh install may resolve a different version. Newer releases can introduce malicious code (typosquats, account compromises). Reproducible installs need exact pins."}, "properties": {"repobilityId": 139973, "scanner": "repobility-supply-chain", "fingerprint": "69e8db137a51aa4ad011b035893be55c5eb1c0c309b79e0a1621c8cba818717b", "category": "dependency", "severity": "medium", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "unpinned-pip-requirement", "owasp": null, "cwe_ids": ["CWE-1357"], "languages": ["python"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|69e8db137a51aa4ad011b035893be55c5eb1c0c309b79e0a1621c8cba818717b"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Documentation/sphinx/requirements.txt"}, "region": {"startLine": 3}}}]}, {"ruleId": "MINED124", "level": "warning", "message": {"text": "[MINED124] requirements.txt: `alabaster` has no version pin: Unpinned pip requirement means every fresh install may resolve a different version. Newer releases can introduce malicious code (typosquats, account compromises). Reproducible installs need exact pins."}, "properties": {"repobilityId": 139972, "scanner": "repobility-supply-chain", "fingerprint": "cda9543c6b837ab525e03f5adbcfff6310a40328092d56975e15c0641052449e", "category": "dependency", "severity": "medium", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "unpinned-pip-requirement", "owasp": null, "cwe_ids": ["CWE-1357"], "languages": ["python"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|cda9543c6b837ab525e03f5adbcfff6310a40328092d56975e15c0641052449e"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Documentation/sphinx/requirements.txt"}, "region": {"startLine": 2}}}]}, {"ruleId": "MINED109", "level": "warning", "message": {"text": "[MINED109] Mutable default argument in `get_bounds` (dict): `def get_bounds(... = []/{}/set())` \u2014 Python's default value is constructed ONCE at function definition time and shared across all calls. Mutating it in one call mutates it for every future call too."}, "properties": {"repobilityId": 139936, "scanner": "repobility-ast-engine", "fingerprint": "b6c3d66eb13f84d12830e32bd9e8d23547b249cc471902cb0607620fb6241859", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "mutable-default-arg", "owasp": null, "cwe_ids": ["CWE-1023"], "languages": ["python"], "observations_count": 64867}, "scanner": "repobility-ast-engine", "correlation_key": "fp|b6c3d66eb13f84d12830e32bd9e8d23547b249cc471902cb0607620fb6241859"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/perf/tests/shell/lib/perf_metric_validation.py"}, "region": {"startLine": 102}}}]}, {"ruleId": "MINED109", "level": "warning", "message": {"text": "[MINED109] Mutable default argument in `__init__` (dict): `def __init__(... = []/{}/set())` \u2014 Python's default value is constructed ONCE at function definition time and shared across all calls. Mutating it in one call mutates it for every future call too."}, "properties": {"repobilityId": 139927, "scanner": "repobility-ast-engine", "fingerprint": "7bd5de140ac13157cfe9d249556282544f5febe642078b05d1b55e07d557ee23", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "mutable-default-arg", "owasp": null, "cwe_ids": ["CWE-1023"], "languages": ["python"], "observations_count": 64867}, "scanner": "repobility-ast-engine", "correlation_key": "fp|7bd5de140ac13157cfe9d249556282544f5febe642078b05d1b55e07d557ee23"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/verification/rvgen/rvgen/generator.py"}, "region": {"startLine": 227}}}]}, {"ruleId": "MINED109", "level": "warning", "message": {"text": "[MINED109] Mutable default argument in `__init__` (dict): `def __init__(... = []/{}/set())` \u2014 Python's default value is constructed ONCE at function definition time and shared across all calls. Mutating it in one call mutates it for every future call too."}, "properties": {"repobilityId": 139926, "scanner": "repobility-ast-engine", "fingerprint": "1277c5d261f23f7d00fa81e4d8273825ff938637b981c4936a7d4d7bbc90b33c", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "mutable-default-arg", "owasp": null, "cwe_ids": ["CWE-1023"], "languages": ["python"], "observations_count": 64867}, "scanner": "repobility-ast-engine", "correlation_key": "fp|1277c5d261f23f7d00fa81e4d8273825ff938637b981c4936a7d4d7bbc90b33c"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/verification/rvgen/rvgen/generator.py"}, "region": {"startLine": 15}}}]}, {"ruleId": "MINED109", "level": "warning", "message": {"text": "[MINED109] Mutable default argument in `__init__` (dict): `def __init__(... = []/{}/set())` \u2014 Python's default value is constructed ONCE at function definition time and shared across all calls. Mutating it in one call mutates it for every future call too."}, "properties": {"repobilityId": 139925, "scanner": "repobility-ast-engine", "fingerprint": "9e612baebb89792442ded6acc8a74558507ecabbfadb16a4d466a0ee043d18c1", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "mutable-default-arg", "owasp": null, "cwe_ids": ["CWE-1023"], "languages": ["python"], "observations_count": 64867}, "scanner": "repobility-ast-engine", "correlation_key": "fp|9e612baebb89792442ded6acc8a74558507ecabbfadb16a4d466a0ee043d18c1"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/verification/rvgen/rvgen/dot2k.py"}, "region": {"startLine": 20}}}]}, {"ruleId": "MINED109", "level": "warning", "message": {"text": "[MINED109] Mutable default argument in `__init__` (dict): `def __init__(... = []/{}/set())` \u2014 Python's default value is constructed ONCE at function definition time and shared across all calls. Mutating it in one call mutates it for every future call too."}, "properties": {"repobilityId": 139923, "scanner": "repobility-ast-engine", "fingerprint": "44885af0f07a9da525d1da5797452809c1d7da9c647cd652779dd955da611dfb", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "mutable-default-arg", "owasp": null, "cwe_ids": ["CWE-1023"], "languages": ["python"], "observations_count": 64867}, "scanner": "repobility-ast-engine", "correlation_key": "fp|44885af0f07a9da525d1da5797452809c1d7da9c647cd652779dd955da611dfb"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/verification/rvgen/rvgen/container.py"}, "region": {"startLine": 14}}}]}, {"ruleId": "MINED109", "level": "warning", "message": {"text": "[MINED109] Mutable default argument in `__init__` (dict): `def __init__(... = []/{}/set())` \u2014 Python's default value is constructed ONCE at function definition time and shared across all calls. Mutating it in one call mutates it for every future call too."}, "properties": {"repobilityId": 139922, "scanner": "repobility-ast-engine", "fingerprint": "0936fe0c717c896f3da2364241102210c1b9d4ff00fc099ecdb8468e92dc8b86", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "mutable-default-arg", "owasp": null, "cwe_ids": ["CWE-1023"], "languages": ["python"], "observations_count": 64867}, "scanner": "repobility-ast-engine", "correlation_key": "fp|0936fe0c717c896f3da2364241102210c1b9d4ff00fc099ecdb8468e92dc8b86"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/verification/rvgen/rvgen/ltl2k.py"}, "region": {"startLine": 64}}}]}, {"ruleId": "MINED109", "level": "warning", "message": {"text": "[MINED109] Mutable default argument in `__init__` (list): `def __init__(... = []/{}/set())` \u2014 Python's default value is constructed ONCE at function definition time and shared across all calls. Mutating it in one call mutates it for every future call too."}, "properties": {"repobilityId": 139920, "scanner": "repobility-ast-engine", "fingerprint": "32b928790035c69a7e5f3b9a657f84294868781892dfebcbc7434238ada8da2a", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "mutable-default-arg", "owasp": null, "cwe_ids": ["CWE-1023"], "languages": ["python"], "observations_count": 64867}, "scanner": "repobility-ast-engine", "correlation_key": "fp|32b928790035c69a7e5f3b9a657f84294868781892dfebcbc7434238ada8da2a"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/testing/selftests/hid/tests/base_device.py"}, "region": {"startLine": 184}}}]}, {"ruleId": "MINED109", "level": "warning", "message": {"text": "[MINED109] Mutable default argument in `__init__` (list): `def __init__(... = []/{}/set())` \u2014 Python's default value is constructed ONCE at function definition time and shared across all calls. Mutating it in one call mutates it for every future call too."}, "properties": {"repobilityId": 139919, "scanner": "repobility-ast-engine", "fingerprint": "75e983cf971e6f532d5742c8e7212203e637e317e3c99e76e1b3ce0961840b0c", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "mutable-default-arg", "owasp": null, "cwe_ids": ["CWE-1023"], "languages": ["python"], "observations_count": 64867}, "scanner": "repobility-ast-engine", "correlation_key": "fp|75e983cf971e6f532d5742c8e7212203e637e317e3c99e76e1b3ce0961840b0c"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/testing/selftests/damon/_damon_sysfs.py"}, "region": {"startLine": 818}}}]}, {"ruleId": "MINED109", "level": "warning", "message": {"text": "[MINED109] Mutable default argument in `__init__` (list): `def __init__(... = []/{}/set())` \u2014 Python's default value is constructed ONCE at function definition time and shared across all calls. Mutating it in one call mutates it for every future call too."}, "properties": {"repobilityId": 139918, "scanner": "repobility-ast-engine", "fingerprint": "3615a97d109fa543aeb7af94b90e31c7df09ca9059945cefd190de527896bcfa", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "mutable-default-arg", "owasp": null, "cwe_ids": ["CWE-1023"], "languages": ["python"], "observations_count": 64867}, "scanner": "repobility-ast-engine", "correlation_key": "fp|3615a97d109fa543aeb7af94b90e31c7df09ca9059945cefd190de527896bcfa"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/testing/selftests/damon/_damon_sysfs.py"}, "region": {"startLine": 674}}}]}, {"ruleId": "MINED109", "level": "warning", "message": {"text": "[MINED109] Mutable default argument in `__init__` (list): `def __init__(... = []/{}/set())` \u2014 Python's default value is constructed ONCE at function definition time and shared across all calls. Mutating it in one call mutates it for every future call too."}, "properties": {"repobilityId": 139917, "scanner": "repobility-ast-engine", "fingerprint": "2c8097f13bb9d030d8eb85424bde00ed8c01bd308869b7e28a18ad5d547358cf", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "mutable-default-arg", "owasp": null, "cwe_ids": ["CWE-1023"], "languages": ["python"], "observations_count": 64867}, "scanner": "repobility-ast-engine", "correlation_key": "fp|2c8097f13bb9d030d8eb85424bde00ed8c01bd308869b7e28a18ad5d547358cf"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/testing/selftests/damon/_damon_sysfs.py"}, "region": {"startLine": 609}}}]}, {"ruleId": "MINED109", "level": "warning", "message": {"text": "[MINED109] Mutable default argument in `__init__` (list): `def __init__(... = []/{}/set())` \u2014 Python's default value is constructed ONCE at function definition time and shared across all calls. Mutating it in one call mutates it for every future call too."}, "properties": {"repobilityId": 139916, "scanner": "repobility-ast-engine", "fingerprint": "8b9e06a9a2062ca56538fb967216e91a8119aa33f1a4f9f36b03851aa9abb125", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "mutable-default-arg", "owasp": null, "cwe_ids": ["CWE-1023"], "languages": ["python"], "observations_count": 64867}, "scanner": "repobility-ast-engine", "correlation_key": "fp|8b9e06a9a2062ca56538fb967216e91a8119aa33f1a4f9f36b03851aa9abb125"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/testing/selftests/damon/_damon_sysfs.py"}, "region": {"startLine": 412}}}]}, {"ruleId": "MINED109", "level": "warning", "message": {"text": "[MINED109] Mutable default argument in `__init__` (list): `def __init__(... = []/{}/set())` \u2014 Python's default value is constructed ONCE at function definition time and shared across all calls. Mutating it in one call mutates it for every future call too."}, "properties": {"repobilityId": 139915, "scanner": "repobility-ast-engine", "fingerprint": "d0eceba0c26f6eb5231439a90c373ba99ac374933f2ab1f611f092fcf1199636", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "mutable-default-arg", "owasp": null, "cwe_ids": ["CWE-1023"], "languages": ["python"], "observations_count": 64867}, "scanner": "repobility-ast-engine", "correlation_key": "fp|d0eceba0c26f6eb5231439a90c373ba99ac374933f2ab1f611f092fcf1199636"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/testing/selftests/damon/_damon_sysfs.py"}, "region": {"startLine": 354}}}]}, {"ruleId": "MINED109", "level": "warning", "message": {"text": "[MINED109] Mutable default argument in `__init__` (list): `def __init__(... = []/{}/set())` \u2014 Python's default value is constructed ONCE at function definition time and shared across all calls. Mutating it in one call mutates it for every future call too."}, "properties": {"repobilityId": 139914, "scanner": "repobility-ast-engine", "fingerprint": "eb7406d999cebd997830595525a2f900bb6aff4db98f3c22f4a775e1213ba848", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "mutable-default-arg", "owasp": null, "cwe_ids": ["CWE-1023"], "languages": ["python"], "observations_count": 64867}, "scanner": "repobility-ast-engine", "correlation_key": "fp|eb7406d999cebd997830595525a2f900bb6aff4db98f3c22f4a775e1213ba848"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/testing/selftests/damon/_damon_sysfs.py"}, "region": {"startLine": 307}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 139913, "scanner": "repobility-ast-engine", "fingerprint": "9bb5dfeebff846731573bb64e97b7d216ada5d441cd28168ca1ea1570dd2fef4", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|9bb5dfeebff846731573bb64e97b7d216ada5d441cd28168ca1ea1570dd2fef4"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/testing/selftests/damon/sysfs_no_op_commit_break.py"}, "region": {"startLine": 14}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 139912, "scanner": "repobility-ast-engine", "fingerprint": "5bb3a2ed8a80722c4338db858b4da7e33ddd00df0bd3543bc19468cc6e31399b", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|5bb3a2ed8a80722c4338db858b4da7e33ddd00df0bd3543bc19468cc6e31399b"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/testing/selftests/tc-testing/tdc.py"}, "region": {"startLine": 487}}}]}, {"ruleId": "MINED109", "level": "warning", "message": {"text": "[MINED109] Mutable default argument in `bpftool_prog_load` (list): `def bpftool_prog_load(... = []/{}/set())` \u2014 Python's default value is constructed ONCE at function definition time and shared across all calls. Mutating it in one call mutates it for every future call too."}, "properties": {"repobilityId": 139911, "scanner": "repobility-ast-engine", "fingerprint": "2003089ff6535c3ef6e4e15cd0831f33e8851464641e06c78239f88d43d613f8", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "mutable-default-arg", "owasp": null, "cwe_ids": ["CWE-1023"], "languages": ["python"], "observations_count": 64867}, "scanner": "repobility-ast-engine", "correlation_key": "fp|2003089ff6535c3ef6e4e15cd0831f33e8851464641e06c78239f88d43d613f8"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/testing/selftests/net/bpf_offload.py"}, "region": {"startLine": 219}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 139910, "scanner": "repobility-ast-engine", "fingerprint": "f70295538c3d5bd8dd8a93569e17a58c393ddf90bf50570b1f38bc634bbfabf4", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|f70295538c3d5bd8dd8a93569e17a58c393ddf90bf50570b1f38bc634bbfabf4"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/testing/kunit/kunit_kernel.py"}, "region": {"startLine": 377}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 139909, "scanner": "repobility-ast-engine", "fingerprint": "b4d7f70f38abd7c09553e3cbf1b824a7c2c550fef377e7eb2456ba5991d6a669", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|b4d7f70f38abd7c09553e3cbf1b824a7c2c550fef377e7eb2456ba5991d6a669"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/sched/dl_bw_dump.py"}, "region": {"startLine": 49}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 139908, "scanner": "repobility-ast-engine", "fingerprint": "798b21377101e100cea72b7e07e4b40eb7bc9831ff55c43f8b1af01a18cc451c", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|798b21377101e100cea72b7e07e4b40eb7bc9831ff55c43f8b1af01a18cc451c"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/sched/root_domains_dump.py"}, "region": {"startLine": 60}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 139907, "scanner": "repobility-ast-engine", "fingerprint": "b5fba9126ae58a892150268cfe47c3d74dce510302a71ff45a65ca1717839045", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|b5fba9126ae58a892150268cfe47c3d74dce510302a71ff45a65ca1717839045"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/cgroup/iocost_monitor.py"}, "region": {"startLine": 44}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 139895, "scanner": "repobility-ast-engine", "fingerprint": "f3af3a4a85e98383ef7bfb2a4f8ad6395bf43674d503d2bb88e031b8740adc74", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|f3af3a4a85e98383ef7bfb2a4f8ad6395bf43674d503d2bb88e031b8740adc74"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/unittests/test_kdoc_parser.py"}, "region": {"startLine": 94}}}]}, {"ruleId": "MINED109", "level": "warning", "message": {"text": "[MINED109] Mutable default argument in `run_test` (dict): `def run_test(... = []/{}/set())` \u2014 Python's default value is constructed ONCE at function definition time and shared across all calls. Mutating it in one call mutates it for every future call too."}, "properties": {"repobilityId": 139894, "scanner": "repobility-ast-engine", "fingerprint": "f9d2c78311e699a567e6fc35030820d50184e44495ea0c5a6c2d3dbae2db6c33", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "mutable-default-arg", "owasp": null, "cwe_ids": ["CWE-1023"], "languages": ["python"], "observations_count": 64867}, "scanner": "repobility-ast-engine", "correlation_key": "fp|f9d2c78311e699a567e6fc35030820d50184e44495ea0c5a6c2d3dbae2db6c33"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/unittests/test_kdoc_parser.py"}, "region": {"startLine": 128}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 139885, "scanner": "repobility-ast-engine", "fingerprint": "9f9a39f3cea897d79b6816f1b520584f320fad96b466fb14d1dc551628c1d45e", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|9f9a39f3cea897d79b6816f1b520584f320fad96b466fb14d1dc551628c1d45e"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/mm/show_page_info.py"}, "region": {"startLine": 165}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 139884, "scanner": "repobility-ast-engine", "fingerprint": "2e49412152484bc34791198460d414d66f013f8a6bbbabf26f4b24ce40b6a9a3", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|2e49412152484bc34791198460d414d66f013f8a6bbbabf26f4b24ce40b6a9a3"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/mm/show_page_info.py"}, "region": {"startLine": 139}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 139883, "scanner": "repobility-ast-engine", "fingerprint": "3add104db4581c3910d7c4c6ce1aad48d8aa9ce6471cef98a061e052660ca838", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|3add104db4581c3910d7c4c6ce1aad48d8aa9ce6471cef98a061e052660ca838"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/mm/show_page_info.py"}, "region": {"startLine": 74}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 139882, "scanner": "repobility-ast-engine", "fingerprint": "4f1c0e1423e5baa6adcac13136d2243bd8fddab85dea5bc052ebe00775ea05cf", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|4f1c0e1423e5baa6adcac13136d2243bd8fddab85dea5bc052ebe00775ea05cf"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/mm/show_page_info.py"}, "region": {"startLine": 49}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 139881, "scanner": "repobility-ast-engine", "fingerprint": "080556b054fb8ba0937ac7a687e3e26e6525a87ad1c804829b54ed2159107008", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|080556b054fb8ba0937ac7a687e3e26e6525a87ad1c804829b54ed2159107008"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "drivers/tty/vt/gen_ucs_width_table.py"}, "region": {"startLine": 229}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 139880, "scanner": "repobility-ast-engine", "fingerprint": "c164f1bb767c76b2b1f372ac398158869bbcff0f02bd635af1d7d98825b7a9e7", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|c164f1bb767c76b2b1f372ac398158869bbcff0f02bd635af1d7d98825b7a9e7"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "drivers/tty/vt/gen_ucs_fallback_table.py"}, "region": {"startLine": 271}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 139879, "scanner": "repobility-ast-engine", "fingerprint": "630116400611d838f9a2abc36e95de0d2753874f37f585b3a32618bb43237c23", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|630116400611d838f9a2abc36e95de0d2753874f37f585b3a32618bb43237c23"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "drivers/tty/vt/gen_ucs_fallback_table.py"}, "region": {"startLine": 23}}}]}, {"ruleId": "MINED109", "level": "warning", "message": {"text": "[MINED109] Mutable default argument in `_allconfig` (dict): `def _allconfig(... = []/{}/set())` \u2014 Python's default value is constructed ONCE at function definition time and shared across all calls. Mutating it in one call mutates it for every future call too."}, "properties": {"repobilityId": 139877, "scanner": "repobility-ast-engine", "fingerprint": "2106da966d127d3ea326f5bd257ec123f1d146177f5a71cc86987bbde5d7a1e8", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "mutable-default-arg", "owasp": null, "cwe_ids": ["CWE-1023"], "languages": ["python"], "observations_count": 64867}, "scanner": "repobility-ast-engine", "correlation_key": "fp|2106da966d127d3ea326f5bd257ec123f1d146177f5a71cc86987bbde5d7a1e8"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/kconfig/tests/conftest.py"}, "region": {"startLine": 172}}}]}, {"ruleId": "MINED109", "level": "warning", "message": {"text": "[MINED109] Mutable default argument in `_run_conf` (dict): `def _run_conf(... = []/{}/set())` \u2014 Python's default value is constructed ONCE at function definition time and shared across all calls. Mutating it in one call mutates it for every future call too."}, "properties": {"repobilityId": 139876, "scanner": "repobility-ast-engine", "fingerprint": "76e57cd3be421683549bbc335ade29269a0a91291c1d6160fa86b304e11609bb", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "mutable-default-arg", "owasp": null, "cwe_ids": ["CWE-1023"], "languages": ["python"], "observations_count": 64867}, "scanner": "repobility-ast-engine", "correlation_key": "fp|76e57cd3be421683549bbc335ade29269a0a91291c1d6160fa86b304e11609bb"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/kconfig/tests/conftest.py"}, "region": {"startLine": 39}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 139875, "scanner": "repobility-ast-engine", "fingerprint": "e81b4b7b8bbb70fb4b251660d75372a0ee1ed47a0e420468702480a39d3fa919", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|e81b4b7b8bbb70fb4b251660d75372a0ee1ed47a0e420468702480a39d3fa919"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/gdb/linux/stackdepot.py"}, "region": {"startLine": 65}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 139874, "scanner": "repobility-ast-engine", "fingerprint": "63e14932a6525b6f5cb9875f7f8a0dff7727427875344fc906edd4db6505a4e5", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|63e14932a6525b6f5cb9875f7f8a0dff7727427875344fc906edd4db6505a4e5"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/gdb/linux/stackdepot.py"}, "region": {"startLine": 52}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 139873, "scanner": "repobility-ast-engine", "fingerprint": "214fa59f3bae2f10a5168ba663956d6b31e1550b6b4d2fca557016b6d35b3159", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|214fa59f3bae2f10a5168ba663956d6b31e1550b6b4d2fca557016b6d35b3159"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/gdb/linux/mm.py"}, "region": {"startLine": 78}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 139870, "scanner": "repobility-ast-engine", "fingerprint": "2ad8bc43909e33cb8ed04959743a73391f566b5cf72505eea4bfaa5998c5c80d", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|2ad8bc43909e33cb8ed04959743a73391f566b5cf72505eea4bfaa5998c5c80d"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/gdb/vmlinux-gdb.py"}, "region": {"startLine": 21}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 139868, "scanner": "repobility-ast-engine", "fingerprint": "c232ec388b8597ab860da8795491b9a59dc182b76ac905aa5c6b0ba3ae5e484e", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|c232ec388b8597ab860da8795491b9a59dc182b76ac905aa5c6b0ba3ae5e484e"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/checkkconfigsymbols.py"}, "region": {"startLine": 112}}}]}, {"ruleId": "MINED109", "level": "warning", "message": {"text": "[MINED109] Mutable default argument in `find_sims` (list): `def find_sims(... = []/{}/set())` \u2014 Python's default value is constructed ONCE at function definition time and shared across all calls. Mutating it in one call mutates it for every future call too."}, "properties": {"repobilityId": 139867, "scanner": "repobility-ast-engine", "fingerprint": "518c628b47f7776ffb687d45183ad02e0099ed077e3726535e060439ae2abddc", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "mutable-default-arg", "owasp": null, "cwe_ids": ["CWE-1023"], "languages": ["python"], "observations_count": 64867}, "scanner": "repobility-ast-engine", "correlation_key": "fp|518c628b47f7776ffb687d45183ad02e0099ed077e3726535e060439ae2abddc"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/checkkconfigsymbols.py"}, "region": {"startLine": 270}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 139866, "scanner": "repobility-ast-engine", "fingerprint": "13aab5a7166ef0211e520b19ddb4dda6493d45917885db9ea58f289af4db921d", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|13aab5a7166ef0211e520b19ddb4dda6493d45917885db9ea58f289af4db921d"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/spdxcheck.py"}, "region": {"startLine": 453}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 139865, "scanner": "repobility-ast-engine", "fingerprint": "af159992befabbb3428b148444ae335cf42cff80ea25ad63e62ee8de2d96dee6", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|af159992befabbb3428b148444ae335cf42cff80ea25ad63e62ee8de2d96dee6"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/spdxcheck.py"}, "region": {"startLine": 378}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 139864, "scanner": "repobility-ast-engine", "fingerprint": "3b1e1170d47d165ba0e3d10d93a38c9a8bdd10b584208803a5e854387d7029b7", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|3b1e1170d47d165ba0e3d10d93a38c9a8bdd10b584208803a5e854387d7029b7"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/spdxcheck.py"}, "region": {"startLine": 368}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 139863, "scanner": "repobility-ast-engine", "fingerprint": "506c0b7568fa25079e2a5f8010a987540297c7adc07854bb989ba25c269b7783", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|506c0b7568fa25079e2a5f8010a987540297c7adc07854bb989ba25c269b7783"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/bpf_doc.py"}, "region": {"startLine": 463}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 139862, "scanner": "repobility-ast-engine", "fingerprint": "c4706fecabdf975a27e76c87950f253d5a5bc48965467c8276e173a306c1fa85", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|c4706fecabdf975a27e76c87950f253d5a5bc48965467c8276e173a306c1fa85"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/bpf_doc.py"}, "region": {"startLine": 475}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 139861, "scanner": "repobility-ast-engine", "fingerprint": "03672ba1f6a932a178037030dffe75bc2695046c02ba75895baa5756f830fd0f", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|03672ba1f6a932a178037030dffe75bc2695046c02ba75895baa5756f830fd0f"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/bpf_doc.py"}, "region": {"startLine": 458}}}]}, {"ruleId": "MINED109", "level": "warning", "message": {"text": "[MINED109] Mutable default argument in `__init__` (list): `def __init__(... = []/{}/set())` \u2014 Python's default value is constructed ONCE at function definition time and shared across all calls. Mutating it in one call mutates it for every future call too."}, "properties": {"repobilityId": 139860, "scanner": "repobility-ast-engine", "fingerprint": "41757957c980875cdd0dce8fb5a040ffa826f3ef49543b0a4e1564522026b000", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "mutable-default-arg", "owasp": null, "cwe_ids": ["CWE-1023"], "languages": ["python"], "observations_count": 64867}, "scanner": "repobility-ast-engine", "correlation_key": "fp|41757957c980875cdd0dce8fb5a040ffa826f3ef49543b0a4e1564522026b000"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/bpf_doc.py"}, "region": {"startLine": 61}}}]}, {"ruleId": "AIC004", "level": "warning", "message": {"text": "Suspicious implementation file appears unreferenced"}, "properties": {"repobilityId": 139812, "scanner": "repobility-ai-code-hygiene", "fingerprint": "393671e58b0feb4eff8311b70f5d3418d85518576e5a7ee2b4836bfeaedd1825", "category": "quality", "severity": "medium", "confidence": 0.78, "triageState": "open", "verdict": "likely", "isResolved": false, "reason": "Patch-style source file has no detected inbound reference from other repository files.", "evidence": {"suffix": "update", "rule_id": "AIC004", "scanner": "repobility-ai-code-hygiene", "references": ["https://knip.dev/", "https://github.com/jendrikseipp/vulture"], "correlation_key": "fp|393671e58b0feb4eff8311b70f5d3418d85518576e5a7ee2b4836bfeaedd1825"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/testing/selftests/tty/tty_tstamp_update.c"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC004", "level": "warning", "message": {"text": "Suspicious implementation file appears unreferenced"}, "properties": {"repobilityId": 139811, "scanner": "repobility-ai-code-hygiene", "fingerprint": "8d3c8f8b33d309b4e3a2528254868b8bad5ae0adc21f3d57f4bb0f1710d52ff3", "category": "quality", "severity": "medium", "confidence": 0.78, "triageState": "open", "verdict": "likely", "isResolved": false, "reason": "Patch-style source file has no detected inbound reference from other repository files.", "evidence": {"suffix": "update", "rule_id": "AIC004", "scanner": "repobility-ai-code-hygiene", "references": ["https://knip.dev/", "https://github.com/jendrikseipp/vulture"], "correlation_key": "fp|8d3c8f8b33d309b4e3a2528254868b8bad5ae0adc21f3d57f4bb0f1710d52ff3"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/testing/selftests/bpf/benchs/bench_bpf_hashmap_full_update.c"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC004", "level": "warning", "message": {"text": "Suspicious implementation file appears unreferenced"}, "properties": {"repobilityId": 139810, "scanner": "repobility-ai-code-hygiene", "fingerprint": "15f077f2d5fbb8069e686db5811fb0c296d53ead55941d8b6d070ae7fa41f250", "category": "quality", "severity": "medium", "confidence": 0.78, "triageState": "open", "verdict": "likely", "isResolved": false, "reason": "Patch-style source file has no detected inbound reference from other repository files.", "evidence": {"suffix": "update", "rule_id": "AIC004", "scanner": "repobility-ai-code-hygiene", "references": ["https://knip.dev/", "https://github.com/jendrikseipp/vulture"], "correlation_key": "fp|15f077f2d5fbb8069e686db5811fb0c296d53ead55941d8b6d070ae7fa41f250"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "net/ethtool/cmis_fw_update.c"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC004", "level": "warning", "message": {"text": "Suspicious implementation file appears unreferenced"}, "properties": {"repobilityId": 139809, "scanner": "repobility-ai-code-hygiene", "fingerprint": "5b34ac2ebeab3eec8c9ddfa02b35b3c0be7b0c7803e050c9ac750b78324e6b24", "category": "quality", "severity": "medium", "confidence": 0.78, "triageState": "open", "verdict": "likely", "isResolved": false, "reason": "Patch-style source file has no detected inbound reference from other repository files.", "evidence": {"suffix": "copy", "rule_id": "AIC004", "scanner": "repobility-ai-code-hygiene", "references": ["https://knip.dev/", "https://github.com/jendrikseipp/vulture"], "correlation_key": "fp|5b34ac2ebeab3eec8c9ddfa02b35b3c0be7b0c7803e050c9ac750b78324e6b24"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "drivers/scsi/fnic/vnic_wq_copy.h"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC004", "level": "warning", "message": {"text": "Suspicious implementation file appears unreferenced"}, "properties": {"repobilityId": 139808, "scanner": "repobility-ai-code-hygiene", "fingerprint": "f522fc5f6a78177c0a449806a8f2b290331eab506a70fcdcb1f245e4baaa83a6", "category": "quality", "severity": "medium", "confidence": 0.78, "triageState": "open", "verdict": "likely", "isResolved": false, "reason": "Patch-style source file has no detected inbound reference from other repository files.", "evidence": {"suffix": "copy", "rule_id": "AIC004", "scanner": "repobility-ai-code-hygiene", "references": ["https://knip.dev/", "https://github.com/jendrikseipp/vulture"], "correlation_key": "fp|f522fc5f6a78177c0a449806a8f2b290331eab506a70fcdcb1f245e4baaa83a6"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "drivers/scsi/fnic/vnic_wq_copy.c"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC004", "level": "warning", "message": {"text": "Suspicious implementation file appears unreferenced"}, "properties": {"repobilityId": 139807, "scanner": "repobility-ai-code-hygiene", "fingerprint": "ba2bc95f84f8ce03a28b18f874f3a64b382dd7e3e0e4163cae390d51cde02307", "category": "quality", "severity": "medium", "confidence": 0.78, "triageState": "open", "verdict": "likely", "isResolved": false, "reason": "Patch-style source file has no detected inbound reference from other repository files.", "evidence": {"suffix": "copy", "rule_id": "AIC004", "scanner": "repobility-ai-code-hygiene", "references": ["https://knip.dev/", "https://github.com/jendrikseipp/vulture"], "correlation_key": "fp|ba2bc95f84f8ce03a28b18f874f3a64b382dd7e3e0e4163cae390d51cde02307"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "drivers/scsi/fnic/vnic_cq_copy.h"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC004", "level": "warning", "message": {"text": "Suspicious implementation file appears unreferenced"}, "properties": {"repobilityId": 139806, "scanner": "repobility-ai-code-hygiene", "fingerprint": "0e334eb5bd29aa63f95cce89eb229e6b8fd2e0493e28efab7e2f5d2041863514", "category": "quality", "severity": "medium", "confidence": 0.78, "triageState": "open", "verdict": "likely", "isResolved": false, "reason": "Patch-style source file has no detected inbound reference from other repository files.", "evidence": {"suffix": "update", "rule_id": "AIC004", "scanner": "repobility-ai-code-hygiene", "references": ["https://knip.dev/", "https://github.com/jendrikseipp/vulture"], "correlation_key": "fp|0e334eb5bd29aa63f95cce89eb229e6b8fd2e0493e28efab7e2f5d2041863514"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "drivers/platform/x86/intel/wmi/sbl-fw-update.c"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC004", "level": "warning", "message": {"text": "Suspicious implementation file appears unreferenced"}, "properties": {"repobilityId": 139805, "scanner": "repobility-ai-code-hygiene", "fingerprint": "42330db8c19529e966f3cf64c21b856fd2e8408ed51a7d9a63428862e64a079b", "category": "quality", "severity": "medium", "confidence": 0.78, "triageState": "open", "verdict": "likely", "isResolved": false, "reason": "Patch-style source file has no detected inbound reference from other repository files.", "evidence": {"suffix": "new", "rule_id": "AIC004", "scanner": "repobility-ai-code-hygiene", "references": ["https://knip.dev/", "https://github.com/jendrikseipp/vulture"], "correlation_key": "fp|42330db8c19529e966f3cf64c21b856fd2e8408ed51a7d9a63428862e64a079b"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "drivers/net/ethernet/ti/cpsw_new.c"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC004", "level": "warning", "message": {"text": "Suspicious implementation file appears unreferenced"}, "properties": {"repobilityId": 139804, "scanner": "repobility-ai-code-hygiene", "fingerprint": "c837b3bac035a218a2607610b6b0d6c8213ea069cc478865dcc94ce190817f28", "category": "quality", "severity": "medium", "confidence": 0.78, "triageState": "open", "verdict": "likely", "isResolved": false, "reason": "Patch-style source file has no detected inbound reference from other repository files.", "evidence": {"suffix": "update", "rule_id": "AIC004", "scanner": "repobility-ai-code-hygiene", "references": ["https://knip.dev/", "https://github.com/jendrikseipp/vulture"], "correlation_key": "fp|c837b3bac035a218a2607610b6b0d6c8213ea069cc478865dcc94ce190817f28"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "drivers/net/ethernet/intel/ixgbe/ixgbe_fw_update.c"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC004", "level": "warning", "message": {"text": "Suspicious implementation file appears unreferenced"}, "properties": {"repobilityId": 139803, "scanner": "repobility-ai-code-hygiene", "fingerprint": "0aaec21eaff1cb86cd1390f76607c7c588d73a2a596f7da45077189abdf0dbe8", "category": "quality", "severity": "medium", "confidence": 0.78, "triageState": "open", "verdict": "likely", "isResolved": false, "reason": "Patch-style source file has no detected inbound reference from other repository files.", "evidence": {"suffix": "update", "rule_id": "AIC004", "scanner": "repobility-ai-code-hygiene", "references": ["https://knip.dev/", "https://github.com/jendrikseipp/vulture"], "correlation_key": "fp|0aaec21eaff1cb86cd1390f76607c7c588d73a2a596f7da45077189abdf0dbe8"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "drivers/net/ethernet/intel/ice/ice_fw_update.c"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC004", "level": "warning", "message": {"text": "Suspicious implementation file appears unreferenced"}, "properties": {"repobilityId": 139802, "scanner": "repobility-ai-code-hygiene", "fingerprint": "e912fca618f1a5510a4ff38a0bd63c670727f6afe3fc0eda4a40a29a0294a16a", "category": "quality", "severity": "medium", "confidence": 0.78, "triageState": "open", "verdict": "likely", "isResolved": false, "reason": "Patch-style source file has no detected inbound reference from other repository files.", "evidence": {"suffix": "temp", "rule_id": "AIC004", "scanner": "repobility-ai-code-hygiene", "references": ["https://knip.dev/", "https://github.com/jendrikseipp/vulture"], "correlation_key": "fp|e912fca618f1a5510a4ff38a0bd63c670727f6afe3fc0eda4a40a29a0294a16a"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "drivers/iio/imu/inv_icm42600/inv_icm42600_temp.h"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC004", "level": "warning", "message": {"text": "Suspicious implementation file appears unreferenced"}, "properties": {"repobilityId": 139801, "scanner": "repobility-ai-code-hygiene", "fingerprint": "95d6af6d378530c75680243d2b753af245d5a69a7da62b9e9a514d2652be04d2", "category": "quality", "severity": "medium", "confidence": 0.78, "triageState": "open", "verdict": "likely", "isResolved": false, "reason": "Patch-style source file has no detected inbound reference from other repository files.", "evidence": {"suffix": "temp", "rule_id": "AIC004", "scanner": "repobility-ai-code-hygiene", "references": ["https://knip.dev/", "https://github.com/jendrikseipp/vulture"], "correlation_key": "fp|95d6af6d378530c75680243d2b753af245d5a69a7da62b9e9a514d2652be04d2"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "drivers/iio/imu/inv_icm42600/inv_icm42600_temp.c"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC004", "level": "warning", "message": {"text": "Suspicious implementation file appears unreferenced"}, "properties": {"repobilityId": 139800, "scanner": "repobility-ai-code-hygiene", "fingerprint": "5f42ebc96c504fd4ccfdbd7b8657184a1638fb2159539b94346254fd1b473b7e", "category": "quality", "severity": "medium", "confidence": 0.78, "triageState": "open", "verdict": "likely", "isResolved": false, "reason": "Patch-style source file has no detected inbound reference from other repository files.", "evidence": {"suffix": "temp", "rule_id": "AIC004", "scanner": "repobility-ai-code-hygiene", "references": ["https://knip.dev/", "https://github.com/jendrikseipp/vulture"], "correlation_key": "fp|5f42ebc96c504fd4ccfdbd7b8657184a1638fb2159539b94346254fd1b473b7e"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "drivers/hwmon/sbtsi_temp.c"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC004", "level": "warning", "message": {"text": "Suspicious implementation file appears unreferenced"}, "properties": {"repobilityId": 139799, "scanner": "repobility-ai-code-hygiene", "fingerprint": "1a946885cacadf88d368c82753b61b9b683fdf0b966e1da4d5d97c29d4e9db54", "category": "quality", "severity": "medium", "confidence": 0.78, "triageState": "open", "verdict": "likely", "isResolved": false, "reason": "Patch-style source file has no detected inbound reference from other repository files.", "evidence": {"suffix": "temp", "rule_id": "AIC004", "scanner": "repobility-ai-code-hygiene", "references": ["https://knip.dev/", "https://github.com/jendrikseipp/vulture"], "correlation_key": "fp|1a946885cacadf88d368c82753b61b9b683fdf0b966e1da4d5d97c29d4e9db54"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "drivers/hwmon/i5500_temp.c"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC004", "level": "warning", "message": {"text": "Suspicious implementation file appears unreferenced"}, "properties": {"repobilityId": 139798, "scanner": "repobility-ai-code-hygiene", "fingerprint": "944e48c9b023ec67160c9ddfd6e12cf255ef9bbb98438512145810fb64613e2c", "category": "quality", "severity": "medium", "confidence": 0.78, "triageState": "open", "verdict": "likely", "isResolved": false, "reason": "Patch-style source file has no detected inbound reference from other repository files.", "evidence": {"suffix": "old", "rule_id": "AIC004", "scanner": "repobility-ai-code-hygiene", "references": ["https://knip.dev/", "https://github.com/jendrikseipp/vulture"], "correlation_key": "fp|944e48c9b023ec67160c9ddfd6e12cf255ef9bbb98438512145810fb64613e2c"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "drivers/gpu/drm/amd/display/dc/dce/dce_scl_filters_old.c"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC004", "level": "warning", "message": {"text": "Suspicious implementation file appears unreferenced"}, "properties": {"repobilityId": 139797, "scanner": "repobility-ai-code-hygiene", "fingerprint": "188771a8043f2fee0315a2b83e603b9fdaca2f43e29626e4addf8684bb48d574", "category": "quality", "severity": "medium", "confidence": 0.78, "triageState": "open", "verdict": "likely", "isResolved": false, "reason": "Patch-style source file has no detected inbound reference from other repository files.", "evidence": {"suffix": "update", "rule_id": "AIC004", "scanner": "repobility-ai-code-hygiene", "references": ["https://knip.dev/", "https://github.com/jendrikseipp/vulture"], "correlation_key": "fp|188771a8043f2fee0315a2b83e603b9fdaca2f43e29626e4addf8684bb48d574"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "drivers/fpga/intel-m10-bmc-sec-update.c"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC004", "level": "warning", "message": {"text": "Suspicious implementation file appears unreferenced"}, "properties": {"repobilityId": 139796, "scanner": "repobility-ai-code-hygiene", "fingerprint": "a21f316a1e03ee31ee1f99e3e3d5a4a690f142d052efb84a1be8a8e22caf2102", "category": "quality", "severity": "medium", "confidence": 0.78, "triageState": "open", "verdict": "likely", "isResolved": false, "reason": "Patch-style source file has no detected inbound reference from other repository files.", "evidence": {"suffix": "fixed", "rule_id": "AIC004", "scanner": "repobility-ai-code-hygiene", "references": ["https://knip.dev/", "https://github.com/jendrikseipp/vulture"], "correlation_key": "fp|a21f316a1e03ee31ee1f99e3e3d5a4a690f142d052efb84a1be8a8e22caf2102"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "drivers/crypto/intel/iaa/iaa_crypto_comp_fixed.c"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC004", "level": "warning", "message": {"text": "Suspicious implementation file appears unreferenced"}, "properties": {"repobilityId": 139795, "scanner": "repobility-ai-code-hygiene", "fingerprint": "09934f3efaa16dbf0f557b12e48b22936aae6f557737f52364412d597af3f4c5", "category": "quality", "severity": "medium", "confidence": 0.78, "triageState": "open", "verdict": "likely", "isResolved": false, "reason": "Patch-style source file has no detected inbound reference from other repository files.", "evidence": {"suffix": "fixed", "rule_id": "AIC004", "scanner": "repobility-ai-code-hygiene", "references": ["https://knip.dev/", "https://github.com/jendrikseipp/vulture"], "correlation_key": "fp|09934f3efaa16dbf0f557b12e48b22936aae6f557737f52364412d597af3f4c5"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "drivers/clk/tegra/clk-tegra-fixed.c"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC004", "level": "warning", "message": {"text": "Suspicious implementation file appears unreferenced"}, "properties": {"repobilityId": 139794, "scanner": "repobility-ai-code-hygiene", "fingerprint": "537554dbb1f00b8763ef090e89f37b1e371b4a7e9236c59af23040af32ca3ce3", "category": "quality", "severity": "medium", "confidence": 0.78, "triageState": "open", "verdict": "likely", "isResolved": false, "reason": "Patch-style source file has no detected inbound reference from other repository files.", "evidence": {"suffix": "fixed", "rule_id": "AIC004", "scanner": "repobility-ai-code-hygiene", "references": ["https://knip.dev/", "https://github.com/jendrikseipp/vulture"], "correlation_key": "fp|537554dbb1f00b8763ef090e89f37b1e371b4a7e9236c59af23040af32ca3ce3"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "drivers/clk/tegra/clk-periph-fixed.c"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC004", "level": "warning", "message": {"text": "Suspicious implementation file appears unreferenced"}, "properties": {"repobilityId": 139793, "scanner": "repobility-ai-code-hygiene", "fingerprint": "bf5f39e3ed7a6e0230bafee78e0fddbad19928b2ca97bf2f5fc46ced065f6ae9", "category": "quality", "severity": "medium", "confidence": 0.78, "triageState": "open", "verdict": "likely", "isResolved": false, "reason": "Patch-style source file has no detected inbound reference from other repository files.", "evidence": {"suffix": "old", "rule_id": "AIC004", "scanner": "repobility-ai-code-hygiene", "references": ["https://knip.dev/", "https://github.com/jendrikseipp/vulture"], "correlation_key": "fp|bf5f39e3ed7a6e0230bafee78e0fddbad19928b2ca97bf2f5fc46ced065f6ae9"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "drivers/ata/pata_pdc202xx_old.c"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC001", "level": "warning", "message": {"text": "Parallel implementation file sits beside a canonical file"}, "properties": {"repobilityId": 139791, "scanner": "repobility-ai-code-hygiene", "fingerprint": "ab95d40cdcd8f45a1d46241c3313ca140fa45b03d93fada67146e98e98879fcf", "category": "quality", "severity": "medium", "confidence": 0.82, "triageState": "open", "verdict": "likely", "isResolved": false, "reason": "Source filename has a patch-style suffix and a same-directory canonical sibling exists.", "evidence": {"suffix": "new", "rule_id": "AIC001", "scanner": "repobility-ai-code-hygiene", "references": ["https://arxiv.org/abs/2601.15195", "https://knip.dev/"], "canonical_file": "drivers/net/ethernet/ti/cpsw.c", "correlation_key": "fp|ab95d40cdcd8f45a1d46241c3313ca140fa45b03d93fada67146e98e98879fcf"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "drivers/net/ethernet/ti/cpsw_new.c"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC001", "level": "warning", "message": {"text": "Parallel implementation file sits beside a canonical file"}, "properties": {"repobilityId": 139788, "scanner": "repobility-ai-code-hygiene", "fingerprint": "3611245986a5791a61d83dd6d71ae82dd5b286b6a5add9798722a68ec084ff40", "category": "quality", "severity": "medium", "confidence": 0.82, "triageState": "open", "verdict": "likely", "isResolved": false, "reason": "Source filename has a patch-style suffix and a same-directory canonical sibling exists.", "evidence": {"suffix": "new", "rule_id": "AIC001", "scanner": "repobility-ai-code-hygiene", "references": ["https://arxiv.org/abs/2601.15195", "https://knip.dev/"], "canonical_file": "drivers/media/rc/keymaps/rc-pixelview.c", "correlation_key": "fp|3611245986a5791a61d83dd6d71ae82dd5b286b6a5add9798722a68ec084ff40"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "drivers/media/rc/keymaps/rc-pixelview-new.c"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC001", "level": "warning", "message": {"text": "Parallel implementation file sits beside a canonical file"}, "properties": {"repobilityId": 139786, "scanner": "repobility-ai-code-hygiene", "fingerprint": "da2a2a158855e38d494e32e731582f991b6ffece56ae875d2fdd5b35ecbb2780", "category": "quality", "severity": "medium", "confidence": 0.82, "triageState": "open", "verdict": "likely", "isResolved": false, "reason": "Source filename has a patch-style suffix and a same-directory canonical sibling exists.", "evidence": {"suffix": "copy", "rule_id": "AIC001", "scanner": "repobility-ai-code-hygiene", "references": ["https://arxiv.org/abs/2601.15195", "https://knip.dev/"], "canonical_file": "drivers/infiniband/hw/hfi1/pio.c", "correlation_key": "fp|da2a2a158855e38d494e32e731582f991b6ffece56ae875d2fdd5b35ecbb2780"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "drivers/infiniband/hw/hfi1/pio_copy.c"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC001", "level": "warning", "message": {"text": "Parallel implementation file sits beside a canonical file"}, "properties": {"repobilityId": 139784, "scanner": "repobility-ai-code-hygiene", "fingerprint": "68b0b93656c86534e79f3f29447209ba4f45773a8c05aacddf5fd15543775176", "category": "quality", "severity": "medium", "confidence": 0.82, "triageState": "open", "verdict": "likely", "isResolved": false, "reason": "Source filename has a patch-style suffix and a same-directory canonical sibling exists.", "evidence": {"suffix": "temp", "rule_id": "AIC001", "scanner": "repobility-ai-code-hygiene", "references": ["https://arxiv.org/abs/2601.15195", "https://knip.dev/"], "canonical_file": "drivers/iio/imu/inv_icm42600/inv_icm42600.h", "correlation_key": "fp|68b0b93656c86534e79f3f29447209ba4f45773a8c05aacddf5fd15543775176"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "drivers/iio/imu/inv_icm42600/inv_icm42600_temp.h"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC001", "level": "warning", "message": {"text": "Parallel implementation file sits beside a canonical file"}, "properties": {"repobilityId": 139775, "scanner": "repobility-ai-code-hygiene", "fingerprint": "ea59ac2cfb4b0d25183219aece3665551c496acce3bf3eafbbde94ed3dc6c39d", "category": "quality", "severity": "medium", "confidence": 0.82, "triageState": "open", "verdict": "likely", "isResolved": false, "reason": "Source filename has a patch-style suffix and a same-directory canonical sibling exists.", "evidence": {"suffix": "old", "rule_id": "AIC001", "scanner": "repobility-ai-code-hygiene", "references": ["https://arxiv.org/abs/2601.15195", "https://knip.dev/"], "canonical_file": "drivers/gpu/drm/amd/display/dc/dce/dce_scl_filters.c", "correlation_key": "fp|ea59ac2cfb4b0d25183219aece3665551c496acce3bf3eafbbde94ed3dc6c39d"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "drivers/gpu/drm/amd/display/dc/dce/dce_scl_filters_old.c"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC001", "level": "warning", "message": {"text": "Parallel implementation file sits beside a canonical file"}, "properties": {"repobilityId": 139769, "scanner": "repobility-ai-code-hygiene", "fingerprint": "1565f5e46efcce416b6b757495b9fa9f283ef914472ff36c9f63ef45c93c5f81", "category": "quality", "severity": "medium", "confidence": 0.82, "triageState": "open", "verdict": "likely", "isResolved": false, "reason": "Source filename has a patch-style suffix and a same-directory canonical sibling exists.", "evidence": {"suffix": "fixed", "rule_id": "AIC001", "scanner": "repobility-ai-code-hygiene", "references": ["https://arxiv.org/abs/2601.15195", "https://knip.dev/"], "canonical_file": "drivers/clk/tegra/clk-periph.c", "correlation_key": "fp|1565f5e46efcce416b6b757495b9fa9f283ef914472ff36c9f63ef45c93c5f81"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "drivers/clk/tegra/clk-periph-fixed.c"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC001", "level": "warning", "message": {"text": "Parallel implementation file sits beside a canonical file"}, "properties": {"repobilityId": 139766, "scanner": "repobility-ai-code-hygiene", "fingerprint": "eb14b9b87b51670e0f5b420d8af6de698ff3e95af2c45d78e87d161c74a03a37", "category": "quality", "severity": "medium", "confidence": 0.82, "triageState": "open", "verdict": "likely", "isResolved": false, "reason": "Source filename has a patch-style suffix and a same-directory canonical sibling exists.", "evidence": {"suffix": "fixed", "rule_id": "AIC001", "scanner": "repobility-ai-code-hygiene", "references": ["https://arxiv.org/abs/2601.15195", "https://knip.dev/"], "canonical_file": "arch/sh/mm/ioremap.c", "correlation_key": "fp|eb14b9b87b51670e0f5b420d8af6de698ff3e95af2c45d78e87d161c74a03a37"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "arch/sh/mm/ioremap_fixed.c"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC001", "level": "warning", "message": {"text": "Parallel implementation file sits beside a canonical file"}, "properties": {"repobilityId": 139764, "scanner": "repobility-ai-code-hygiene", "fingerprint": "f92d2fb1335dfc53a493b34c39e46692bc7f10f396ebe19f67432cec5f8411b9", "category": "quality", "severity": "medium", "confidence": 0.82, "triageState": "open", "verdict": "likely", "isResolved": false, "reason": "Source filename has a patch-style suffix and a same-directory canonical sibling exists.", "evidence": {"suffix": "wip", "rule_id": "AIC001", "scanner": "repobility-ai-code-hygiene", "references": ["https://arxiv.org/abs/2601.15195", "https://knip.dev/"], "canonical_file": "arch/arm/boot/compressed/fdt.c", "correlation_key": "fp|f92d2fb1335dfc53a493b34c39e46692bc7f10f396ebe19f67432cec5f8411b9"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "arch/arm/boot/compressed/fdt_wip.c"}, "region": {"startLine": 1}}}]}, {"ruleId": "COMP001", "level": "warning", "message": {"text": "[COMP001] High cognitive complexity: Function `parse_table` has cognitive complexity 15 (SonarSource scale). Cognitive complexity measures how hard the function is for a human to understand \u2014 nested branches, boolean chains, and recursion all weigh in. Breakdown: continue=2, else=1, for=1, if=5, nested_bonus=6."}, "properties": {"repobilityId": 139748, "scanner": "repobility-threat-engine", "fingerprint": "f4786cb142721e6c13f4c3308e36d43069a1c74819a3d24706f6a232e0a14dcf", "category": "quality", "severity": "medium", "confidence": 0.95, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "AST-derived cognitive complexity score = 15 (severity threshold for medium: 15+).", "evidence": {"scanner": "repobility-threat-engine", "function": "parse_table", "breakdown": {"if": 5, "for": 1, "else": 1, "continue": 2, "nested_bonus": 6}, "complexity": 15, "correlation_key": "fp|f4786cb142721e6c13f4c3308e36d43069a1c74819a3d24706f6a232e0a14dcf"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/scripts/veristat_compare.py"}, "region": {"startLine": 151}}}]}, {"ruleId": "COMP001", "level": "warning", "message": {"text": "[COMP001] High cognitive complexity: Function `query_runners_from_github` has cognitive complexity 15 (SonarSource scale). Cognitive complexity measures how hard the function is for a human to understand \u2014 nested branches, boolean chains, and recursion all weigh in. Breakdown: break=1, except=1, for=1, if=4, nested_bonus=7, while=1."}, "properties": {"repobilityId": 139746, "scanner": "repobility-threat-engine", "fingerprint": "c38d79104307d4acfd3a614fc663a5bf2acaa252265e78c858e6372d9e992db0", "category": "quality", "severity": "medium", "confidence": 0.95, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "AST-derived cognitive complexity score = 15 (severity threshold for medium: 15+).", "evidence": {"scanner": "repobility-threat-engine", "function": "query_runners_from_github", "breakdown": {"if": 4, "for": 1, "break": 1, "while": 1, "except": 1, "nested_bonus": 7}, "complexity": 15, "correlation_key": "fp|c38d79104307d4acfd3a614fc663a5bf2acaa252265e78c858e6372d9e992db0"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/scripts/matrix.py"}, "region": {"startLine": 42}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 139828, "scanner": "repobility-ai-code-hygiene", "fingerprint": "9dacffd2ef6993effa99ab42a001add3a40d007d5e6ffdbd5a5a5e84ec2fd09c", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "arch/arc/include/asm/ptrace.h", "duplicate_line": 70, "correlation_key": "fp|9dacffd2ef6993effa99ab42a001add3a40d007d5e6ffdbd5a5a5e84ec2fd09c"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "arch/arm/include/asm/ptrace.h"}, "region": {"startLine": 42}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 139827, "scanner": "repobility-ai-code-hygiene", "fingerprint": "9cde9bf211f8e7d98298dd6fd2a054764545f8c4c019db2460f88b4fe170f415", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "arch/arc/include/asm/irqflags-arcv2.h", "duplicate_line": 51, "correlation_key": "fp|9cde9bf211f8e7d98298dd6fd2a054764545f8c4c019db2460f88b4fe170f415"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "arch/arc/include/asm/irqflags-compact.h"}, "region": {"startLine": 64}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 139826, "scanner": "repobility-ai-code-hygiene", "fingerprint": "e8350010bb576ac185f68f293138a66a872e18bc2835063cdab49b5176333ae7", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "arch/arc/include/asm/entry-arcv2.h", "duplicate_line": 147, "correlation_key": "fp|e8350010bb576ac185f68f293138a66a872e18bc2835063cdab49b5176333ae7"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "arch/arc/include/asm/entry-compact.h"}, "region": {"startLine": 38}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 139825, "scanner": "repobility-ai-code-hygiene", "fingerprint": "fe672e897beb20f36ab60ab53727b8e275fdbdd356246eefbbc8d36f0e15c924", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "arch/alpha/lib/csum_partial_copy.c", "duplicate_line": 19, "correlation_key": "fp|fe672e897beb20f36ab60ab53727b8e275fdbdd356246eefbbc8d36f0e15c924"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "arch/alpha/lib/checksum.c"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 139824, "scanner": "repobility-ai-code-hygiene", "fingerprint": "0b2e29cdf5c7730c0dd8be6756ae8ad5786fcf2c64b2b31ff2f7a8e987ba6402", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "arch/alpha/kernel/sys_alcor.c", "duplicate_line": 86, "correlation_key": "fp|0b2e29cdf5c7730c0dd8be6756ae8ad5786fcf2c64b2b31ff2f7a8e987ba6402"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "arch/alpha/kernel/sys_miata.c"}, "region": {"startLine": 98}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 139823, "scanner": "repobility-ai-code-hygiene", "fingerprint": "f41ce6190c3d773b52f5607239bb9daba04e3e55753f41f98efe7792637735a1", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "arch/alpha/kernel/core_irongate.c", "duplicate_line": 18, "correlation_key": "fp|f41ce6190c3d773b52f5607239bb9daba04e3e55753f41f98efe7792637735a1"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "arch/alpha/kernel/core_wildfire.c"}, "region": {"startLine": 232}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 139822, "scanner": "repobility-ai-code-hygiene", "fingerprint": "34a2a933831e41295432a49774dab36724e2c0572606ed07dd72ea4daf4e5d46", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "arch/alpha/kernel/core_titan.c", "duplicate_line": 23, "correlation_key": "fp|34a2a933831e41295432a49774dab36724e2c0572606ed07dd72ea4daf4e5d46"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "arch/alpha/kernel/core_wildfire.c"}, "region": {"startLine": 212}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 139821, "scanner": "repobility-ai-code-hygiene", "fingerprint": "8b5aa3d8f253acca6a9cf1133e3fba2f8bb72e594839ea2c497cc3629f9a052a", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "arch/alpha/kernel/core_irongate.c", "duplicate_line": 18, "correlation_key": "fp|8b5aa3d8f253acca6a9cf1133e3fba2f8bb72e594839ea2c497cc3629f9a052a"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "arch/alpha/kernel/core_tsunami.c"}, "region": {"startLine": 26}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 139820, "scanner": "repobility-ai-code-hygiene", "fingerprint": "4a918acd70ef263d84399918575e7c80bb6d48a4e6ebfd8c97f8d48ddfeccb12", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "arch/alpha/kernel/core_titan.c", "duplicate_line": 24, "correlation_key": "fp|4a918acd70ef263d84399918575e7c80bb6d48a4e6ebfd8c97f8d48ddfeccb12"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "arch/alpha/kernel/core_tsunami.c"}, "region": {"startLine": 7}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 139819, "scanner": "repobility-ai-code-hygiene", "fingerprint": "2e7893c5c387a064edfa09a6a84e8bf5cd00585217dbe83ce4591e406f748fee", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "arch/alpha/kernel/core_marvel.c", "duplicate_line": 417, "correlation_key": "fp|2e7893c5c387a064edfa09a6a84e8bf5cd00585217dbe83ce4591e406f748fee"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "arch/alpha/kernel/core_titan.c"}, "region": {"startLine": 291}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 139818, "scanner": "repobility-ai-code-hygiene", "fingerprint": "137117bfa667a8fcfe4c79296149285ee0793be153866ade9ff5253d9f1aeca4", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "arch/alpha/kernel/core_irongate.c", "duplicate_line": 18, "correlation_key": "fp|137117bfa667a8fcfe4c79296149285ee0793be153866ade9ff5253d9f1aeca4"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "arch/alpha/kernel/core_titan.c"}, "region": {"startLine": 43}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 139817, "scanner": "repobility-ai-code-hygiene", "fingerprint": "e34a02855ea1793698d244d7874924665329a3c261243c903df7483db0de84a5", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "arch/alpha/kernel/core_irongate.c", "duplicate_line": 18, "correlation_key": "fp|e34a02855ea1793698d244d7874924665329a3c261243c903df7483db0de84a5"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "arch/alpha/kernel/core_polaris.c"}, "region": {"startLine": 14}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 139816, "scanner": "repobility-ai-code-hygiene", "fingerprint": "9e248071f1857dc2d4ad64ef6d6416e73934a3cc855dcfc34578f0e1c636a2b0", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "arch/alpha/kernel/core_irongate.c", "duplicate_line": 41, "correlation_key": "fp|9e248071f1857dc2d4ad64ef6d6416e73934a3cc855dcfc34578f0e1c636a2b0"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "arch/alpha/kernel/core_marvel.c"}, "region": {"startLine": 306}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 139815, "scanner": "repobility-ai-code-hygiene", "fingerprint": "7bfe85f57d807797431b7d82f17eb09d3ce7f52754ee6fe3cb7158c564690d10", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "arch/alpha/boot/bootp.c", "duplicate_line": 5, "correlation_key": "fp|7bfe85f57d807797431b7d82f17eb09d3ce7f52754ee6fe3cb7158c564690d10"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "arch/alpha/boot/main.c"}, "region": {"startLine": 4}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 139814, "scanner": "repobility-ai-code-hygiene", "fingerprint": "713ddd895e7a2b3140bd7bdafa54e4c97251c424cdbfc97c0ecdffedeed9dee9", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "arch/alpha/boot/bootp.c", "duplicate_line": 17, "correlation_key": "fp|713ddd895e7a2b3140bd7bdafa54e4c97251c424cdbfc97c0ecdffedeed9dee9"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "arch/alpha/boot/bootpz.c"}, "region": {"startLine": 41}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 139813, "scanner": "repobility-ai-code-hygiene", "fingerprint": "ea613e71f047788c1bb7148ce3d148c6e5306530bf2653e4d2ccece0fb1af9a8", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "drivers/net/ethernet/intel/ice/ice_fw_update.c", "duplicate_line": 150, "correlation_key": "fp|ea613e71f047788c1bb7148ce3d148c6e5306530bf2653e4d2ccece0fb1af9a8"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "drivers/net/ethernet/intel/ixgbe/ixgbe_fw_update.c"}, "region": {"startLine": 112}}}]}, {"ruleId": "AIC002", "level": "note", "message": {"text": "Source file name looks like an AI patch artifact"}, "properties": {"repobilityId": 139792, "scanner": "repobility-ai-code-hygiene", "fingerprint": "72a91d1dfb42f8929a0edec4947869d98823521b3e03342f5a396dfa33787582", "category": "quality", "severity": "low", "confidence": 0.62, "triageState": "open", "verdict": "needs_review", "isResolved": false, "reason": "Source filename contains a temporary or patch-style suffix.", "evidence": {"suffix": "update", "rule_id": "AIC002", "scanner": "repobility-ai-code-hygiene", "references": ["https://arxiv.org/abs/2601.15195"], "correlation_key": "fp|72a91d1dfb42f8929a0edec4947869d98823521b3e03342f5a396dfa33787582"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "drivers/platform/x86/intel/wmi/sbl-fw-update.c"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC002", "level": "note", "message": {"text": "Source file name looks like an AI patch artifact"}, "properties": {"repobilityId": 139790, "scanner": "repobility-ai-code-hygiene", "fingerprint": "404897c94b2648761ea70852cd5a3e58b30d30b6153843f4619d06cd258403e0", "category": "quality", "severity": "low", "confidence": 0.62, "triageState": "open", "verdict": "needs_review", "isResolved": false, "reason": "Source filename contains a temporary or patch-style suffix.", "evidence": {"suffix": "update", "rule_id": "AIC002", "scanner": "repobility-ai-code-hygiene", "references": ["https://arxiv.org/abs/2601.15195"], "correlation_key": "fp|404897c94b2648761ea70852cd5a3e58b30d30b6153843f4619d06cd258403e0"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "drivers/net/ethernet/intel/ixgbe/ixgbe_fw_update.c"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC002", "level": "note", "message": {"text": "Source file name looks like an AI patch artifact"}, "properties": {"repobilityId": 139789, "scanner": "repobility-ai-code-hygiene", "fingerprint": "0ff380f329ff66221699c1ea6ceb89811a32cdd80f6b237bfd520adfab0fa3b5", "category": "quality", "severity": "low", "confidence": 0.62, "triageState": "open", "verdict": "needs_review", "isResolved": false, "reason": "Source filename contains a temporary or patch-style suffix.", "evidence": {"suffix": "update", "rule_id": "AIC002", "scanner": "repobility-ai-code-hygiene", "references": ["https://arxiv.org/abs/2601.15195"], "correlation_key": "fp|0ff380f329ff66221699c1ea6ceb89811a32cdd80f6b237bfd520adfab0fa3b5"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "drivers/net/ethernet/intel/ice/ice_fw_update.c"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC002", "level": "note", "message": {"text": "Source file name looks like an AI patch artifact"}, "properties": {"repobilityId": 139787, "scanner": "repobility-ai-code-hygiene", "fingerprint": "78ae52b902f81858725064a6f5b5fcf84adcbf499de20b9ac9736fe268fb3b5a", "category": "quality", "severity": "low", "confidence": 0.62, "triageState": "open", "verdict": "needs_review", "isResolved": false, "reason": "Source filename contains a temporary or patch-style suffix.", "evidence": {"suffix": "old", "rule_id": "AIC002", "scanner": "repobility-ai-code-hygiene", "references": ["https://arxiv.org/abs/2601.15195"], "correlation_key": "fp|78ae52b902f81858725064a6f5b5fcf84adcbf499de20b9ac9736fe268fb3b5a"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "drivers/media/rc/keymaps/rc-budget-ci-old.c"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC002", "level": "note", "message": {"text": "Source file name looks like an AI patch artifact"}, "properties": {"repobilityId": 139785, "scanner": "repobility-ai-code-hygiene", "fingerprint": "f5834485f348a2661908bc89174af3d4fa0ab8bcae11c61b9346bb8d1f1c10ef", "category": "quality", "severity": "low", "confidence": 0.62, "triageState": "open", "verdict": "needs_review", "isResolved": false, "reason": "Source filename contains a temporary or patch-style suffix.", "evidence": {"suffix": "temp", "rule_id": "AIC002", "scanner": "repobility-ai-code-hygiene", "references": ["https://arxiv.org/abs/2601.15195"], "correlation_key": "fp|f5834485f348a2661908bc89174af3d4fa0ab8bcae11c61b9346bb8d1f1c10ef"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "drivers/iio/temperature/iqs620at-temp.c"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC002", "level": "note", "message": {"text": "Source file name looks like an AI patch artifact"}, "properties": {"repobilityId": 139783, "scanner": "repobility-ai-code-hygiene", "fingerprint": "520b75fb3fd454ea6c80552c33d86872d9e745ab6b1a27e221c968bab81bf1ec", "category": "quality", "severity": "low", "confidence": 0.62, "triageState": "open", "verdict": "needs_review", "isResolved": false, "reason": "Source filename contains a temporary or patch-style suffix.", "evidence": {"suffix": "temp", "rule_id": "AIC002", "scanner": "repobility-ai-code-hygiene", "references": ["https://arxiv.org/abs/2601.15195"], "correlation_key": "fp|520b75fb3fd454ea6c80552c33d86872d9e745ab6b1a27e221c968bab81bf1ec"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "drivers/iio/imu/inv_icm42600/inv_icm42600_temp.c"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC002", "level": "note", "message": {"text": "Source file name looks like an AI patch artifact"}, "properties": {"repobilityId": 139782, "scanner": "repobility-ai-code-hygiene", "fingerprint": "d1d684c554774d6d0687d90309e1698c2ba7c21539c9759c82c65f531a96e5a2", "category": "quality", "severity": "low", "confidence": 0.62, "triageState": "open", "verdict": "needs_review", "isResolved": false, "reason": "Source filename contains a temporary or patch-style suffix.", "evidence": {"suffix": "temp", "rule_id": "AIC002", "scanner": "repobility-ai-code-hygiene", "references": ["https://arxiv.org/abs/2601.15195"], "correlation_key": "fp|d1d684c554774d6d0687d90309e1698c2ba7c21539c9759c82c65f531a96e5a2"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "drivers/hwmon/surface_temp.c"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC002", "level": "note", "message": {"text": "Source file name looks like an AI patch artifact"}, "properties": {"repobilityId": 139781, "scanner": "repobility-ai-code-hygiene", "fingerprint": "d341c7df079d1b13e3711baa0df40de084f54e6b31fe60c5949319f9fb87745a", "category": "quality", "severity": "low", "confidence": 0.62, "triageState": "open", "verdict": "needs_review", "isResolved": false, "reason": "Source filename contains a temporary or patch-style suffix.", "evidence": {"suffix": "temp", "rule_id": "AIC002", "scanner": "repobility-ai-code-hygiene", "references": ["https://arxiv.org/abs/2601.15195"], "correlation_key": "fp|d341c7df079d1b13e3711baa0df40de084f54e6b31fe60c5949319f9fb87745a"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "drivers/hwmon/sparx5-temp.c"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC002", "level": "note", "message": {"text": "Source file name looks like an AI patch artifact"}, "properties": {"repobilityId": 139780, "scanner": "repobility-ai-code-hygiene", "fingerprint": "794c6b5f38383099933b3398b264ff60d317fd130076331cbf3ea77dade907b6", "category": "quality", "severity": "low", "confidence": 0.62, "triageState": "open", "verdict": "needs_review", "isResolved": false, "reason": "Source filename contains a temporary or patch-style suffix.", "evidence": {"suffix": "temp", "rule_id": "AIC002", "scanner": "repobility-ai-code-hygiene", "references": ["https://arxiv.org/abs/2601.15195"], "correlation_key": "fp|794c6b5f38383099933b3398b264ff60d317fd130076331cbf3ea77dade907b6"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "drivers/hwmon/sbtsi_temp.c"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC002", "level": "note", "message": {"text": "Source file name looks like an AI patch artifact"}, "properties": {"repobilityId": 139779, "scanner": "repobility-ai-code-hygiene", "fingerprint": "f6b09d41472ef5677626ecce8708387858d2bdfa3510a4d4ad7d159100f0baf9", "category": "quality", "severity": "low", "confidence": 0.62, "triageState": "open", "verdict": "needs_review", "isResolved": false, "reason": "Source filename contains a temporary or patch-style suffix.", "evidence": {"suffix": "temp", "rule_id": "AIC002", "scanner": "repobility-ai-code-hygiene", "references": ["https://arxiv.org/abs/2601.15195"], "correlation_key": "fp|f6b09d41472ef5677626ecce8708387858d2bdfa3510a4d4ad7d159100f0baf9"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "drivers/hwmon/i5500_temp.c"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC002", "level": "note", "message": {"text": "Source file name looks like an AI patch artifact"}, "properties": {"repobilityId": 139778, "scanner": "repobility-ai-code-hygiene", "fingerprint": "416f7aa6e932584d4da39272881d39d0fe7c4675140e7c2c5da4e7ad6b2c3628", "category": "quality", "severity": "low", "confidence": 0.62, "triageState": "open", "verdict": "needs_review", "isResolved": false, "reason": "Source filename contains a temporary or patch-style suffix.", "evidence": {"suffix": "backup", "rule_id": "AIC002", "scanner": "repobility-ai-code-hygiene", "references": ["https://arxiv.org/abs/2601.15195"], "correlation_key": "fp|416f7aa6e932584d4da39272881d39d0fe7c4675140e7c2c5da4e7ad6b2c3628"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "drivers/gpu/drm/ttm/ttm_backup.c"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC002", "level": "note", "message": {"text": "Source file name looks like an AI patch artifact"}, "properties": {"repobilityId": 139777, "scanner": "repobility-ai-code-hygiene", "fingerprint": "e8cd4ba2a8e6c32473cd8ec439a41653bf218c7e8763106384c19b8b93f73837", "category": "quality", "severity": "low", "confidence": 0.62, "triageState": "open", "verdict": "needs_review", "isResolved": false, "reason": "Source filename contains a temporary or patch-style suffix.", "evidence": {"suffix": "fixed", "rule_id": "AIC002", "scanner": "repobility-ai-code-hygiene", "references": ["https://arxiv.org/abs/2601.15195"], "correlation_key": "fp|e8cd4ba2a8e6c32473cd8ec439a41653bf218c7e8763106384c19b8b93f73837"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "drivers/gpu/drm/i915/display/intel_fixed.h"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC002", "level": "note", "message": {"text": "Source file name looks like an AI patch artifact"}, "properties": {"repobilityId": 139776, "scanner": "repobility-ai-code-hygiene", "fingerprint": "2c8fdf70c7b289e9ce660ee1e9fa28a7dba1d08e8610c42244e3bb173289be84", "category": "quality", "severity": "low", "confidence": 0.62, "triageState": "open", "verdict": "needs_review", "isResolved": false, "reason": "Source filename contains a temporary or patch-style suffix.", "evidence": {"suffix": "fixed", "rule_id": "AIC002", "scanner": "repobility-ai-code-hygiene", "references": ["https://arxiv.org/abs/2601.15195"], "correlation_key": "fp|2c8fdf70c7b289e9ce660ee1e9fa28a7dba1d08e8610c42244e3bb173289be84"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "drivers/gpu/drm/amd/display/dc/inc/bw_fixed.h"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC002", "level": "note", "message": {"text": "Source file name looks like an AI patch artifact"}, "properties": {"repobilityId": 139774, "scanner": "repobility-ai-code-hygiene", "fingerprint": "a8d0e39ccd1d310bf5bed1166a27b39bba9689c33c183cc030cbb1cc5f683dec", "category": "quality", "severity": "low", "confidence": 0.62, "triageState": "open", "verdict": "needs_review", "isResolved": false, "reason": "Source filename contains a temporary or patch-style suffix.", "evidence": {"suffix": "fixed", "rule_id": "AIC002", "scanner": "repobility-ai-code-hygiene", "references": ["https://arxiv.org/abs/2601.15195"], "correlation_key": "fp|a8d0e39ccd1d310bf5bed1166a27b39bba9689c33c183cc030cbb1cc5f683dec"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "drivers/gpu/drm/amd/display/dc/basics/bw_fixed.c"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC002", "level": "note", "message": {"text": "Source file name looks like an AI patch artifact"}, "properties": {"repobilityId": 139773, "scanner": "repobility-ai-code-hygiene", "fingerprint": "713f41600875428a13b0cd9a02bf4a53cfd490ded334cc80b1ea6cec50b4ded7", "category": "quality", "severity": "low", "confidence": 0.62, "triageState": "open", "verdict": "needs_review", "isResolved": false, "reason": "Source filename contains a temporary or patch-style suffix.", "evidence": {"suffix": "update", "rule_id": "AIC002", "scanner": "repobility-ai-code-hygiene", "references": ["https://arxiv.org/abs/2601.15195"], "correlation_key": "fp|713f41600875428a13b0cd9a02bf4a53cfd490ded334cc80b1ea6cec50b4ded7"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "drivers/fpga/intel-m10-bmc-sec-update.c"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC002", "level": "note", "message": {"text": "Source file name looks like an AI patch artifact"}, "properties": {"repobilityId": 139772, "scanner": "repobility-ai-code-hygiene", "fingerprint": "a76768a02370ab02664c0b9b58ce29804b8d46f7f45bfef3d1f90acce876a974", "category": "quality", "severity": "low", "confidence": 0.62, "triageState": "open", "verdict": "needs_review", "isResolved": false, "reason": "Source filename contains a temporary or patch-style suffix.", "evidence": {"suffix": "update", "rule_id": "AIC002", "scanner": "repobility-ai-code-hygiene", "references": ["https://arxiv.org/abs/2601.15195"], "correlation_key": "fp|a76768a02370ab02664c0b9b58ce29804b8d46f7f45bfef3d1f90acce876a974"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "drivers/firmware/microchip/mpfs-auto-update.c"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC002", "level": "note", "message": {"text": "Source file name looks like an AI patch artifact"}, "properties": {"repobilityId": 139771, "scanner": "repobility-ai-code-hygiene", "fingerprint": "47b0e205765f7609f443519fc46fdfdac5acc2b80b3d6c70d0d1b00250cc5840", "category": "quality", "severity": "low", "confidence": 0.62, "triageState": "open", "verdict": "needs_review", "isResolved": false, "reason": "Source filename contains a temporary or patch-style suffix.", "evidence": {"suffix": "fixed", "rule_id": "AIC002", "scanner": "repobility-ai-code-hygiene", "references": ["https://arxiv.org/abs/2601.15195"], "correlation_key": "fp|47b0e205765f7609f443519fc46fdfdac5acc2b80b3d6c70d0d1b00250cc5840"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "drivers/crypto/intel/iaa/iaa_crypto_comp_fixed.c"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC002", "level": "note", "message": {"text": "Source file name looks like an AI patch artifact"}, "properties": {"repobilityId": 139770, "scanner": "repobility-ai-code-hygiene", "fingerprint": "703249c61fdbb8e74d7608ef82ee839e26bc3a1521bf11478b9a5d484eebc40f", "category": "quality", "severity": "low", "confidence": 0.62, "triageState": "open", "verdict": "needs_review", "isResolved": false, "reason": "Source filename contains a temporary or patch-style suffix.", "evidence": {"suffix": "fixed", "rule_id": "AIC002", "scanner": "repobility-ai-code-hygiene", "references": ["https://arxiv.org/abs/2601.15195"], "correlation_key": "fp|703249c61fdbb8e74d7608ef82ee839e26bc3a1521bf11478b9a5d484eebc40f"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "drivers/clk/tegra/clk-tegra-fixed.c"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC002", "level": "note", "message": {"text": "Source file name looks like an AI patch artifact"}, "properties": {"repobilityId": 139768, "scanner": "repobility-ai-code-hygiene", "fingerprint": "b8110a5515c388b2e95462a50bcda0db82fe56461ee8af1ba22413e8a4bdab25", "category": "quality", "severity": "low", "confidence": 0.62, "triageState": "open", "verdict": "needs_review", "isResolved": false, "reason": "Source filename contains a temporary or patch-style suffix.", "evidence": {"suffix": "old", "rule_id": "AIC002", "scanner": "repobility-ai-code-hygiene", "references": ["https://arxiv.org/abs/2601.15195"], "correlation_key": "fp|b8110a5515c388b2e95462a50bcda0db82fe56461ee8af1ba22413e8a4bdab25"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "drivers/ata/pata_pdc202xx_old.c"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC002", "level": "note", "message": {"text": "Source file name looks like an AI patch artifact"}, "properties": {"repobilityId": 139767, "scanner": "repobility-ai-code-hygiene", "fingerprint": "1c14a7a2b14071b3c4d856c6a5830ed6f3d36d2db8ea9a1b8363a6ee26c33d4d", "category": "quality", "severity": "low", "confidence": 0.62, "triageState": "open", "verdict": "needs_review", "isResolved": false, "reason": "Source filename contains a temporary or patch-style suffix.", "evidence": {"suffix": "update", "rule_id": "AIC002", "scanner": "repobility-ai-code-hygiene", "references": ["https://arxiv.org/abs/2601.15195"], "correlation_key": "fp|1c14a7a2b14071b3c4d856c6a5830ed6f3d36d2db8ea9a1b8363a6ee26c33d4d"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "drivers/acpi/pfr_update.c"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC002", "level": "note", "message": {"text": "Source file name looks like an AI patch artifact"}, "properties": {"repobilityId": 139765, "scanner": "repobility-ai-code-hygiene", "fingerprint": "5a6002685937e9d141a261c873ff7607cccf72328ced36da5dd09a11d6815552", "category": "quality", "severity": "low", "confidence": 0.62, "triageState": "open", "verdict": "needs_review", "isResolved": false, "reason": "Source filename contains a temporary or patch-style suffix.", "evidence": {"suffix": "copy", "rule_id": "AIC002", "scanner": "repobility-ai-code-hygiene", "references": ["https://arxiv.org/abs/2601.15195"], "correlation_key": "fp|5a6002685937e9d141a261c873ff7607cccf72328ced36da5dd09a11d6815552"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "arch/mips/lib/iomap_copy.c"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC002", "level": "note", "message": {"text": "Source file name looks like an AI patch artifact"}, "properties": {"repobilityId": 139763, "scanner": "repobility-ai-code-hygiene", "fingerprint": "be8598d824c2c9857d952ced362d76216df5ab41396e3a4eaf184436a03c9ca7", "category": "quality", "severity": "low", "confidence": 0.62, "triageState": "open", "verdict": "needs_review", "isResolved": false, "reason": "Source filename contains a temporary or patch-style suffix.", "evidence": {"suffix": "copy", "rule_id": "AIC002", "scanner": "repobility-ai-code-hygiene", "references": ["https://arxiv.org/abs/2601.15195"], "correlation_key": "fp|be8598d824c2c9857d952ced362d76216df5ab41396e3a4eaf184436a03c9ca7"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "arch/alpha/lib/csum_partial_copy.c"}, "region": {"startLine": 1}}}]}, {"ruleId": "COMP001", "level": "note", "message": {"text": "[COMP001] High cognitive complexity: Function `count_by_status` has cognitive complexity 8 (SonarSource scale). Cognitive complexity measures how hard the function is for a human to understand \u2014 nested branches, boolean chains, and recursion all weigh in. Breakdown: else=2, for=1, if=2, nested_bonus=3."}, "properties": {"repobilityId": 139747, "scanner": "repobility-threat-engine", "fingerprint": "9cbd0501404bc41bd981ba9fc2757f640ebf3582cfe1ded0a2ef9acdc846165e", "category": "quality", "severity": "low", "confidence": 0.95, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "AST-derived cognitive complexity score = 8 (severity threshold for low: 8+).", "evidence": {"scanner": "repobility-threat-engine", "function": "count_by_status", "breakdown": {"if": 2, "for": 1, "else": 2, "nested_bonus": 3}, "complexity": 8, "correlation_key": "fp|9cbd0501404bc41bd981ba9fc2757f640ebf3582cfe1ded0a2ef9acdc846165e"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/scripts/matrix.py"}, "region": {"startLine": 115}}}]}, {"ruleId": "MINED042", "level": "none", "message": {"text": "[MINED042] Cpp New Without Delete: C++ raw new without RAII / unique_ptr \u2014 memory leak risk."}, "properties": {"repobilityId": 139762, "scanner": "repobility-threat-engine", "fingerprint": "2bb6b70eec8be1f87f42e28144f5b456947e986032c2f461de98e7efc289948c", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "cpp-new-without-delete", "owasp": null, "cwe_ids": ["CWE-401"], "languages": ["cpp"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347996+00:00", "triaged_in_corpus": 12, "observations_count": 4658256, "ai_coder_pattern_id": 134}, "scanner": "repobility-threat-engine", "correlation_key": "fp|2bb6b70eec8be1f87f42e28144f5b456947e986032c2f461de98e7efc289948c"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "arch/arm64/include/asm/alternative.h"}, "region": {"startLine": 18}}}]}, {"ruleId": "MINED043", "level": "none", "message": {"text": "[MINED043] Http Not Https: Hardcoded http:// (not localhost) for endpoints that handle credentials or data."}, "properties": {"repobilityId": 139761, "scanner": "repobility-threat-engine", "fingerprint": "b13d671404699a651c80bbf285693377830311daa5d4260075ed9d906ffde343", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "http-not-https", "owasp": "A02:2021", "cwe_ids": ["CWE-319"], "precision": 0.917, "promoted_at": "2026-05-18T14:01:32.347999+00:00", "triaged_in_corpus": 12, "observations_count": 4113831, "ai_coder_pattern_id": 15}, "scanner": "repobility-threat-engine", "correlation_key": "fp|b13d671404699a651c80bbf285693377830311daa5d4260075ed9d906ffde343"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "arch/arm/nwfpe/softfloat.h"}, "region": {"startLine": 16}}}]}, {"ruleId": "MINED043", "level": "none", "message": {"text": "[MINED043] Http Not Https: Hardcoded http:// (not localhost) for endpoints that handle credentials or data."}, "properties": {"repobilityId": 139760, "scanner": "repobility-threat-engine", "fingerprint": "33d2e85977a8a530ddb8accf67777d23953a71ff4ee8c54b8d81fffbf907ee87", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "http-not-https", "owasp": "A02:2021", "cwe_ids": ["CWE-319"], "precision": 0.917, "promoted_at": "2026-05-18T14:01:32.347999+00:00", "triaged_in_corpus": 12, "observations_count": 4113831, "ai_coder_pattern_id": 15}, "scanner": "repobility-threat-engine", "correlation_key": "fp|33d2e85977a8a530ddb8accf67777d23953a71ff4ee8c54b8d81fffbf907ee87"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "arch/arm/nwfpe/milieu.h"}, "region": {"startLine": 16}}}]}, {"ruleId": "MINED075", "level": "none", "message": {"text": "[MINED075] C Malloc No Check: malloc/calloc/realloc return value used without checking for NULL."}, "properties": {"repobilityId": 139759, "scanner": "repobility-threat-engine", "fingerprint": "451001cc9975c9cceed3c4792ca215f553acacdcafbad3dc4c4465a582441dc6", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "c-malloc-no-check", "owasp": null, "cwe_ids": ["CWE-690"], "languages": ["c", "cpp"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348076+00:00", "triaged_in_corpus": 12, "observations_count": 11735, "ai_coder_pattern_id": 131}, "scanner": "repobility-threat-engine", "correlation_key": "fp|451001cc9975c9cceed3c4792ca215f553acacdcafbad3dc4c4465a582441dc6"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "arch/alpha/boot/misc.c"}, "region": {"startLine": 165}}}]}, {"ruleId": "MINED022", "level": "none", "message": {"text": "[MINED022] C Strcpy (and 11 more): Same pattern found in 11 additional files. Review if needed."}, "properties": {"repobilityId": 139758, "scanner": "repobility-threat-engine", "fingerprint": "baaab7f7ec6de4c0e9b7fdcc6578841203438adeed6e45b53086249c6672b7ab", "category": "quality", "severity": "info", "confidence": 0.2, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Deduplicated summary only: 11 additional occurrences found. The top occurrences remain visible as actionable findings.", "evidence": {"mined": true, "mining": {"slug": "c-strcpy", "owasp": null, "cwe_ids": ["CWE-120"], "languages": ["c", "cpp"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347949+00:00", "triaged_in_corpus": 20, "observations_count": 39114, "ai_coder_pattern_id": 130}, "scanner": "repobility-threat-engine", "aggregated": true, "correlation_key": "fp|baaab7f7ec6de4c0e9b7fdcc6578841203438adeed6e45b53086249c6672b7ab", "aggregated_count": 11}}}, {"ruleId": "MINED072", "level": "none", "message": {"text": "[MINED072] Python Pass Only Class: class Foo: pass \u2014 stub waiting to be filled in."}, "properties": {"repobilityId": 139754, "scanner": "repobility-threat-engine", "fingerprint": "7d40f9fb4b1d02e1d997193633ad02e8b16866cbbc490c9ecda64c8ce3e5f506", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "python-pass-only-class", "owasp": null, "cwe_ids": ["CWE-1188"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348069+00:00", "triaged_in_corpus": 10, "observations_count": 14245, "ai_coder_pattern_id": 143}, "scanner": "repobility-threat-engine", "correlation_key": "fp|7d40f9fb4b1d02e1d997193633ad02e8b16866cbbc490c9ecda64c8ce3e5f506"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Documentation/sphinx/translations.py"}, "region": {"startLine": 32}}}]}, {"ruleId": "MINED050", "level": "none", "message": {"text": "[MINED050] Stub Only Function: Function declared but body is just pass, return None, raise NotImplementedError, or TODO comment."}, "properties": {"repobilityId": 139752, "scanner": "repobility-threat-engine", "fingerprint": "273f983ea84954aeca0f66744b5a6e0709396f13fae7d952f5010b1ffffad2c9", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "stub-only-function", "owasp": null, "cwe_ids": ["CWE-1188"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348017+00:00", "triaged_in_corpus": 12, "observations_count": 633513, "ai_coder_pattern_id": 2}, "scanner": "repobility-threat-engine", "correlation_key": "fp|273f983ea84954aeca0f66744b5a6e0709396f13fae7d952f5010b1ffffad2c9"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Documentation/sphinx/translations.py"}, "region": {"startLine": 33}}}]}, {"ruleId": "MINED050", "level": "none", "message": {"text": "[MINED050] Stub Only Function: Function declared but body is just pass, return None, raise NotImplementedError, or TODO comment."}, "properties": {"repobilityId": 139751, "scanner": "repobility-threat-engine", "fingerprint": "6f27dcc99b2399ab6d7029dcb2c7704363aae6caa73601ec3325572898a37a5a", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "stub-only-function", "owasp": null, "cwe_ids": ["CWE-1188"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348017+00:00", "triaged_in_corpus": 12, "observations_count": 633513, "ai_coder_pattern_id": 2}, "scanner": "repobility-threat-engine", "correlation_key": "fp|6f27dcc99b2399ab6d7029dcb2c7704363aae6caa73601ec3325572898a37a5a"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Documentation/sphinx/kerneldoc.py"}, "region": {"startLine": 129}}}]}, {"ruleId": "COMP001", "level": "none", "message": {"text": "[COMP001] High cognitive complexity (and 7 more): Same pattern found in 7 additional files. Review if needed."}, "properties": {"repobilityId": 139749, "scanner": "repobility-threat-engine", "fingerprint": "ae057f38a82b4ab40df0f4aaddc1a0bad56cc3e35c9a31fbdc7db8da14fe6f6c", "category": "quality", "severity": "info", "confidence": 0.2, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Deduplicated summary only: 7 additional occurrences found. The top occurrences remain visible as actionable findings.", "evidence": {"scanner": "repobility-threat-engine", "function": "query_runners_from_github", "breakdown": {"if": 4, "for": 1, "break": 1, "while": 1, "except": 1, "nested_bonus": 7}, "aggregated": true, "complexity": 15, "correlation_key": "fp|ae057f38a82b4ab40df0f4aaddc1a0bad56cc3e35c9a31fbdc7db8da14fe6f6c", "aggregated_count": 7}}}, {"ruleId": "MINED067", "level": "none", "message": {"text": "[MINED067] Python Requests No Timeout: requests.get/post/etc. without timeout= can hang forever."}, "properties": {"repobilityId": 139745, "scanner": "repobility-threat-engine", "fingerprint": "9e48dec7a5687299ff1220ebbc229c0af9c31dd27bf422e3ac0622007b75f5a6", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "python-requests-no-timeout", "owasp": null, "cwe_ids": ["CWE-400"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348058+00:00", "triaged_in_corpus": 12, "observations_count": 45429, "ai_coder_pattern_id": 122}, "scanner": "repobility-threat-engine", "correlation_key": "fp|9e48dec7a5687299ff1220ebbc229c0af9c31dd27bf422e3ac0622007b75f5a6"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/scripts/stagger.py"}, "region": {"startLine": 34}}}]}, {"ruleId": "MINED067", "level": "none", "message": {"text": "[MINED067] Python Requests No Timeout: requests.get/post/etc. without timeout= can hang forever."}, "properties": {"repobilityId": 139744, "scanner": "repobility-threat-engine", "fingerprint": "f07d4c56e4a18c80f880141e295f8b32a6cbd0e15a1616bdcac5fb4d54926554", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "python-requests-no-timeout", "owasp": null, "cwe_ids": ["CWE-400"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348058+00:00", "triaged_in_corpus": 12, "observations_count": 45429, "ai_coder_pattern_id": 122}, "scanner": "repobility-threat-engine", "correlation_key": "fp|f07d4c56e4a18c80f880141e295f8b32a6cbd0e15a1616bdcac5fb4d54926554"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/scripts/matrix.py"}, "region": {"startLine": 56}}}]}, {"ruleId": "MINED134", "level": "error", "message": {"text": "[MINED134] Binary file `tools/perf/tests/pe-file.exe` committed in source repo: `tools/perf/tests/pe-file.exe` is a .exe binary (75,595 bytes) committed to a repo that otherwise has 63886 source files. Trojan binaries inside otherwise-normal source repos are a known supply-chain attack: a compromised dependency or PR slips in a binary that gets executed by build scripts."}, "properties": {"repobilityId": 139975, "scanner": "repobility-supply-chain", "fingerprint": "ab3d658a745c40388281f3bb23b61364ff1ffe5d00367c8ff56932e9e6e2f654", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "suspicious-binary-in-src", "owasp": null, "cwe_ids": ["CWE-506"], "languages": ["any"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|ab3d658a745c40388281f3bb23b61364ff1ffe5d00367c8ff56932e9e6e2f654"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/perf/tests/pe-file.exe"}, "region": {"startLine": 1}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "[MINED115] Action `libbpf/ci/build-selftests` pinned to mutable ref `@v4`: `uses: libbpf/ci/build-selftests@v4` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-actions/changed-files compromise (2025) instantly affect ~23K repos. Pin to a 40-char commit SHA + lock with Dependabot or renovate."}, "properties": {"repobilityId": 139966, "scanner": "repobility-supply-chain", "fingerprint": "a7cae560c099d92825f038a87604450c21f201a32057968f795eddaafc057fe2", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|a7cae560c099d92825f038a87604450c21f201a32057968f795eddaafc057fe2"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/test-progs-asan.yml"}, "region": {"startLine": 87}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "[MINED115] Action `actions/download-artifact` pinned to mutable ref `@v7`: `uses: actions/download-artifact@v7` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-actions/changed-files compromise (2025) instantly affect ~23K repos. Pin to a 40-char commit SHA + lock with Dependabot or renovate."}, "properties": {"repobilityId": 139965, "scanner": "repobility-supply-chain", "fingerprint": "49a50afa20efacc174b9a4ca62a32d971d681b1a174175861e7847958761325c", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|49a50afa20efacc174b9a4ca62a32d971d681b1a174175861e7847958761325c"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/test-progs-asan.yml"}, "region": {"startLine": 76}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "[MINED115] Action `libbpf/ci/setup-build-env` pinned to mutable ref `@v4`: `uses: libbpf/ci/setup-build-env@v4` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-actions/changed-files compromise (2025) instantly affect ~23K repos. Pin to a 40-char commit SHA + lock with Dependabot or renovate."}, "properties": {"repobilityId": 139964, "scanner": "repobility-supply-chain", "fingerprint": "657bc44195a1716794bd1f608fa6bf98d4fd02ce1a5b828207656fb4689ba816", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|657bc44195a1716794bd1f608fa6bf98d4fd02ce1a5b828207656fb4689ba816"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/test-progs-asan.yml"}, "region": {"startLine": 71}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "[MINED115] Action `libbpf/ci/patch-kernel` pinned to mutable ref `@v4`: `uses: libbpf/ci/patch-kernel@v4` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-actions/changed-files compromise (2025) instantly affect ~23K repos. Pin to a 40-char commit SHA + lock with Dependabot or renovate."}, "properties": {"repobilityId": 139963, "scanner": "repobility-supply-chain", "fingerprint": "2e7150033fcb0adfa7c32bdf6e59eaaf767d8f072024c459b4f7731e00594a9f", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|2e7150033fcb0adfa7c32bdf6e59eaaf767d8f072024c459b4f7731e00594a9f"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/test-progs-asan.yml"}, "region": {"startLine": 64}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "[MINED115] Action `libbpf/ci/get-linux-source` pinned to mutable ref `@v4`: `uses: libbpf/ci/get-linux-source@v4` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-actions/changed-files compromise (2025) instantly affect ~23K repos. Pin to a 40-char commit SHA + lock with Dependabot or renovate."}, "properties": {"repobilityId": 139962, "scanner": "repobility-supply-chain", "fingerprint": "0d1036e91499d9b3460cd7ec054c0fbdcfb4f84b0bab176d27489ff5904e65a8", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|0d1036e91499d9b3460cd7ec054c0fbdcfb4f84b0bab176d27489ff5904e65a8"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/test-progs-asan.yml"}, "region": {"startLine": 59}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "[MINED115] Action `actions/checkout` pinned to mutable ref `@v6`: `uses: actions/checkout@v6` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-actions/changed-files compromise (2025) instantly affect ~23K repos. Pin to a 40-char commit SHA + lock with Dependabot or renovate."}, "properties": {"repobilityId": 139961, "scanner": "repobility-supply-chain", "fingerprint": "6666ee975af714332e1003dfc12a1a4a31f5f9af0fd17b7e7b8e48bf074dce61", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|6666ee975af714332e1003dfc12a1a4a31f5f9af0fd17b7e7b8e48bf074dce61"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/test-progs-asan.yml"}, "region": {"startLine": 51}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "[MINED115] Action `actions/create-github-app-token` pinned to mutable ref `@v2`: `uses: actions/create-github-app-token@v2` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-actions/changed-files compromise (2025) instantly affect ~23K repos. Pin to a 40-char commit SHA + lock with Dependabot or renovate."}, "properties": {"repobilityId": 139960, "scanner": "repobility-supply-chain", "fingerprint": "37387f7cfda2b99d3250f35181af3844ea2f89e82a0edf29f363380c09fca09c", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|37387f7cfda2b99d3250f35181af3844ea2f89e82a0edf29f363380c09fca09c"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/linux-next-sync.yml"}, "region": {"startLine": 74}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "[MINED115] Action `actions/checkout` pinned to mutable ref `@v6`: `uses: actions/checkout@v6` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-actions/changed-files compromise (2025) instantly affect ~23K repos. Pin to a 40-char commit SHA + lock with Dependabot or renovate."}, "properties": {"repobilityId": 139959, "scanner": "repobility-supply-chain", "fingerprint": "59e5d9d64967e7b9ee295f091d58bfc5ea78ce5ef58ea2ebc8d0af0e7a27fe38", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|59e5d9d64967e7b9ee295f091d58bfc5ea78ce5ef58ea2ebc8d0af0e7a27fe38"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/lint.yml"}, "region": {"startLine": 62}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "[MINED115] Action `actions/checkout` pinned to mutable ref `@v6`: `uses: actions/checkout@v6` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-actions/changed-files compromise (2025) instantly affect ~23K repos. Pin to a 40-char commit SHA + lock with Dependabot or renovate."}, "properties": {"repobilityId": 139958, "scanner": "repobility-supply-chain", "fingerprint": "aed23344636c75ac37072de96d9a2c79889848276d74ab907f09f57e42791e8c", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|aed23344636c75ac37072de96d9a2c79889848276d74ab907f09f57e42791e8c"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/lint.yml"}, "region": {"startLine": 51}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "[MINED115] Action `psf/black` pinned to mutable ref `@stable`: `uses: psf/black@stable` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-actions/changed-files compromise (2025) instantly affect ~23K repos. Pin to a 40-char commit SHA + lock with Dependabot or renovate."}, "properties": {"repobilityId": 139957, "scanner": "repobility-supply-chain", "fingerprint": "86a510d63213050228fb4f168a2d1bc331318f64dececb76f3b8911f8da64e19", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|86a510d63213050228fb4f168a2d1bc331318f64dececb76f3b8911f8da64e19"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/lint.yml"}, "region": {"startLine": 33}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "[MINED115] Action `actions/checkout` pinned to mutable ref `@v6`: `uses: actions/checkout@v6` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-actions/changed-files compromise (2025) instantly affect ~23K repos. Pin to a 40-char commit SHA + lock with Dependabot or renovate."}, "properties": {"repobilityId": 139956, "scanner": "repobility-supply-chain", "fingerprint": "672d5868e65b0df770b9ed225a6db2c482c9ef71fea326013a7ac2ffb6dc4e1d", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|672d5868e65b0df770b9ed225a6db2c482c9ef71fea326013a7ac2ffb6dc4e1d"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/lint.yml"}, "region": {"startLine": 31}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "[MINED115] Action `ludeeus/action-shellcheck` pinned to mutable ref `@master`: `uses: ludeeus/action-shellcheck@master` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-actions/changed-files compromise (2025) instantly affect ~23K repos. Pin to a 40-char commit SHA + lock with Dependabot or renovate."}, "properties": {"repobilityId": 139955, "scanner": "repobility-supply-chain", "fingerprint": "6a0166b9aa9acbfe58321d4c0a449415c226740c494392be1f5388fe04370007", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|6a0166b9aa9acbfe58321d4c0a449415c226740c494392be1f5388fe04370007"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/lint.yml"}, "region": {"startLine": 20}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "[MINED115] Action `actions/checkout` pinned to mutable ref `@v6`: `uses: actions/checkout@v6` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-actions/changed-files compromise (2025) instantly affect ~23K repos. Pin to a 40-char commit SHA + lock with Dependabot or renovate."}, "properties": {"repobilityId": 139954, "scanner": "repobility-supply-chain", "fingerprint": "29bd94c07a47b86c63b4f04eb6c1ff301a8630748da848f09be70f98db32f37c", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|29bd94c07a47b86c63b4f04eb6c1ff301a8630748da848f09be70f98db32f37c"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/lint.yml"}, "region": {"startLine": 18}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "[MINED115] Action `libbpf/ci/run-vmtest` pinned to mutable ref `@v4`: `uses: libbpf/ci/run-vmtest@v4` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-actions/changed-files compromise (2025) instantly affect ~23K repos. Pin to a 40-char commit SHA + lock with Dependabot or renovate."}, "properties": {"repobilityId": 139953, "scanner": "repobility-supply-chain", "fingerprint": "015843ac051e4862b36c349b10f36d2970e4106d404e143c4022b23ab301986e", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|015843ac051e4862b36c349b10f36d2970e4106d404e143c4022b23ab301986e"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/veristat-cilium.yml"}, "region": {"startLine": 62}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "[MINED115] Action `actions/download-artifact` pinned to mutable ref `@v7`: `uses: actions/download-artifact@v7` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-actions/changed-files compromise (2025) instantly affect ~23K repos. Pin to a 40-char commit SHA + lock with Dependabot or renovate."}, "properties": {"repobilityId": 139952, "scanner": "repobility-supply-chain", "fingerprint": "7ebd61c8a8254cea8763d0fb19ee7703e902edb59c78abf58eeac60c3307e498", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|7ebd61c8a8254cea8763d0fb19ee7703e902edb59c78abf58eeac60c3307e498"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/veristat-cilium.yml"}, "region": {"startLine": 47}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "[MINED115] Action `actions/checkout` pinned to mutable ref `@v6`: `uses: actions/checkout@v6` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-actions/changed-files compromise (2025) instantly affect ~23K repos. Pin to a 40-char commit SHA + lock with Dependabot or renovate."}, "properties": {"repobilityId": 139951, "scanner": "repobility-supply-chain", "fingerprint": "af09c04b4a1219926ae009e3164f4e6d759d8e4b6c5a646a053667a8bf160ee1", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|af09c04b4a1219926ae009e3164f4e6d759d8e4b6c5a646a053667a8bf160ee1"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/veristat-cilium.yml"}, "region": {"startLine": 39}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "[MINED115] Action `actions/checkout` pinned to mutable ref `@v6`: `uses: actions/checkout@v6` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-actions/changed-files compromise (2025) instantly affect ~23K repos. Pin to a 40-char commit SHA + lock with Dependabot or renovate."}, "properties": {"repobilityId": 139948, "scanner": "repobility-supply-chain", "fingerprint": "901c9c96728215b669d4f854026ab79b84f7d8f490e4d05ee6659006b745d65a", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|901c9c96728215b669d4f854026ab79b84f7d8f490e4d05ee6659006b745d65a"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/test.yml"}, "region": {"startLine": 24}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "[MINED115] Action `actions/github-script` pinned to mutable ref `@v8`: `uses: actions/github-script@v8` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-actions/changed-files compromise (2025) instantly affect ~23K repos. Pin to a 40-char commit SHA + lock with Dependabot or renovate."}, "properties": {"repobilityId": 139944, "scanner": "repobility-supply-chain", "fingerprint": "06b7ce0c590c85f2c50121fc9dd3bf10cecdc673dd6629f08e70692889e3bb45", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|06b7ce0c590c85f2c50121fc9dd3bf10cecdc673dd6629f08e70692889e3bb45"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ai-code-review.yml"}, "region": {"startLine": 177}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "[MINED115] Action `anthropics/claude-code-action` pinned to mutable ref `@v1`: `uses: anthropics/claude-code-action@v1` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-actions/changed-files compromise (2025) instantly affect ~23K repos. Pin to a 40-char commit SHA + lock with Dependabot or renovate."}, "properties": {"repobilityId": 139943, "scanner": "repobility-supply-chain", "fingerprint": "eacafefc5610e54f4cf8a9bf4acc4ec9736f5ada8b93eafdd2662839dc82f510", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|eacafefc5610e54f4cf8a9bf4acc4ec9736f5ada8b93eafdd2662839dc82f510"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ai-code-review.yml"}, "region": {"startLine": 138}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "[MINED115] Action `actions/checkout` pinned to mutable ref `@v6`: `uses: actions/checkout@v6` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-actions/changed-files compromise (2025) instantly affect ~23K repos. Pin to a 40-char commit SHA + lock with Dependabot or renovate."}, "properties": {"repobilityId": 139942, "scanner": "repobility-supply-chain", "fingerprint": "c744ab212389b46dd6de37f4059c39a38a9b92233701ca4469e45ff6dd13df51", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|c744ab212389b46dd6de37f4059c39a38a9b92233701ca4469e45ff6dd13df51"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ai-code-review.yml"}, "region": {"startLine": 127}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "[MINED115] Action `libbpf/ci/get-linux-source` pinned to mutable ref `@v4`: `uses: libbpf/ci/get-linux-source@v4` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-actions/changed-files compromise (2025) instantly affect ~23K repos. Pin to a 40-char commit SHA + lock with Dependabot or renovate."}, "properties": {"repobilityId": 139941, "scanner": "repobility-supply-chain", "fingerprint": "983d93f5708192d216bb9b74d611d27a6185e18b917b2e8b7f76d29d0dd1bb0d", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|983d93f5708192d216bb9b74d611d27a6185e18b917b2e8b7f76d29d0dd1bb0d"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ai-code-review.yml"}, "region": {"startLine": 87}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "[MINED115] Action `aws-actions/configure-aws-credentials` pinned to mutable ref `@v4`: `uses: aws-actions/configure-aws-credentials@v4` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-actions/changed-files compromise (2025) instantly affect ~23K repos. Pin to a 40-char commit SHA + lock with Dependabot or renovate."}, "properties": {"repobilityId": 139940, "scanner": "repobility-supply-chain", "fingerprint": "ef7bf810eb0166bc1d5f9ba52c64906a51e9f61ff1620f572a8afbed91fe08ff", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|ef7bf810eb0166bc1d5f9ba52c64906a51e9f61ff1620f572a8afbed91fe08ff"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ai-code-review.yml"}, "region": {"startLine": 75}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "[MINED115] Action `actions/create-github-app-token` pinned to mutable ref `@v2`: `uses: actions/create-github-app-token@v2` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-actions/changed-files compromise (2025) instantly affect ~23K repos. Pin to a 40-char commit SHA + lock with Dependabot or renovate."}, "properties": {"repobilityId": 139939, "scanner": "repobility-supply-chain", "fingerprint": "aeb563d51fc6ae581894d9282fd6c3ef0b8e1a43425a2cae5397e916d579d51f", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|aeb563d51fc6ae581894d9282fd6c3ef0b8e1a43425a2cae5397e916d579d51f"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ai-code-review.yml"}, "region": {"startLine": 69}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "[MINED115] Action `actions/checkout` pinned to mutable ref `@v6`: `uses: actions/checkout@v6` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-actions/changed-files compromise (2025) instantly affect ~23K repos. Pin to a 40-char commit SHA + lock with Dependabot or renovate."}, "properties": {"repobilityId": 139938, "scanner": "repobility-supply-chain", "fingerprint": "e91d9716c4a31c7ee88c2c0dae5fd7dfa32becd448662d141f5f8b5a429fdab5", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|e91d9716c4a31c7ee88c2c0dae5fd7dfa32becd448662d141f5f8b5a429fdab5"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ai-code-review.yml"}, "region": {"startLine": 61}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "[MINED115] Action `libbpf/ci/get-linux-source` pinned to mutable ref `@v4`: `uses: libbpf/ci/get-linux-source@v4` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-actions/changed-files compromise (2025) instantly affect ~23K repos. Pin to a 40-char commit SHA + lock with Dependabot or renovate."}, "properties": {"repobilityId": 139937, "scanner": "repobility-supply-chain", "fingerprint": "80a65aefe1f097ba2b197498c9d93771bb80d765caf0f0f6659b3ec42196c77f", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|80a65aefe1f097ba2b197498c9d93771bb80d765caf0f0f6659b3ec42196c77f"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ai-code-review.yml"}, "region": {"startLine": 27}}}]}, {"ruleId": "MINED110", "level": "error", "message": {"text": "[MINED110] Blocking call `input` inside async function `_handle_version`: `input` is a synchronous (blocking) call. When invoked inside an `async def` it stalls the event loop, preventing every other coroutine in the process from making progress."}, "properties": {"repobilityId": 139906, "scanner": "repobility-ast-engine", "fingerprint": "f6308d4161c5608396daa3dc34cd997a8471bfd1c7a078db4bb4094b6918b2e1", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "asyncio-blocking-call", "owasp": null, "cwe_ids": ["CWE-833"], "languages": ["python"], "observations_count": 31606}, "scanner": "repobility-ast-engine", "correlation_key": "fp|f6308d4161c5608396daa3dc34cd997a8471bfd1c7a078db4bb4094b6918b2e1"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/docs/test_doc_build.py"}, "region": {"startLine": 273}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_struct_group: Test function `test_struct_group` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 139905, "scanner": "repobility-ast-engine", "fingerprint": "f5c4a88c352be33c2960d4b0df35c67dcf154261a2d5e4f04246a419d286f448", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|f5c4a88c352be33c2960d4b0df35c67dcf154261a2d5e4f04246a419d286f448"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/unittests/test_cmatch.py"}, "region": {"startLine": 399}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_strip_multiple_acquires: Test function `test_strip_multiple_acquires` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 139904, "scanner": "repobility-ast-engine", "fingerprint": "4b0927e741f77cf2b559448494bafe7095b049db44dec09002a9d9c2ca3ad521", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|4b0927e741f77cf2b559448494bafe7095b049db44dec09002a9d9c2ca3ad521"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/unittests/test_cmatch.py"}, "region": {"startLine": 284}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_sub_count_parameter: Test function `test_sub_count_parameter` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 139903, "scanner": "repobility-ast-engine", "fingerprint": "3239deb6d715bcefca9763147679c7457bf4ea96b8da4fca897e54d605c422ed", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|3239deb6d715bcefca9763147679c7457bf4ea96b8da4fca897e54d605c422ed"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/unittests/test_cmatch.py"}, "region": {"startLine": 276}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_sub_no_placeholder: Test function `test_sub_no_placeholder` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 139902, "scanner": "repobility-ast-engine", "fingerprint": "c6aafbbf1d1c9e67f446bbde7d7db9df844857f5bb4a5c9656c87f77a5a991d5", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|c6aafbbf1d1c9e67f446bbde7d7db9df844857f5bb4a5c9656c87f77a5a991d5"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/unittests/test_cmatch.py"}, "region": {"startLine": 269}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_sub_mixed_placeholders: Test function `test_sub_mixed_placeholders` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 139901, "scanner": "repobility-ast-engine", "fingerprint": "5be9d310e656b728aa80b1b848675c58ddaa42c92b81732b04bc22e2c2534120", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|5be9d310e656b728aa80b1b848675c58ddaa42c92b81732b04bc22e2c2534120"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/unittests/test_cmatch.py"}, "region": {"startLine": 262}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_sub_multiple_placeholders: Test function `test_sub_multiple_placeholders` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 139900, "scanner": "repobility-ast-engine", "fingerprint": "b3fae0cbe4387e93dd4398d97a5f31a59da00198a53517432078e54b00b435d1", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|b3fae0cbe4387e93dd4398d97a5f31a59da00198a53517432078e54b00b435d1"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/unittests/test_cmatch.py"}, "region": {"startLine": 255}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_sub_single_placeholder: Test function `test_sub_single_placeholder` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 139899, "scanner": "repobility-ast-engine", "fingerprint": "0e2509dc8e7ed21ea4cf4dfb3f93ab74c3491e1130b5fa493ec9162f35488210", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|0e2509dc8e7ed21ea4cf4dfb3f93ab74c3491e1130b5fa493ec9162f35488210"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/unittests/test_cmatch.py"}, "region": {"startLine": 248}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_sub_zero_placeholder: Test function `test_sub_zero_placeholder` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 139898, "scanner": "repobility-ast-engine", "fingerprint": "d056140bcd89e10571aac4adba3abb156f8ce2e8a8130f6aa7fa933f34ec641d", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|d056140bcd89e10571aac4adba3abb156f8ce2e8a8130f6aa7fa933f34ec641d"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/unittests/test_cmatch.py"}, "region": {"startLine": 240}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_sub_with_capture: Test function `test_sub_with_capture` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 139897, "scanner": "repobility-ast-engine", "fingerprint": "5a33ca2bf63c8db649eb67b895bd204b14aaac9ad8ee70b03d946192167e9387", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|5a33ca2bf63c8db649eb67b895bd204b14aaac9ad8ee70b03d946192167e9387"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/unittests/test_cmatch.py"}, "region": {"startLine": 232}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_no_false_positive: Test function `test_no_false_positive` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 139896, "scanner": "repobility-ast-engine", "fingerprint": "34074c5d60f9be247879dcc9812189490cbce40ec962d9b8481bc9a8a8f8b353", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|34074c5d60f9be247879dcc9812189490cbce40ec962d9b8481bc9a8a8f8b353"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/unittests/test_cmatch.py"}, "region": {"startLine": 174}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_method: Test function `test_method` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 139893, "scanner": "repobility-ast-engine", "fingerprint": "1ab7a8cacd8e841f4b3e6cec168635797a3ff55bad701630f5b6495b088e51b9", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|1ab7a8cacd8e841f4b3e6cec168635797a3ff55bad701630f5b6495b088e51b9"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/unittests/test_kdoc_parser.py"}, "region": {"startLine": 464}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_method: Test function `test_method` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 139892, "scanner": "repobility-ast-engine", "fingerprint": "07c6e33cc777eca2ab6e32eac4ce289cab8da03f580cfadf1bcc10d075e74c3e", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|07c6e33cc777eca2ab6e32eac4ce289cab8da03f580cfadf1bcc10d075e74c3e"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/unittests/test_kdoc_parser.py"}, "region": {"startLine": 448}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_method: Test function `test_method` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 139891, "scanner": "repobility-ast-engine", "fingerprint": "54149c5f19d01f5b124832114e97889c8e6b42c65bd5b731772d646bdd67d307", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|54149c5f19d01f5b124832114e97889c8e6b42c65bd5b731772d646bdd67d307"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/unittests/test_kdoc_parser.py"}, "region": {"startLine": 435}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_with_default_expected: Test function `test_with_default_expected` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 139890, "scanner": "repobility-ast-engine", "fingerprint": "e9af1ddeb3bec95afe8e189581eea401cea7c6b52421e7f4d6fd9f459547af8d", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|e9af1ddeb3bec95afe8e189581eea401cea7c6b52421e7f4d6fd9f459547af8d"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/unittests/test_kdoc_parser.py"}, "region": {"startLine": 415}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_with_unfilled_expected: Test function `test_with_unfilled_expected` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 139889, "scanner": "repobility-ast-engine", "fingerprint": "3376461845fb6751b78a27d042abbbaab48a569cb5fe958857316ff0a6a298a4", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|3376461845fb6751b78a27d042abbbaab48a569cb5fe958857316ff0a6a298a4"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/unittests/test_kdoc_parser.py"}, "region": {"startLine": 408}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_with_empty_expected: Test function `test_with_empty_expected` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 139888, "scanner": "repobility-ast-engine", "fingerprint": "4b816dd47ca6696b6036af5ed6460c1e5e472594faad20bba6adb66adc37e5f4", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|4b816dd47ca6696b6036af5ed6460c1e5e472594faad20bba6adb66adc37e5f4"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/unittests/test_kdoc_parser.py"}, "region": {"startLine": 401}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_no_exports: Test function `test_no_exports` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 139887, "scanner": "repobility-ast-engine", "fingerprint": "b6c5aa075058a54b2c40a6497c7e296d55d68028a8147a0903658306b8b5c1a4", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|b6c5aa075058a54b2c40a6497c7e296d55d68028a8147a0903658306b8b5c1a4"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/unittests/test_kdoc_parser.py"}, "region": {"startLine": 394}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_parse_pass: Test function `test_parse_pass` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 139886, "scanner": "repobility-ast-engine", "fingerprint": "b44878c562a9115964ffd741df76fa5059777ce60a936509495d6ccfd53e128b", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|b44878c562a9115964ffd741df76fa5059777ce60a936509495d6ccfd53e128b"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/unittests/test_kdoc_parser.py"}, "region": {"startLine": 387}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_bit: Test function `test_bit` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 139872, "scanner": "repobility-ast-engine", "fingerprint": "9c4108f506ec85973669c89c7765b708c5c47eedb44d555312d6f80eec5e44bb", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|9c4108f506ec85973669c89c7765b708c5c47eedb44d555312d6f80eec5e44bb"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/gdb/linux/mm.py"}, "region": {"startLine": 16}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self.assertIn` used but never assigned in __init__: Method `test_cc_unset` of class `TestRustIsAvailable` reads `self.assertIn`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 139859, "scanner": "repobility-ast-engine", "fingerprint": "cd459cdffc94a091dfd16372dee45575459214cfdf00ce7d1fb7395f5fb0d768", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|cd459cdffc94a091dfd16372dee45575459214cfdf00ce7d1fb7395f5fb0d768"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/rust_is_available_test.py"}, "region": {"startLine": 167}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self.run_script` used but never assigned in __init__: Method `test_cc_unset` of class `TestRustIsAvailable` reads `self.run_script`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 139858, "scanner": "repobility-ast-engine", "fingerprint": "fa756ab2ef13766f2e8078e699aadb002f558a95a4cf2308f384effbdf340524", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|fa756ab2ef13766f2e8078e699aadb002f558a95a4cf2308f384effbdf340524"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/rust_is_available_test.py"}, "region": {"startLine": 166}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self.Expected` used but never assigned in __init__: Method `test_bindgen_unset` of class `TestRustIsAvailable` reads `self.Expected`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 139857, "scanner": "repobility-ast-engine", "fingerprint": "57a102575d0ad5f11d219129a03e6e358191abbe55c3561293b56e8ddf9ce461", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|57a102575d0ad5f11d219129a03e6e358191abbe55c3561293b56e8ddf9ce461"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/rust_is_available_test.py"}, "region": {"startLine": 161}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self.assertIn` used but never assigned in __init__: Method `test_bindgen_unset` of class `TestRustIsAvailable` reads `self.assertIn`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 139856, "scanner": "repobility-ast-engine", "fingerprint": "e1b5ec1e05a3e3cc6b39efd99d18fdca5736f2cd750c8bc76b9abe1e5fdb9877", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|e1b5ec1e05a3e3cc6b39efd99d18fdca5736f2cd750c8bc76b9abe1e5fdb9877"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/rust_is_available_test.py"}, "region": {"startLine": 163}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self.assertIn` used but never assigned in __init__: Method `test_bindgen_unset` of class `TestRustIsAvailable` reads `self.assertIn`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 139855, "scanner": "repobility-ast-engine", "fingerprint": "42355e508e90468fc8422928de1240f3961b9ce4cbec0c6edf31e0fdc3ad106c", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|42355e508e90468fc8422928de1240f3961b9ce4cbec0c6edf31e0fdc3ad106c"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/rust_is_available_test.py"}, "region": {"startLine": 162}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self.run_script` used but never assigned in __init__: Method `test_bindgen_unset` of class `TestRustIsAvailable` reads `self.run_script`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 139854, "scanner": "repobility-ast-engine", "fingerprint": "433d73b7ba88f9b26c2e0ba367e4d1100ceea3e3ecb7550a7f498e161f05c8ae", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|433d73b7ba88f9b26c2e0ba367e4d1100ceea3e3ecb7550a7f498e161f05c8ae"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/rust_is_available_test.py"}, "region": {"startLine": 161}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self.Expected` used but never assigned in __init__: Method `test_rustc_unset` of class `TestRustIsAvailable` reads `self.Expected`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 139853, "scanner": "repobility-ast-engine", "fingerprint": "ba08f1c7eea0028af688b07f6c838ed52441de2c193681b39a58fbd0c13d3871", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|ba08f1c7eea0028af688b07f6c838ed52441de2c193681b39a58fbd0c13d3871"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/rust_is_available_test.py"}, "region": {"startLine": 156}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self.assertIn` used but never assigned in __init__: Method `test_rustc_unset` of class `TestRustIsAvailable` reads `self.assertIn`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 139852, "scanner": "repobility-ast-engine", "fingerprint": "71ac2a23eea52448cd6abf050f45f722bbab4579dbb9a57d7dc8896afc728435", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|71ac2a23eea52448cd6abf050f45f722bbab4579dbb9a57d7dc8896afc728435"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/rust_is_available_test.py"}, "region": {"startLine": 158}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self.assertIn` used but never assigned in __init__: Method `test_rustc_unset` of class `TestRustIsAvailable` reads `self.assertIn`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 139851, "scanner": "repobility-ast-engine", "fingerprint": "acc24d2cff084b604cbb4be46c82de445cb611766f30857cbd815e93a84bdd8c", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|acc24d2cff084b604cbb4be46c82de445cb611766f30857cbd815e93a84bdd8c"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/rust_is_available_test.py"}, "region": {"startLine": 157}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self.run_script` used but never assigned in __init__: Method `test_rustc_unset` of class `TestRustIsAvailable` reads `self.run_script`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 139850, "scanner": "repobility-ast-engine", "fingerprint": "318669e6c72ad05998cc2726676884256d8624e87a6f8ab2dd9f132f28848707", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|318669e6c72ad05998cc2726676884256d8624e87a6f8ab2dd9f132f28848707"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/rust_is_available_test.py"}, "region": {"startLine": 156}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self.assertIn` used but never assigned in __init__: Method `run_script` of class `TestRustIsAvailable` reads `self.assertIn`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 139849, "scanner": "repobility-ast-engine", "fingerprint": "7285902a486ea154df1524c8817fea74bf8537df1be8d67ff055f22f6773d987", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|7285902a486ea154df1524c8817fea74bf8537df1be8d67ff055f22f6773d987"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/rust_is_available_test.py"}, "region": {"startLine": 147}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self.assertNotEqual` used but never assigned in __init__: Method `run_script` of class `TestRustIsAvailable` reads `self.assertNotEqual`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 139848, "scanner": "repobility-ast-engine", "fingerprint": "687a5eac05405a610326d44f7ec3f4000cf10a6cc9e0231fc0efe6e60babe8e8", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|687a5eac05405a610326d44f7ec3f4000cf10a6cc9e0231fc0efe6e60babe8e8"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/rust_is_available_test.py"}, "region": {"startLine": 146}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self.assertIn` used but never assigned in __init__: Method `run_script` of class `TestRustIsAvailable` reads `self.assertIn`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 139847, "scanner": "repobility-ast-engine", "fingerprint": "c12998f83fc5adc361f5c298443977042c5604c8174e1334c9cf16d3dac46f57", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|c12998f83fc5adc361f5c298443977042c5604c8174e1334c9cf16d3dac46f57"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/rust_is_available_test.py"}, "region": {"startLine": 142}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self.assertEqual` used but never assigned in __init__: Method `run_script` of class `TestRustIsAvailable` reads `self.assertEqual`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 139846, "scanner": "repobility-ast-engine", "fingerprint": "80db5ea17617bee2a71e6d3b2d95b9c8b94411baf2bd2de5818e4e3173dbb360", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|80db5ea17617bee2a71e6d3b2d95b9c8b94411baf2bd2de5818e4e3173dbb360"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/rust_is_available_test.py"}, "region": {"startLine": 141}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self.Expected` used but never assigned in __init__: Method `run_script` of class `TestRustIsAvailable` reads `self.Expected`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 139845, "scanner": "repobility-ast-engine", "fingerprint": "be1845b73d965007eff5ddde2c481d907c57e1972a7e0fa6719283f1b7bf51e3", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|be1845b73d965007eff5ddde2c481d907c57e1972a7e0fa6719283f1b7bf51e3"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/rust_is_available_test.py"}, "region": {"startLine": 138}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self.assertNotEqual` used but never assigned in __init__: Method `run_script` of class `TestRustIsAvailable` reads `self.assertNotEqual`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 139844, "scanner": "repobility-ast-engine", "fingerprint": "2602e05ae4ac9604ba370c371dd7f1ab5b88433cf2e2aaa201dcf0705596f524", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|2602e05ae4ac9604ba370c371dd7f1ab5b88433cf2e2aaa201dcf0705596f524"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/rust_is_available_test.py"}, "region": {"startLine": 137}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self.assertEqual` used but never assigned in __init__: Method `run_script` of class `TestRustIsAvailable` reads `self.assertEqual`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 139843, "scanner": "repobility-ast-engine", "fingerprint": "0e30ddd47e1939ae2be5737bf629ca28d82592baf61e3eb6cf97e4dd1e8a0c72", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|0e30ddd47e1939ae2be5737bf629ca28d82592baf61e3eb6cf97e4dd1e8a0c72"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/rust_is_available_test.py"}, "region": {"startLine": 136}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self.Expected` used but never assigned in __init__: Method `run_script` of class `TestRustIsAvailable` reads `self.Expected`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 139842, "scanner": "repobility-ast-engine", "fingerprint": "b5a4730df3ca0200a4325853e58776cced050b2c307b8fc23909595374aff5fb", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|b5a4730df3ca0200a4325853e58776cced050b2c307b8fc23909595374aff5fb"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/rust_is_available_test.py"}, "region": {"startLine": 131}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self.assertEqual` used but never assigned in __init__: Method `run_script` of class `TestRustIsAvailable` reads `self.assertEqual`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 139841, "scanner": "repobility-ast-engine", "fingerprint": "158f6328afffb345abc054fc17591eba1b14dbfe86a45793651da1b58f67fde1", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|158f6328afffb345abc054fc17591eba1b14dbfe86a45793651da1b58f67fde1"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/rust_is_available_test.py"}, "region": {"startLine": 130}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self.assertEqual` used but never assigned in __init__: Method `run_script` of class `TestRustIsAvailable` reads `self.assertEqual`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 139840, "scanner": "repobility-ast-engine", "fingerprint": "b364d592aa0edf5f1273b2b11d3e48cc23de60f9ec7b65f0f499d1579dc080c0", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|b364d592aa0edf5f1273b2b11d3e48cc23de60f9ec7b65f0f499d1579dc080c0"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/rust_is_available_test.py"}, "region": {"startLine": 129}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self.Expected` used but never assigned in __init__: Method `run_script` of class `TestRustIsAvailable` reads `self.Expected`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 139839, "scanner": "repobility-ast-engine", "fingerprint": "2adcd36ed779154eb34d1f2ad469cfb7cdff9b3b95878f47f8e66eda1fee9649", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|2adcd36ed779154eb34d1f2ad469cfb7cdff9b3b95878f47f8e66eda1fee9649"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/rust_is_available_test.py"}, "region": {"startLine": 126}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self.assertEqual` used but never assigned in __init__: Method `run_script` of class `TestRustIsAvailable` reads `self.assertEqual`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 139838, "scanner": "repobility-ast-engine", "fingerprint": "80b41d3e909769c262e23ba61a846b04b0f98988e93bf27d1e4979301c76b6ac", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|80b41d3e909769c262e23ba61a846b04b0f98988e93bf27d1e4979301c76b6ac"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/rust_is_available_test.py"}, "region": {"startLine": 124}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self.default_cc` used but never assigned in __init__: Method `run_script` of class `TestRustIsAvailable` reads `self.default_cc`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 139837, "scanner": "repobility-ast-engine", "fingerprint": "21707f2b3ccefa30e18ed4128df6fde1ac5e00daaef0c83dff3095de358bc291", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|21707f2b3ccefa30e18ed4128df6fde1ac5e00daaef0c83dff3095de358bc291"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/rust_is_available_test.py"}, "region": {"startLine": 112}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self.default_bindgen` used but never assigned in __init__: Method `run_script` of class `TestRustIsAvailable` reads `self.default_bindgen`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 139836, "scanner": "repobility-ast-engine", "fingerprint": "a970681d9d9a2de20ecfbd600ee6d3772288a68ca28d525712be57d3ab0f3209", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|a970681d9d9a2de20ecfbd600ee6d3772288a68ca28d525712be57d3ab0f3209"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/rust_is_available_test.py"}, "region": {"startLine": 111}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self.default_rustc` used but never assigned in __init__: Method `run_script` of class `TestRustIsAvailable` reads `self.default_rustc`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 139835, "scanner": "repobility-ast-engine", "fingerprint": "57685c3689a29a91d5daef090f9aa85902c09d864219831b294a8498956a8e3f", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|57685c3689a29a91d5daef090f9aa85902c09d864219831b294a8498956a8e3f"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/rust_is_available_test.py"}, "region": {"startLine": 110}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_success_real_programs: Test function `test_success_real_programs` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 139834, "scanner": "repobility-ast-engine", "fingerprint": "bc3429cfa797020c799a4781c536d8d3a9ecdd0949d61f6bfa1ccb907b8d9832", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|bc3429cfa797020c799a4781c536d8d3a9ecdd0949d61f6bfa1ccb907b8d9832"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/rust_is_available_test.py"}, "region": {"startLine": 330}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_success_clang_version: Test function `test_success_clang_version` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 139833, "scanner": "repobility-ast-engine", "fingerprint": "3b72daa35a647bf218692b6926ca93690d14b64bb2fb8e33542a775b57ee1f8c", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|3b72daa35a647bf218692b6926ca93690d14b64bb2fb8e33542a775b57ee1f8c"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/rust_is_available_test.py"}, "region": {"startLine": 319}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_success_bindgen_libclang: Test function `test_success_bindgen_libclang` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 139832, "scanner": "repobility-ast-engine", "fingerprint": "98ee587a3c7363908657cdd866e90bdc7eb35d7a494e8d88c786f8fe9ca41a6b", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|98ee587a3c7363908657cdd866e90bdc7eb35d7a494e8d88c786f8fe9ca41a6b"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/rust_is_available_test.py"}, "region": {"startLine": 301}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_success_bindgen_version: Test function `test_success_bindgen_version` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 139831, "scanner": "repobility-ast-engine", "fingerprint": "6c53489dbc0c1430a79b40bc6279d3b720960fbb2d35ce4ccc79157dda1ca154", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|6c53489dbc0c1430a79b40bc6279d3b720960fbb2d35ce4ccc79157dda1ca154"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/rust_is_available_test.py"}, "region": {"startLine": 291}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_success_rustc_version: Test function `test_success_rustc_version` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 139830, "scanner": "repobility-ast-engine", "fingerprint": "0ad515588aad66b5e66ef8ff9afa03ef3e920b20930176d7db3420a4fae0563c", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|0ad515588aad66b5e66ef8ff9afa03ef3e920b20930176d7db3420a4fae0563c"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/rust_is_available_test.py"}, "region": {"startLine": 281}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_success_cc_multiple_arguments_ccache: Test function `test_success_cc_multiple_arguments_ccache` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 139829, "scanner": "repobility-ast-engine", "fingerprint": "ace382f5f9831cbaa6f77401eb0068dce096a0cb662a51f03026d01cc1f56372", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|ace382f5f9831cbaa6f77401eb0068dce096a0cb662a51f03026d01cc1f56372"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/rust_is_available_test.py"}, "region": {"startLine": 273}}}]}, {"ruleId": "SEC103", "level": "error", "message": {"text": "[SEC103] LDAP injection \u2014 non-constant search filter: User input concatenated into an LDAP search filter. Attackers inject `*)(uid=*` style payloads to bypass auth or enumerate accounts."}, "properties": {"repobilityId": 139753, "scanner": "repobility-threat-engine", "fingerprint": "eecd4ef1a4d9fdb3eeead28795c3ca993066840b945206b7918e22c0fceb0868", "category": "injection", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": ".search(r\"\\*([^\\*]+)", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC103", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "code|injection|token|99|sec103"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Documentation/sphinx/maintainers_include.py"}, "region": {"startLine": 99}}}]}, {"ruleId": "MINED001", "level": "error", "message": {"text": "[MINED001] Bare Except Pass: except: pass or except Exception: pass \u2014 silently swallows everything including KeyboardInterrupt and bugs."}, "properties": {"repobilityId": 139750, "scanner": "repobility-threat-engine", "fingerprint": "10165518c6103e3f621549d05a5df437cf030cdb65e3208e1694118fd3722b14", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "bare-except-pass", "owasp": null, "cwe_ids": ["CWE-755"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347744+00:00", "triaged_in_corpus": 15, "observations_count": 1550824, "ai_coder_pattern_id": 6}, "scanner": "repobility-threat-engine", "correlation_key": "fp|10165518c6103e3f621549d05a5df437cf030cdb65e3208e1694118fd3722b14"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Documentation/sphinx/kerneldoc.py"}, "region": {"startLine": 128}}}]}, {"ruleId": "SEC078", "level": "error", "message": {"text": "[SEC078] Python: requests without timeout: requests.get/post without a timeout will hang indefinitely on a non-responsive server, causing thread exhaustion and ReDoS. Ported from bandit B113 (Apache-2.0). NOTE: this regex is heuristic; a real AST check is preferred for accuracy."}, "properties": {"repobilityId": 139743, "scanner": "repobility-threat-engine", "fingerprint": "bc74eddfa8f5cc0c4466931bac103a872e145e151e2fba4184457da498a64a16", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "requests.get(", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC078", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|bc74eddfa8f5cc0c4466931bac103a872e145e151e2fba4184457da498a64a16"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/scripts/stagger.py"}, "region": {"startLine": 34}}}]}, {"ruleId": "SEC078", "level": "error", "message": {"text": "[SEC078] Python: requests without timeout: requests.get/post without a timeout will hang indefinitely on a non-responsive server, causing thread exhaustion and ReDoS. Ported from bandit B113 (Apache-2.0). NOTE: this regex is heuristic; a real AST check is preferred for accuracy."}, "properties": {"repobilityId": 139742, "scanner": "repobility-threat-engine", "fingerprint": "8fe8dfed5a18636421ea853f3b60d641278b2d5798846d90a8a1543ba1f955ef", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "requests.get(", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC078", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|8fe8dfed5a18636421ea853f3b60d641278b2d5798846d90a8a1543ba1f955ef"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/scripts/matrix.py"}, "region": {"startLine": 56}}}]}, {"ruleId": "MINED116", "level": "error", "message": {"text": "[MINED116] Workflow uses `secrets.KP_REVIEW_BOT_APP_PRIVATE_KEY` on a `pull_request` trigger: This workflow triggers on `pull_request`, which checks out the FORK's code. Referencing `${ secrets.KP_REVIEW_BOT_APP_PRIVATE_KEY }` lets a PR from any fork exfiltrate the secret (modify a script, log the value, etc.). Use `pull_request_target` ONLY with strict checkout discipline (no fork code in the trusted context)."}, "properties": {"repobilityId": 139971, "scanner": "repobility-supply-chain", "fingerprint": "1291b543440b30c908b6144c37f3d2c070ae9e0b88868c6e14a58189bbac2f5d", "category": "dependency", "severity": "critical", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-pull-request-secrets", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|1291b543440b30c908b6144c37f3d2c070ae9e0b88868c6e14a58189bbac2f5d"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ai-agent.yml"}, "region": {"startLine": 220}}}]}, {"ruleId": "MINED116", "level": "error", "message": {"text": "[MINED116] Workflow uses `secrets.KP_REVIEW_BOT_APP_ID` on a `pull_request` trigger: This workflow triggers on `pull_request`, which checks out the FORK's code. Referencing `${ secrets.KP_REVIEW_BOT_APP_ID }` lets a PR from any fork exfiltrate the secret (modify a script, log the value, etc.). Use `pull_request_target` ONLY with strict checkout discipline (no fork code in the trusted context)."}, "properties": {"repobilityId": 139970, "scanner": "repobility-supply-chain", "fingerprint": "d6ad990d31c5bec6bc2119ee5480a4a93245714d20b8a7b0bf8ec68ee2a53879", "category": "dependency", "severity": "critical", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-pull-request-secrets", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|d6ad990d31c5bec6bc2119ee5480a4a93245714d20b8a7b0bf8ec68ee2a53879"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ai-agent.yml"}, "region": {"startLine": 219}}}]}, {"ruleId": "MINED116", "level": "error", "message": {"text": "[MINED116] Workflow uses `secrets.AWS_BEDROCK_ROLE` on a `pull_request` trigger: This workflow triggers on `pull_request`, which checks out the FORK's code. Referencing `${ secrets.AWS_BEDROCK_ROLE }` lets a PR from any fork exfiltrate the secret (modify a script, log the value, etc.). Use `pull_request_target` ONLY with strict checkout discipline (no fork code in the trusted context)."}, "properties": {"repobilityId": 139969, "scanner": "repobility-supply-chain", "fingerprint": "bc76c41b02290cca12c1798bd3cbf12a7673b5a75204ecf378f087bf88caf798", "category": "dependency", "severity": "critical", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-pull-request-secrets", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|bc76c41b02290cca12c1798bd3cbf12a7673b5a75204ecf378f087bf88caf798"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ai-agent.yml"}, "region": {"startLine": 163}}}]}, {"ruleId": "MINED116", "level": "error", "message": {"text": "[MINED116] Workflow uses `secrets.KP_REVIEW_BOT_APP_PRIVATE_KEY` on a `pull_request` trigger: This workflow triggers on `pull_request`, which checks out the FORK's code. Referencing `${ secrets.KP_REVIEW_BOT_APP_PRIVATE_KEY }` lets a PR from any fork exfiltrate the secret (modify a script, log the value, etc.). Use `pull_request_target` ONLY with strict checkout discipline (no fork code in the trusted context)."}, "properties": {"repobilityId": 139968, "scanner": "repobility-supply-chain", "fingerprint": "541672febf776b786c3e379d7263b46fd1bcf9e458d6a5fe5f85520799a8bcc9", "category": "dependency", "severity": "critical", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-pull-request-secrets", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|541672febf776b786c3e379d7263b46fd1bcf9e458d6a5fe5f85520799a8bcc9"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ai-agent.yml"}, "region": {"startLine": 158}}}]}, {"ruleId": "MINED116", "level": "error", "message": {"text": "[MINED116] Workflow uses `secrets.KP_REVIEW_BOT_APP_ID` on a `pull_request` trigger: This workflow triggers on `pull_request`, which checks out the FORK's code. Referencing `${ secrets.KP_REVIEW_BOT_APP_ID }` lets a PR from any fork exfiltrate the secret (modify a script, log the value, etc.). Use `pull_request_target` ONLY with strict checkout discipline (no fork code in the trusted context)."}, "properties": {"repobilityId": 139967, "scanner": "repobility-supply-chain", "fingerprint": "ee335115804976bb25337650ce8c11b70f4cda357a133fd4aec83c7d940214dc", "category": "dependency", "severity": "critical", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-pull-request-secrets", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|ee335115804976bb25337650ce8c11b70f4cda357a133fd4aec83c7d940214dc"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ai-agent.yml"}, "region": {"startLine": 157}}}]}, {"ruleId": "MINED116", "level": "error", "message": {"text": "[MINED116] Workflow uses `secrets.AWS_ROLE_ARN` on a `pull_request` trigger: This workflow triggers on `pull_request`, which checks out the FORK's code. Referencing `${ secrets.AWS_ROLE_ARN }` lets a PR from any fork exfiltrate the secret (modify a script, log the value, etc.). Use `pull_request_target` ONLY with strict checkout discipline (no fork code in the trusted context)."}, "properties": {"repobilityId": 139950, "scanner": "repobility-supply-chain", "fingerprint": "5d6ed95c3852319fc13bceeff70e9e103e87cc50ebd7dfd7bde79a3813bd8863", "category": "dependency", "severity": "critical", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-pull-request-secrets", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|5d6ed95c3852319fc13bceeff70e9e103e87cc50ebd7dfd7bde79a3813bd8863"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/test.yml"}, "region": {"startLine": 78}}}]}, {"ruleId": "MINED116", "level": "error", "message": {"text": "[MINED116] Workflow uses `secrets.GH_PAT_READ_RUNNERS` on a `pull_request` trigger: This workflow triggers on `pull_request`, which checks out the FORK's code. Referencing `${ secrets.GH_PAT_READ_RUNNERS }` lets a PR from any fork exfiltrate the secret (modify a script, log the value, etc.). Use `pull_request_target` ONLY with strict checkout discipline (no fork code in the trusted context)."}, "properties": {"repobilityId": 139949, "scanner": "repobility-supply-chain", "fingerprint": "40b7af9b302858aae32df4101c265797178eb22c4a733e4dba4cb501c12f1f5a", "category": "dependency", "severity": "critical", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-pull-request-secrets", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|40b7af9b302858aae32df4101c265797178eb22c4a733e4dba4cb501c12f1f5a"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/test.yml"}, "region": {"startLine": 43}}}]}, {"ruleId": "MINED116", "level": "error", "message": {"text": "[MINED116] Workflow uses `secrets.AWS_BEDROCK_ROLE` on a `pull_request` trigger: This workflow triggers on `pull_request`, which checks out the FORK's code. Referencing `${ secrets.AWS_BEDROCK_ROLE }` lets a PR from any fork exfiltrate the secret (modify a script, log the value, etc.). Use `pull_request_target` ONLY with strict checkout discipline (no fork code in the trusted context)."}, "properties": {"repobilityId": 139947, "scanner": "repobility-supply-chain", "fingerprint": "64af9ca26660829c7b7e94cfc36294bd212af13c87c9a3eb9fc96e8f65fb4b56", "category": "dependency", "severity": "critical", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-pull-request-secrets", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|64af9ca26660829c7b7e94cfc36294bd212af13c87c9a3eb9fc96e8f65fb4b56"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ai-code-review.yml"}, "region": {"startLine": 77}}}]}, {"ruleId": "MINED116", "level": "error", "message": {"text": "[MINED116] Workflow uses `secrets.KP_REVIEW_BOT_APP_PRIVATE_KEY` on a `pull_request` trigger: This workflow triggers on `pull_request`, which checks out the FORK's code. Referencing `${ secrets.KP_REVIEW_BOT_APP_PRIVATE_KEY }` lets a PR from any fork exfiltrate the secret (modify a script, log the value, etc.). Use `pull_request_target` ONLY with strict checkout discipline (no fork code in the trusted context)."}, "properties": {"repobilityId": 139946, "scanner": "repobility-supply-chain", "fingerprint": "a3d8923fa546babc8cfb39a44c215d7f315379ebc9f8a7a503de0f6eb89672f4", "category": "dependency", "severity": "critical", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-pull-request-secrets", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|a3d8923fa546babc8cfb39a44c215d7f315379ebc9f8a7a503de0f6eb89672f4"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ai-code-review.yml"}, "region": {"startLine": 72}}}]}, {"ruleId": "MINED116", "level": "error", "message": {"text": "[MINED116] Workflow uses `secrets.KP_REVIEW_BOT_APP_ID` on a `pull_request` trigger: This workflow triggers on `pull_request`, which checks out the FORK's code. Referencing `${ secrets.KP_REVIEW_BOT_APP_ID }` lets a PR from any fork exfiltrate the secret (modify a script, log the value, etc.). Use `pull_request_target` ONLY with strict checkout discipline (no fork code in the trusted context)."}, "properties": {"repobilityId": 139945, "scanner": "repobility-supply-chain", "fingerprint": "7816d3a580b03ec2df5b08f2d1e1465dbe0f763185fb57945a7d1479bca7a468", "category": "dependency", "severity": "critical", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-pull-request-secrets", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|7816d3a580b03ec2df5b08f2d1e1465dbe0f763185fb57945a7d1479bca7a468"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ai-code-review.yml"}, "region": {"startLine": 71}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "[MINED107] Missing import: `html` used but not imported: The file uses `html.something(...)` but never imports `html`. This raises NameError at runtime the first time the line executes."}, "properties": {"repobilityId": 139935, "scanner": "repobility-ast-engine", "fingerprint": "e300ad5472ef08822a4a0d37d595c60caff38c69f764a289dff4055a2c9a1dc3", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|e300ad5472ef08822a4a0d37d595c60caff38c69f764a289dff4055a2c9a1dc3"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/power/pm-graph/sleepgraph.py"}, "region": {"startLine": 6411}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "[MINED107] Missing import: `ast` used but not imported: The file uses `ast.something(...)` but never imports `ast`. This raises NameError at runtime the first time the line executes."}, "properties": {"repobilityId": 139934, "scanner": "repobility-ast-engine", "fingerprint": "592f033eb3e4af4fe42a0cdbbb5f29c0ac3c008110f98d7d8254a0805c3dc4c6", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|592f033eb3e4af4fe42a0cdbbb5f29c0ac3c008110f98d7d8254a0805c3dc4c6"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/net/sunrpc/xdrgen/xdr_ast.py"}, "region": {"startLine": 782}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "[MINED107] Missing import: `string` used but not imported: The file uses `string.something(...)` but never imports `string`. This raises NameError at runtime the first time the line executes."}, "properties": {"repobilityId": 139933, "scanner": "repobility-ast-engine", "fingerprint": "cdc20c037d41c0adac23c3570d3a016254dbb36ccaa6d021c1f5c4a66151094e", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|cdc20c037d41c0adac23c3570d3a016254dbb36ccaa6d021c1f5c4a66151094e"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/net/ynl/pyynl/lib/ynl.py"}, "region": {"startLine": 1246}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "[MINED107] Missing import: `enum` used but not imported: The file uses `enum.something(...)` but never imports `enum`. This raises NameError at runtime the first time the line executes."}, "properties": {"repobilityId": 139932, "scanner": "repobility-ast-engine", "fingerprint": "9dbc2c6eff941fded68ab1c68ba57cb2ac6643ab47ed51fbe5530d583eb0d071", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|9dbc2c6eff941fded68ab1c68ba57cb2ac6643ab47ed51fbe5530d583eb0d071"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/net/ynl/pyynl/lib/ynl.py"}, "region": {"startLine": 783}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "[MINED107] Missing import: `struct` used but not imported: The file uses `struct.something(...)` but never imports `struct`. This raises NameError at runtime the first time the line executes."}, "properties": {"repobilityId": 139931, "scanner": "repobility-ast-engine", "fingerprint": "1eefaa7b9ce987f2843493f3739d3c3d5e17e55bdf00b4f61833f13206d96e1e", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|1eefaa7b9ce987f2843493f3739d3c3d5e17e55bdf00b4f61833f13206d96e1e"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/net/ynl/pyynl/ynl_gen_c.py"}, "region": {"startLine": 2003}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "[MINED107] Missing import: `enum` used but not imported: The file uses `enum.something(...)` but never imports `enum`. This raises NameError at runtime the first time the line executes."}, "properties": {"repobilityId": 139930, "scanner": "repobility-ast-engine", "fingerprint": "dc94349321c24fdacd4f04d7a594fd0cd50689297fcdfbcc94d6dbdb76752436", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|dc94349321c24fdacd4f04d7a594fd0cd50689297fcdfbcc94d6dbdb76752436"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/net/ynl/pyynl/ynl_gen_c.py"}, "region": {"startLine": 2071}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "[MINED107] Missing import: `sys` used but not imported: The file uses `sys.something(...)` but never imports `sys`. This raises NameError at runtime the first time the line executes."}, "properties": {"repobilityId": 139929, "scanner": "repobility-ast-engine", "fingerprint": "21e06e008ede617cd53b664536e91b63a970c4a795fb705d4412cae2fbeec44e", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|21e06e008ede617cd53b664536e91b63a970c4a795fb705d4412cae2fbeec44e"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/lib/python/kdoc/kdoc_yaml_file.py"}, "region": {"startLine": 34}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "[MINED107] Missing import: `glob` used but not imported: The file uses `glob.something(...)` but never imports `glob`. This raises NameError at runtime the first time the line executes."}, "properties": {"repobilityId": 139928, "scanner": "repobility-ast-engine", "fingerprint": "028ee4f1a43c0a931406f60a8b642de225fa730a81bbcfacd7f6a012f8604a3a", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|028ee4f1a43c0a931406f60a8b642de225fa730a81bbcfacd7f6a012f8604a3a"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/lib/python/kdoc/kdoc_files.py"}, "region": {"startLine": 310}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "[MINED107] Missing import: `queue` used but not imported: The file uses `queue.something(...)` but never imports `queue`. This raises NameError at runtime the first time the line executes."}, "properties": {"repobilityId": 139924, "scanner": "repobility-ast-engine", "fingerprint": "7f99cee4f874152e0327c3d68ebb4cf96d0b941d7088dde224a3ebfec6e188ac", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|7f99cee4f874152e0327c3d68ebb4cf96d0b941d7088dde224a3ebfec6e188ac"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/verification/rvgen/rvgen/dot2k.py"}, "region": {"startLine": 425}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "[MINED107] Missing import: `array` used but not imported: The file uses `array.something(...)` but never imports `array`. This raises NameError at runtime the first time the line executes."}, "properties": {"repobilityId": 139921, "scanner": "repobility-ast-engine", "fingerprint": "8430139446b6f61d0b80cde1536b7aaa63cf7a28443d9bf550ccfedbb51d06a9", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|8430139446b6f61d0b80cde1536b7aaa63cf7a28443d9bf550ccfedbb51d06a9"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/testing/selftests/hid/tests/test_keyboard.py"}, "region": {"startLine": 163}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "[MINED107] Missing import: `array` used but not imported: The file uses `array.something(...)` but never imports `array`. This raises NameError at runtime the first time the line executes."}, "properties": {"repobilityId": 139878, "scanner": "repobility-ast-engine", "fingerprint": "f7b569cd5ea0af05213d5714c2847e9acc807963dbca65ff4e3e3436c34aa48a", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|f7b569cd5ea0af05213d5714c2847e9acc807963dbca65ff4e3e3436c34aa48a"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "drivers/gpu/drm/msm/registers/gen_header.py"}, "region": {"startLine": 401}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "[MINED107] Missing import: `os` used but not imported: The file uses `os.something(...)` but never imports `os`. This raises NameError at runtime the first time the line executes."}, "properties": {"repobilityId": 139871, "scanner": "repobility-ast-engine", "fingerprint": "9fffcd54314a9df36e19fde74a0f38b991a3ae9ab8cb7c7f17438b1591fb2418", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|9fffcd54314a9df36e19fde74a0f38b991a3ae9ab8cb7c7f17438b1591fb2418"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/clang-tools/run-clang-tools.py"}, "region": {"startLine": 94}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "[MINED107] Missing import: `sys` used but not imported: The file uses `sys.something(...)` but never imports `sys`. This raises NameError at runtime the first time the line executes."}, "properties": {"repobilityId": 139869, "scanner": "repobility-ast-engine", "fingerprint": "a135cb2d3c92316a696a520b174010c30769822d6b7fdcbb388498bfdca8f875", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|a135cb2d3c92316a696a520b174010c30769822d6b7fdcbb388498bfdca8f875"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/gdb/vmlinux-gdb.py"}, "region": {"startLine": 16}}}]}, {"ruleId": "MINED022", "level": "error", "message": {"text": "[MINED022] C Strcpy: strcpy/strcat dont bounds-check; use strncpy or snprintf."}, "properties": {"repobilityId": 139757, "scanner": "repobility-threat-engine", "fingerprint": "96471d072409a78e52d64749b99d5e43ce04007e9c851b5354fcd3086b97cd6b", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "c-strcpy", "owasp": null, "cwe_ids": ["CWE-120"], "languages": ["c", "cpp"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347949+00:00", "triaged_in_corpus": 20, "observations_count": 39114, "ai_coder_pattern_id": 130}, "scanner": "repobility-threat-engine", "correlation_key": "fp|96471d072409a78e52d64749b99d5e43ce04007e9c851b5354fcd3086b97cd6b"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "arch/alpha/boot/stdio.c"}, "region": {"startLine": 293}}}]}, {"ruleId": "MINED022", "level": "error", "message": {"text": "[MINED022] C Strcpy: strcpy/strcat dont bounds-check; use strncpy or snprintf."}, "properties": {"repobilityId": 139756, "scanner": "repobility-threat-engine", "fingerprint": "a8e87e59b1c591d11210326e73cd54a6fcd2f5190a5d53dfbf09ebd67cad2393", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "c-strcpy", "owasp": null, "cwe_ids": ["CWE-120"], "languages": ["c", "cpp"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347949+00:00", "triaged_in_corpus": 20, "observations_count": 39114, "ai_coder_pattern_id": 130}, "scanner": "repobility-threat-engine", "correlation_key": "fp|a8e87e59b1c591d11210326e73cd54a6fcd2f5190a5d53dfbf09ebd67cad2393"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "arch/alpha/boot/main.c"}, "region": {"startLine": 183}}}]}, {"ruleId": "MINED022", "level": "error", "message": {"text": "[MINED022] C Strcpy: strcpy/strcat dont bounds-check; use strncpy or snprintf."}, "properties": {"repobilityId": 139755, "scanner": "repobility-threat-engine", "fingerprint": "87e0f2b92793c263dc3c792cd1c70743c5bfc5a6dd954b9fc486d7e4bd03d56c", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "c-strcpy", "owasp": null, "cwe_ids": ["CWE-120"], "languages": ["c", "cpp"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347949+00:00", "triaged_in_corpus": 20, "observations_count": 39114, "ai_coder_pattern_id": 130}, "scanner": "repobility-threat-engine", "correlation_key": "fp|87e0f2b92793c263dc3c792cd1c70743c5bfc5a6dd954b9fc486d7e4bd03d56c"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "arch/alpha/boot/bootp.c"}, "region": {"startLine": 207}}}]}]}]}