{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-0d59a9a16e4693f5", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-14ce8614dd03f409", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f64016a22b67813a", "name": "Very large file: src/main/java/net/dv8tion/jda/api/JDABuilder.java (1844 lines)", "shortDescription": {"text": "Very large file: src/main/java/net/dv8tion/jda/api/JDABuilder.java (1844 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c4032062b78c79a9", "name": "Very large file: src/main/java/net/dv8tion/jda/api/JDA.java (2197 lines)", "shortDescription": {"text": "Very large file: src/main/java/net/dv8tion/jda/api/JDA.java (2197 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b78655b46f9fb4da", "name": "Very large file: src/main/java/net/dv8tion/jda/api/requests/RestAction.java (1514 lines)", "shortDescription": {"text": "Very large file: src/main/java/net/dv8tion/jda/api/requests/RestAction.java (1514 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-98063de336677fd6", "name": "Very large file: src/main/java/net/dv8tion/jda/api/sharding/ShardManager.java (1148 lines)", "shortDescription": {"text": "Very large file: src/main/java/net/dv8tion/jda/api/sharding/ShardManager.java (1148 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9271aa6c7a687447", "name": "Very large file: src/main/java/net/dv8tion/jda/api/sharding/DefaultShardManagerBuilder.java (2346 lines)", "shortDescription": {"text": "Very large file: src/main/java/net/dv8tion/jda/api/sharding/DefaultShardManagerBuilder.java (2346 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c78e339785a251d7", "name": "Very large file: src/main/java/net/dv8tion/jda/api/entities/Message.java (3246 lines)", "shortDescription": {"text": "Very large file: src/main/java/net/dv8tion/jda/api/entities/Message.java (3246 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2fc8fe5a3f8ed7f0", "name": "Very large file: src/main/java/net/dv8tion/jda/api/entities/Guild.java (6719 lines)", "shortDescription": {"text": "Very large file: src/main/java/net/dv8tion/jda/api/entities/Guild.java (6719 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a8f7cf179d0416bf", "name": "Very large file: src/main/java/net/dv8tion/jda/api/entities/WebhookClient.java (1388 lines)", "shortDescription": {"text": "Very large file: src/main/java/net/dv8tion/jda/api/entities/WebhookClient.java (1388 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d88243a676fe3356", "name": "Very large file: src/main/java/net/dv8tion/jda/api/entities/channel/concrete/ThreadChannel.java (1123 lines)", "shortDescription": {"text": "Very large file: src/main/java/net/dv8tion/jda/api/entities/channel/concrete/ThreadChannel.java (1123 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1fe429485f11778d", "name": "Very large file: src/main/java/net/dv8tion/jda/api/entities/channel/attribute/IGuildChannelContainer.java (1288 lines)", "shortDescription": {"text": "Very large file: src/main/java/net/dv8tion/jda/api/entities/channel/attribute/IGuildChannelContainer.java (1288 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f8a5a407169f64c1", "name": "Very large file: src/main/java/net/dv8tion/jda/api/entities/channel/middleman/MessageChannel.java (3779 lines)", "shortDescription": {"text": "Very large file: src/main/java/net/dv8tion/jda/api/entities/channel/middleman/MessageChannel.java (3779 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-885b0d9150e25874", "name": "Very large file: src/main/java/net/dv8tion/jda/internal/requests/WebSocketClient.java (1432 lines)", "shortDescription": {"text": "Very large file: src/main/java/net/dv8tion/jda/internal/requests/WebSocketClient.java (1432 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bbcbd4cc8c1ed6f4", "name": "Very large file: src/main/java/net/dv8tion/jda/internal/entities/GuildImpl.java (2437 lines)", "shortDescription": {"text": "Very large file: src/main/java/net/dv8tion/jda/internal/entities/GuildImpl.java (2437 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2334ac2ade825319", "name": "Very large file: src/main/java/net/dv8tion/jda/internal/entities/EntityBuilder.java (2814 lines)", "shortDescription": {"text": "Very large file: src/main/java/net/dv8tion/jda/internal/entities/EntityBuilder.java (2814 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-72b2a6250083a784", "name": "Placeholder or mock-heavy implementation detected", "shortDescription": {"text": "Placeholder or mock-heavy implementation detected"}, "fullDescription": {"text": "Found 138 placeholder/mock markers across 34 source files. This often means the repo looks complete while core flows still use generated scaffolding or fake data."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2d0c7b7ab8f8aacf", "name": "Critical user flow still appears backed by mock or placeholder data", "shortDescription": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "fullDescription": {"text": "A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/30805"}, "properties": {"repository": "konraaadcz/JDA", "repoUrl": "https://github.com/konraaadcz/JDA", "branch": "main"}, "results": [{"ruleId": "scanner-0d59a9a16e4693f5", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "876c57689d4ef379", "scanner": "scanner-primary", "fingerprint": "0d59a9a16e4693f5", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/dependency_submission.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-14ce8614dd03f409", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "81c5c697653f94e8", "scanner": "scanner-primary", "fingerprint": "14ce8614dd03f409", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/docs.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f64016a22b67813a", "level": "note", "message": {"text": "Very large file: src/main/java/net/dv8tion/jda/api/JDABuilder.java (1844 lines)"}, "properties": {"repobilityId": "4c967db52ee277d0", "scanner": "scanner-primary", "fingerprint": "f64016a22b67813a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-c4032062b78c79a9", "level": "note", "message": {"text": "Very large file: src/main/java/net/dv8tion/jda/api/JDA.java (2197 lines)"}, "properties": {"repobilityId": "fbddcc43e78405a9", "scanner": "scanner-primary", "fingerprint": "c4032062b78c79a9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-b78655b46f9fb4da", "level": "note", "message": {"text": "Very large file: src/main/java/net/dv8tion/jda/api/requests/RestAction.java (1514 lines)"}, "properties": {"repobilityId": "796ec90a30313b36", "scanner": "scanner-primary", "fingerprint": "b78655b46f9fb4da", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-98063de336677fd6", "level": "note", "message": {"text": "Very large file: src/main/java/net/dv8tion/jda/api/sharding/ShardManager.java (1148 lines)"}, "properties": {"repobilityId": "e012403a157971fe", "scanner": "scanner-primary", "fingerprint": "98063de336677fd6", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-9271aa6c7a687447", "level": "note", "message": {"text": "Very large file: src/main/java/net/dv8tion/jda/api/sharding/DefaultShardManagerBuilder.java (2346 lines)"}, "properties": {"repobilityId": "85847ba70046b1a9", "scanner": "scanner-primary", "fingerprint": "9271aa6c7a687447", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-c78e339785a251d7", "level": "note", "message": {"text": "Very large file: src/main/java/net/dv8tion/jda/api/entities/Message.java (3246 lines)"}, "properties": {"repobilityId": "7510fbccfb19b7c7", "scanner": "scanner-primary", "fingerprint": "c78e339785a251d7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-2fc8fe5a3f8ed7f0", "level": "note", "message": {"text": "Very large file: src/main/java/net/dv8tion/jda/api/entities/Guild.java (6719 lines)"}, "properties": {"repobilityId": "d0e144d95e36f61d", "scanner": "scanner-primary", "fingerprint": "2fc8fe5a3f8ed7f0", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-a8f7cf179d0416bf", "level": "note", "message": {"text": "Very large file: src/main/java/net/dv8tion/jda/api/entities/WebhookClient.java (1388 lines)"}, "properties": {"repobilityId": "badf8b809199a7ea", "scanner": "scanner-primary", "fingerprint": "a8f7cf179d0416bf", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-d88243a676fe3356", "level": "note", "message": {"text": "Very large file: src/main/java/net/dv8tion/jda/api/entities/channel/concrete/ThreadChannel.java (1123 lines)"}, "properties": {"repobilityId": "eed2115b0fdd5495", "scanner": "scanner-primary", "fingerprint": "d88243a676fe3356", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-1fe429485f11778d", "level": "note", "message": {"text": "Very large file: src/main/java/net/dv8tion/jda/api/entities/channel/attribute/IGuildChannelContainer.java (1288 lines)"}, "properties": {"repobilityId": "cd65f00007bd6da2", "scanner": "scanner-primary", "fingerprint": "1fe429485f11778d", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-f8a5a407169f64c1", "level": "note", "message": {"text": "Very large file: src/main/java/net/dv8tion/jda/api/entities/channel/middleman/MessageChannel.java (3779 lines)"}, "properties": {"repobilityId": "5ee9bff3449efdc8", "scanner": "scanner-primary", "fingerprint": "f8a5a407169f64c1", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-885b0d9150e25874", "level": "note", "message": {"text": "Very large file: src/main/java/net/dv8tion/jda/internal/requests/WebSocketClient.java (1432 lines)"}, "properties": {"repobilityId": "c193c1c7b3f26292", "scanner": "scanner-primary", "fingerprint": "885b0d9150e25874", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-bbcbd4cc8c1ed6f4", "level": "note", "message": {"text": "Very large file: src/main/java/net/dv8tion/jda/internal/entities/GuildImpl.java (2437 lines)"}, "properties": {"repobilityId": "39fbf8dbd8fb0c04", "scanner": "scanner-primary", "fingerprint": "bbcbd4cc8c1ed6f4", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-2334ac2ade825319", "level": "note", "message": {"text": "Very large file: src/main/java/net/dv8tion/jda/internal/entities/EntityBuilder.java (2814 lines)"}, "properties": {"repobilityId": "085d28833b3c52a2", "scanner": "scanner-primary", "fingerprint": "2334ac2ade825319", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-72b2a6250083a784", "level": "warning", "message": {"text": "Placeholder or mock-heavy implementation detected"}, "properties": {"repobilityId": "19163f1f7fde3a43", "scanner": "scanner-primary", "fingerprint": "72b2a6250083a784", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "incomplete", "generated-repo-pattern"]}}, {"ruleId": "scanner-2d0c7b7ab8f8aacf", "level": "warning", "message": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "properties": {"repobilityId": "39dc290d2e43e223", "scanner": "scanner-primary", "fingerprint": "2d0c7b7ab8f8aacf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "critical-flow", "generated-repo-pattern"]}}]}]}