{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-b6817d83ebf7917e", "name": "Possibly dead Python function: check_python", "shortDescription": {"text": "Possibly dead Python function: check_python"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-381a051839516797", "name": "Possibly dead Python function: check_containers", "shortDescription": {"text": "Possibly dead Python function: check_containers"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-31a60cc96dcac82e", "name": "Possibly dead Python function: check_pip", "shortDescription": {"text": "Possibly dead Python function: check_pip"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-95ccbbebdbd8ae49", "name": "Possibly dead Python function: run_and_remove", "shortDescription": {"text": "Possibly dead Python function: run_and_remove"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-978b231f1bd3af0a", "name": "Possibly dead Python function: check_secrets", "shortDescription": {"text": "Possibly dead Python function: check_secrets"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-71cd6af1c282e130", "name": "Possibly dead Python function: suggest_alt_port", "shortDescription": {"text": "Possibly dead Python function: suggest_alt_port"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-95a9e4e926e1fe59", "name": "Possibly dead Python function: build_container_image", "shortDescription": {"text": "Possibly dead Python function: build_container_image"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a34453c7fd31deff", "name": "Possibly dead Python function: collect_image_artifacts", "shortDescription": {"text": "Possibly dead Python function: collect_image_artifacts"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-465751ccbff5d02c", "name": "Stray `console.log` in TS/JS \u2014 tests/cage/scripts/test-all.js:15", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 tests/cage/scripts/test-all.js:15"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fac98119035dfd5a", "name": "Stray `console.log` in TS/JS \u2014 tests/agent/test.js:18", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 tests/agent/test.js:18"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5d0d6566650595d7", "name": "Stray `console.log` in TS/JS \u2014 examples/basic/agent/agent.js:19", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 examples/basic/agent/agent.js:19"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9a430918953dfa2d", "name": "Privileged port 587 in use", "shortDescription": {"text": "Privileged port 587 in use"}, "fullDescription": {"text": "Port 587 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-906f8aa991ca4bb9", "name": "Privileged port 465 in use", "shortDescription": {"text": "Privileged port 465 in use"}, "fullDescription": {"text": "Port 465 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-de82661b2cc413b5", "name": "Privileged port 1000 in use", "shortDescription": {"text": "Privileged port 1000 in use"}, "fullDescription": {"text": "Port 1000 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a516a2048a0741a5", "name": "Possible secret in tests/cage/scripts/test-all.js", "shortDescription": {"text": "Possible secret in tests/cage/scripts/test-all.js"}, "fullDescription": {"text": "Detected pattern matching github_token. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-027bd8a0d86afa9e", "name": "Possible secret in tests/agent/test.js", "shortDescription": {"text": "Possible secret in tests/agent/test.js"}, "fullDescription": {"text": "Detected pattern matching github_token. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-153254f109d74d15", "name": "Insecure pattern 'subprocess_shell_true' in src/agentcage/secret_resolver.py:140", "shortDescription": {"text": "Insecure pattern 'subprocess_shell_true' in src/agentcage/secret_resolver.py:140"}, "fullDescription": {"text": "Found a known-risky pattern (subprocess_shell_true). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-65c9bd56493a81d3", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/cache@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a53bf972e19b52fd", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "pypa/gh-action-pypi-publish@release/v1 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7ffa33751be3d771", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e3ed3adb2f1c40e2", "name": "Very large file: tests/test_quadlets.py (1287 lines)", "shortDescription": {"text": "Very large file: tests/test_quadlets.py (1287 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-859555b2b30f54b5", "name": "Very large file: tests/test_protocol_relays_smtp.py (1568 lines)", "shortDescription": {"text": "Very large file: tests/test_protocol_relays_smtp.py (1568 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-69d85766df50b619", "name": "Very large file: tests/test_apple_container.py (2878 lines)", "shortDescription": {"text": "Very large file: tests/test_apple_container.py (2878 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c44d854f252f11cd", "name": "Very large file: tests/test_secret_injector.py (1478 lines)", "shortDescription": {"text": "Very large file: tests/test_secret_injector.py (1478 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-817c58e5fb438a26", "name": "Very large file: tests/test_cage_cli.py (1850 lines)", "shortDescription": {"text": "Very large file: tests/test_cage_cli.py (1850 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fc746fce4fc9575c", "name": "Very large file: tests/test_config.py (2130 lines)", "shortDescription": {"text": "Very large file: tests/test_config.py (2130 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-68776f5a49cbf452", "name": "Very large file: tests/test_inspectors.py (1524 lines)", "shortDescription": {"text": "Very large file: tests/test_inspectors.py (1524 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1c1db7d541b808ed", "name": "Very large file: src/agentcage/cli.py (4023 lines)", "shortDescription": {"text": "Very large file: src/agentcage/cli.py (4023 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d8e45b375d519f48", "name": "Very large file: src/agentcage/config.py (1305 lines)", "shortDescription": {"text": "Very large file: src/agentcage/config.py (1305 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5735d15dd618ee55", "name": "Very large file: src/agentcage/backends/apple_container.py (1783 lines)", "shortDescription": {"text": "Very large file: src/agentcage/backends/apple_container.py (1783 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3ab5d313dda8e5f9", "name": "Debug logging residue appears in source files", "shortDescription": {"text": "Debug logging residue appears in source files"}, "fullDescription": {"text": "Found 52 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-72b2a6250083a784", "name": "Placeholder or mock-heavy implementation detected", "shortDescription": {"text": "Placeholder or mock-heavy implementation detected"}, "fullDescription": {"text": "Found 89 placeholder/mock markers across 11 source files. This often means the repo looks complete while core flows still use generated scaffolding or fake data."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9d79c4077342a7d0", "name": "Runtime service client appears to use placeholder configuration", "shortDescription": {"text": "Runtime service client appears to use placeholder configuration"}, "fullDescription": {"text": "A runtime source file appears to wire Supabase/Firebase/AI/payment-style clients to placeholder URLs, keys, or fallback values. In the Fable corpus this often means the UI/API shape is present while the backend service is not actually configured."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2d0c7b7ab8f8aacf", "name": "Critical user flow still appears backed by mock or placeholder data", "shortDescription": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "fullDescription": {"text": "A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-49d847dff37d87e6", "name": "Commented-code block (6 lines) in tests/test_dns_live_reload.py:467", "shortDescription": {"text": "Commented-code block (6 lines) in tests/test_dns_live_reload.py:467"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-472e56e6f4a01ecc", "name": "Legacy-named symbol `test_new_key_overrides_legacy` in tests/test_defaults.py:286", "shortDescription": {"text": "Legacy-named symbol `test_new_key_overrides_legacy` in tests/test_defaults.py:286"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6dbb668fd560183d", "name": "Commented-code block (5 lines) in tests/test_quadlets.py:604", "shortDescription": {"text": "Commented-code block (5 lines) in tests/test_quadlets.py:604"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a758d1fb22d3c336", "name": "Legacy-named symbol `check_cgroup_v2` in tests/test_doctor.py:25", "shortDescription": {"text": "Legacy-named symbol `check_cgroup_v2` in tests/test_doctor.py:25"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bca8d2d05995900e", "name": "Commented-code block (5 lines) in tests/test_apple_container.py:22", "shortDescription": {"text": "Commented-code block (5 lines) in tests/test_apple_container.py:22"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f7a2febe20b65b0e", "name": "Commented-code block (9 lines) in tests/test_secret_injector.py:711", "shortDescription": {"text": "Commented-code block (9 lines) in tests/test_secret_injector.py:711"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-46727581d73b8311", "name": "Legacy-named symbol `test_missing_version_key_is_treated_as_legacy` in tests/test_v021_legacy_cage.py:310", "shortDescription": {"text": "Legacy-named symbol `test_missing_version_key_is_treated_as_legacy` in tests/test_v021_legacy_cage.py:310"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-987f99ec58ed935f", "name": "Legacy-named symbol `test_list_missing_metadata_shows_legacy` in tests/test_cage_cli.py:797", "shortDescription": {"text": "Legacy-named symbol `test_list_missing_metadata_shows_legacy` in tests/test_cage_cli.py:797"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-53f809ae7c958d1d", "name": "Commented-code block (6 lines) in tests/test_cage_cli.py:16", "shortDescription": {"text": "Commented-code block (6 lines) in tests/test_cage_cli.py:16"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1154715a36dea5e6", "name": "Commented-code block (5 lines) in tests/test_apple_container_cli.py:104", "shortDescription": {"text": "Commented-code block (5 lines) in tests/test_apple_container_cli.py:104"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-119a89cbaf95fcb9", "name": "Commented-code block (5 lines) in tests/test_protocol_relays.py:669", "shortDescription": {"text": "Commented-code block (5 lines) in tests/test_protocol_relays.py:669"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2859f0ce49847530", "name": "Commented-code block (14 lines) in tests/test_egress_image.py:128", "shortDescription": {"text": "Commented-code block (14 lines) in tests/test_egress_image.py:128"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c05a72235a9dd3cc", "name": "Legacy-named symbol `test_new_key_overrides_legacy` in tests/test_config.py:562", "shortDescription": {"text": "Legacy-named symbol `test_new_key_overrides_legacy` in tests/test_config.py:562"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ec32180011b9f3d5", "name": "Commented-code block (5 lines) in tests/test_config.py:11", "shortDescription": {"text": "Commented-code block (5 lines) in tests/test_config.py:11"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1397df189b0d2823", "name": "Commented-code block (6 lines) in tests/test_derived_secret_state.py:182", "shortDescription": {"text": "Commented-code block (6 lines) in tests/test_derived_secret_state.py:182"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-726886186501a926", "name": "Network/subprocess call without timeout or try/except \u2014 scripts/update-deps.py:56", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 scripts/update-deps.py:56"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a558e65c26024b11", "name": "Legacy-named symbol `cage_backup` in src/agentcage/cli.py:2961", "shortDescription": {"text": "Legacy-named symbol `cage_backup` in src/agentcage/cli.py:2961"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-acd591ee5d77a3c5", "name": "Commented-code block (7 lines) in src/agentcage/cli.py:650", "shortDescription": {"text": "Commented-code block (7 lines) in src/agentcage/cli.py:650"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e1a9e88664de0931", "name": "Network/subprocess call without timeout or try/except \u2014 src/agentcage/cli.py:1398", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 src/agentcage/cli.py:1398"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6a6142718273aec8", "name": "Commented-code block (6 lines) in src/agentcage/backend.py:100", "shortDescription": {"text": "Commented-code block (6 lines) in src/agentcage/backend.py:100"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7e04d833279571d9", "name": "Network/subprocess call without timeout or try/except \u2014 src/agentcage/podman.py:35", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 src/agentcage/podman.py:35"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-dcce7727eb3abb4c", "name": "Commented-code block (8 lines) in src/agentcage/quadlets.py:247", "shortDescription": {"text": "Commented-code block (8 lines) in src/agentcage/quadlets.py:247"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f8864af7cf265aa9", "name": "Network/subprocess call without timeout or try/except \u2014 src/agentcage/secret_store.py:174", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 src/agentcage/secret_store.py:174"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-27f0d1ccb7c442c0", "name": "Commented-code block (5 lines) in src/agentcage/config.py:99", "shortDescription": {"text": "Commented-code block (5 lines) in src/agentcage/config.py:99"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b69f7b7779454f8a", "name": "Network/subprocess call without timeout or try/except \u2014 src/agentcage/systemd.py:36", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 src/agentcage/systemd.py:36"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ffaf72ed2ce49535", "name": "Commented-code block (5 lines) in src/agentcage/services.py:215", "shortDescription": {"text": "Commented-code block (5 lines) in src/agentcage/services.py:215"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-3a322f484a814303", "name": "Network/subprocess call without timeout or try/except \u2014 src/agentcage/services.py:439", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 src/agentcage/services.py:439"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e81908a67d93a6f5", "name": "Commented-code block (5 lines) in src/agentcage/state.py:232", "shortDescription": {"text": "Commented-code block (5 lines) in src/agentcage/state.py:232"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-216db070f5bfd4c3", "name": "Legacy-named symbol `check_cgroup_v2` in src/agentcage/doctor.py:323", "shortDescription": {"text": "Legacy-named symbol `check_cgroup_v2` in src/agentcage/doctor.py:323"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9166ecd9ad13bed2", "name": "Network/subprocess call without timeout or try/except \u2014 src/agentcage/scaffold_cli.py:186", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 src/agentcage/scaffold_cli.py:186"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ee498413cfb9b56d", "name": "Network/subprocess call without timeout or try/except \u2014 src/agentcage/init.py:318", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 src/agentcage/init.py:318"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-285d04eff9ba9568", "name": "Commented-code block (5 lines) in src/agentcage/output.py:70", "shortDescription": {"text": "Commented-code block (5 lines) in src/agentcage/output.py:70"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b360fc094a675bb0", "name": "Commented-code block (8 lines) in src/agentcage/run.py:107", "shortDescription": {"text": "Commented-code block (8 lines) in src/agentcage/run.py:107"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-40784670c2f894e9", "name": "Network/subprocess call without timeout or try/except \u2014 src/agentcage/run.py:13", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 src/agentcage/run.py:13"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b47c76073884e240", "name": "Commented-code block (9 lines) in src/agentcage/backends/apple_container.py:305", "shortDescription": {"text": "Commented-code block (9 lines) in src/agentcage/backends/apple_container.py:305"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-679929a55e4b5bbd", "name": "Commented-code block (5 lines) in src/agentcage/backends/vm.py:44", "shortDescription": {"text": "Commented-code block (5 lines) in src/agentcage/backends/vm.py:44"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-97f40587739808e6", "name": "Network/subprocess call without timeout or try/except \u2014 src/agentcage/backends/vm.py:230", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 src/agentcage/backends/vm.py:230"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2c54106dd3c88e40", "name": "Commented-code block (7 lines) in src/agentcage/backends/container.py:167", "shortDescription": {"text": "Commented-code block (7 lines) in src/agentcage/backends/container.py:167"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1ecc09cc1856c58e", "name": "Network/subprocess call without timeout or try/except \u2014 src/agentcage/lima/instance.py:25", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 src/agentcage/lima/instance.py:25"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fc70f7e577e94656", "name": "Commented-code block (6 lines) in src/agentcage/lima/provisioning.py:106", "shortDescription": {"text": "Commented-code block (6 lines) in src/agentcage/lima/provisioning.py:106"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-437f5bffee7570cf", "name": "Commented-code block (5 lines) in src/agentcage/apple_container/cli.py:59", "shortDescription": {"text": "Commented-code block (5 lines) in src/agentcage/apple_container/cli.py:59"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8818ef48970dfe3b", "name": "Network/subprocess call without timeout or try/except \u2014 src/agentcage/apple_container/cli.py:52", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 src/agentcage/apple_container/cli.py:52"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-17da2c1fb984b926", "name": "Commented-code block (6 lines) in src/agentcage/apple_container/wrapper.py:159", "shortDescription": {"text": "Commented-code block (6 lines) in src/agentcage/apple_container/wrapper.py:159"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2c04133e54348533", "name": "Near-duplicate function bodies in 2 places", "shortDescription": {"text": "Near-duplicate function bodies in 2 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nsrc/agentcage/cli.py:get_command, src/agentcage/cli.py:get_command\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-be46ea126aa5d8dc", "name": "Near-duplicate function bodies in 3 places", "shortDescription": {"text": "Near-duplicate function bodies in 3 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nsrc/agentcage/backend.py:generate_units, src/agentcage/backends/vm.py:generate_units, src/agentcage/backends/container.py:generate_units\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-49c98f7cedd9c977", "name": "Near-duplicate function bodies in 4 places", "shortDescription": {"text": "Near-duplicate function bodies in 4 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nsrc/agentcage/backend.py:exec_argv, src/agentcage/backends/apple_container.py:exec_argv, src/agentcage/backends/vm.py:exec_argv, src/agentcage/backends/container.py:exec_argv\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-02525d39071dd2c7", "name": "Near-duplicate function bodies in 5 places", "shortDescription": {"text": "Near-duplicate function bodies in 5 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nsrc/agentcage/secret_store.py:available, src/agentcage/secret_store.py:available, src/agentcage/secret_store.py:available, src/agentcage/secret_store.py:available\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/23941"}, "properties": {"repository": "agentcage/agentcage", "repoUrl": "https://github.com/agentcage/agentcage", "branch": "main"}, "results": [{"ruleId": "scanner-b6817d83ebf7917e", "level": "note", "message": {"text": "Possibly dead Python function: check_python"}, "properties": {"repobilityId": "d66848277ba9aacd", "scanner": "scanner-primary", "fingerprint": "b6817d83ebf7917e", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/update-deps.py:52"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-381a051839516797", "level": "note", "message": {"text": "Possibly dead Python function: check_containers"}, "properties": {"repobilityId": "0dc3217f56ee596f", "scanner": "scanner-primary", "fingerprint": "381a051839516797", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/update-deps.py:171"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-31a60cc96dcac82e", "level": "note", "message": {"text": "Possibly dead Python function: check_pip"}, "properties": {"repobilityId": "867c558af9fcc0b0", "scanner": "scanner-primary", "fingerprint": "31a60cc96dcac82e", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/update-deps.py:192"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-95ccbbebdbd8ae49", "level": "note", "message": {"text": "Possibly dead Python function: run_and_remove"}, "properties": {"repobilityId": "3b32eb5e5be3c68f", "scanner": "scanner-primary", "fingerprint": "95ccbbebdbd8ae49", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/agentcage/podman.py:81"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-978b231f1bd3af0a", "level": "note", "message": {"text": "Possibly dead Python function: check_secrets"}, "properties": {"repobilityId": "5a5deb489d9f6fb6", "scanner": "scanner-primary", "fingerprint": "978b231f1bd3af0a", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/agentcage/services.py:47"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-71cd6af1c282e130", "level": "note", "message": {"text": "Possibly dead Python function: suggest_alt_port"}, "properties": {"repobilityId": "db006cd672a133e3", "scanner": "scanner-primary", "fingerprint": "71cd6af1c282e130", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/agentcage/services.py:101"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-95a9e4e926e1fe59", "level": "note", "message": {"text": "Possibly dead Python function: build_container_image"}, "properties": {"repobilityId": "de22d0850c2caaa7", "scanner": "scanner-primary", "fingerprint": "95a9e4e926e1fe59", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/agentcage/services.py:167"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a34453c7fd31deff", "level": "note", "message": {"text": "Possibly dead Python function: collect_image_artifacts"}, "properties": {"repobilityId": "180b05ee74eadc4c", "scanner": "scanner-primary", "fingerprint": "a34453c7fd31deff", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/agentcage/apple_container/wrapper.py:262"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-465751ccbff5d02c", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 tests/cage/scripts/test-all.js:15"}, "properties": {"repobilityId": "95b016d54fdaa072", "scanner": "scanner-primary", "fingerprint": "465751ccbff5d02c", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-fac98119035dfd5a", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 tests/agent/test.js:18"}, "properties": {"repobilityId": "6821a1fcd26c324f", "scanner": "scanner-primary", "fingerprint": "fac98119035dfd5a", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-5d0d6566650595d7", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 examples/basic/agent/agent.js:19"}, "properties": {"repobilityId": "34fdddc82f8ef8f8", "scanner": "scanner-primary", "fingerprint": "5d0d6566650595d7", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-9a430918953dfa2d", "level": "warning", "message": {"text": "Privileged port 587 in use"}, "properties": {"repobilityId": "a87a96c3b2e62c08", "scanner": "scanner-primary", "fingerprint": "9a430918953dfa2d", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_apple_container.py"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-906f8aa991ca4bb9", "level": "warning", "message": {"text": "Privileged port 465 in use"}, "properties": {"repobilityId": "bcd1f06b60a2b6bc", "scanner": "scanner-primary", "fingerprint": "906f8aa991ca4bb9", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_config.py"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-de82661b2cc413b5", "level": "warning", "message": {"text": "Privileged port 1000 in use"}, "properties": {"repobilityId": "5ac9fc9372cfe169", "scanner": "scanner-primary", "fingerprint": "de82661b2cc413b5", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/e2e/configs/hardened.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a516a2048a0741a5", "level": "error", "message": {"text": "Possible secret in tests/cage/scripts/test-all.js"}, "properties": {"repobilityId": "6feb223c696d0211", "scanner": "scanner-primary", "fingerprint": "a516a2048a0741a5", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/cage/scripts/test-all.js"}, "region": {"startLine": 97}}}]}, {"ruleId": "scanner-027bd8a0d86afa9e", "level": "error", "message": {"text": "Possible secret in tests/agent/test.js"}, "properties": {"repobilityId": "826a5f0b8a21ee02", "scanner": "scanner-primary", "fingerprint": "027bd8a0d86afa9e", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/agent/test.js"}, "region": {"startLine": 11}}}]}, {"ruleId": "scanner-153254f109d74d15", "level": "error", "message": {"text": "Insecure pattern 'subprocess_shell_true' in src/agentcage/secret_resolver.py:140"}, "properties": {"repobilityId": "96f41380423fffce", "scanner": "scanner-primary", "fingerprint": "153254f109d74d15", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "subprocess_shell_true"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/agentcage/secret_resolver.py"}, "region": {"startLine": 140}}}]}, {"ruleId": "scanner-65c9bd56493a81d3", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "3b3d8b8ee5da1f9b", "scanner": "scanner-primary", "fingerprint": "65c9bd56493a81d3", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/e2e.yml"}, "region": {"startLine": 42}}}]}, {"ruleId": "scanner-65c9bd56493a81d3", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "3b3d8b8ee5da1f9b", "scanner": "scanner-primary", "fingerprint": "65c9bd56493a81d3", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/e2e.yml"}, "region": {"startLine": 83}}}]}, {"ruleId": "scanner-a53bf972e19b52fd", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "26eca5024249c767", "scanner": "scanner-primary", "fingerprint": "a53bf972e19b52fd", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/publish.yml"}, "region": {"startLine": 30}}}]}, {"ruleId": "scanner-7ffa33751be3d771", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "491a3ad29cbaf189", "scanner": "scanner-primary", "fingerprint": "7ffa33751be3d771", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/publish.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e3ed3adb2f1c40e2", "level": "note", "message": {"text": "Very large file: tests/test_quadlets.py (1287 lines)"}, "properties": {"repobilityId": "bb302b55180ced3f", "scanner": "scanner-primary", "fingerprint": "e3ed3adb2f1c40e2", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-859555b2b30f54b5", "level": "note", "message": {"text": "Very large file: tests/test_protocol_relays_smtp.py (1568 lines)"}, "properties": {"repobilityId": "1592051e4f73a4a2", "scanner": "scanner-primary", "fingerprint": "859555b2b30f54b5", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-69d85766df50b619", "level": "note", "message": {"text": "Very large file: tests/test_apple_container.py (2878 lines)"}, "properties": {"repobilityId": "f58464beeae5e5f3", "scanner": "scanner-primary", "fingerprint": "69d85766df50b619", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-c44d854f252f11cd", "level": "note", "message": {"text": "Very large file: tests/test_secret_injector.py (1478 lines)"}, "properties": {"repobilityId": "2de5b777854fffac", "scanner": "scanner-primary", "fingerprint": "c44d854f252f11cd", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-817c58e5fb438a26", "level": "note", "message": {"text": "Very large file: tests/test_cage_cli.py (1850 lines)"}, "properties": {"repobilityId": "8ddc7989ed65d0a4", "scanner": "scanner-primary", "fingerprint": "817c58e5fb438a26", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-fc746fce4fc9575c", "level": "note", "message": {"text": "Very large file: tests/test_config.py (2130 lines)"}, "properties": {"repobilityId": "790fa6e92b697628", "scanner": "scanner-primary", "fingerprint": "fc746fce4fc9575c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-68776f5a49cbf452", "level": "note", "message": {"text": "Very large file: tests/test_inspectors.py (1524 lines)"}, "properties": {"repobilityId": "4b4df1c71cd56019", "scanner": "scanner-primary", "fingerprint": "68776f5a49cbf452", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-1c1db7d541b808ed", "level": "note", "message": {"text": "Very large file: src/agentcage/cli.py (4023 lines)"}, "properties": {"repobilityId": "c2db8898037380bd", "scanner": "scanner-primary", "fingerprint": "1c1db7d541b808ed", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-d8e45b375d519f48", "level": "note", "message": {"text": "Very large file: src/agentcage/config.py (1305 lines)"}, "properties": {"repobilityId": "ddc8494f5ea1d0bf", "scanner": "scanner-primary", "fingerprint": "d8e45b375d519f48", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-5735d15dd618ee55", "level": "note", "message": {"text": "Very large file: src/agentcage/backends/apple_container.py (1783 lines)"}, "properties": {"repobilityId": "ecce189009b4f83e", "scanner": "scanner-primary", "fingerprint": "5735d15dd618ee55", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "4c06017640b18819", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-72b2a6250083a784", "level": "warning", "message": {"text": "Placeholder or mock-heavy implementation detected"}, "properties": {"repobilityId": "5362d6ce7f1e1c52", "scanner": "scanner-primary", "fingerprint": "72b2a6250083a784", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "incomplete", "generated-repo-pattern"]}}, {"ruleId": "scanner-9d79c4077342a7d0", "level": "warning", "message": {"text": "Runtime service client appears to use placeholder configuration"}, "properties": {"repobilityId": "d77f03bd0e62201c", "scanner": "scanner-primary", "fingerprint": "9d79c4077342a7d0", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "runtime-config", "service-client", "generated-repo-pattern"]}}, {"ruleId": "scanner-2d0c7b7ab8f8aacf", "level": "warning", "message": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "properties": {"repobilityId": "af8ff9f4e6a4be76", "scanner": "scanner-primary", "fingerprint": "2d0c7b7ab8f8aacf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "critical-flow", "generated-repo-pattern"]}}, {"ruleId": "scanner-49d847dff37d87e6", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/test_dns_live_reload.py:467"}, "properties": {"repobilityId": "db34d2e988b4dab5", "scanner": "scanner-primary", "fingerprint": "49d847dff37d87e6", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-472e56e6f4a01ecc", "level": "note", "message": {"text": "Legacy-named symbol `test_new_key_overrides_legacy` in tests/test_defaults.py:286"}, "properties": {"repobilityId": "3dddecc4da655ae6", "scanner": "scanner-primary", "fingerprint": "472e56e6f4a01ecc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-6dbb668fd560183d", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/test_quadlets.py:604"}, "properties": {"repobilityId": "c3480ce7e905784a", "scanner": "scanner-primary", "fingerprint": "6dbb668fd560183d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a758d1fb22d3c336", "level": "note", "message": {"text": "Legacy-named symbol `check_cgroup_v2` in tests/test_doctor.py:25"}, "properties": {"repobilityId": "6c90fe264cb29fce", "scanner": "scanner-primary", "fingerprint": "a758d1fb22d3c336", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-bca8d2d05995900e", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/test_apple_container.py:22"}, "properties": {"repobilityId": "235ccdc1c072aec6", "scanner": "scanner-primary", "fingerprint": "bca8d2d05995900e", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-f7a2febe20b65b0e", "level": "none", "message": {"text": "Commented-code block (9 lines) in tests/test_secret_injector.py:711"}, "properties": {"repobilityId": "259849cd2ac51b99", "scanner": "scanner-primary", "fingerprint": "f7a2febe20b65b0e", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-46727581d73b8311", "level": "note", "message": {"text": "Legacy-named symbol `test_missing_version_key_is_treated_as_legacy` in tests/test_v021_legacy_cage.py:310"}, "properties": {"repobilityId": "26c3d268c47f71c7", "scanner": "scanner-primary", "fingerprint": "46727581d73b8311", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-987f99ec58ed935f", "level": "note", "message": {"text": "Legacy-named symbol `test_list_missing_metadata_shows_legacy` in tests/test_cage_cli.py:797"}, "properties": {"repobilityId": "5e121271eaf85d5c", "scanner": "scanner-primary", "fingerprint": "987f99ec58ed935f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-53f809ae7c958d1d", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/test_cage_cli.py:16"}, "properties": {"repobilityId": "10f5a19777a62fc6", "scanner": "scanner-primary", "fingerprint": "53f809ae7c958d1d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-1154715a36dea5e6", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/test_apple_container_cli.py:104"}, "properties": {"repobilityId": "2137ce6328aa7302", "scanner": "scanner-primary", "fingerprint": "1154715a36dea5e6", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-119a89cbaf95fcb9", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/test_protocol_relays.py:669"}, "properties": {"repobilityId": "7f82d3553b25aaf7", "scanner": "scanner-primary", "fingerprint": "119a89cbaf95fcb9", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2859f0ce49847530", "level": "none", "message": {"text": "Commented-code block (14 lines) in tests/test_egress_image.py:128"}, "properties": {"repobilityId": "d95fa23e00c67502", "scanner": "scanner-primary", "fingerprint": "2859f0ce49847530", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-c05a72235a9dd3cc", "level": "note", "message": {"text": "Legacy-named symbol `test_new_key_overrides_legacy` in tests/test_config.py:562"}, "properties": {"repobilityId": "cbb7c9aa22040a59", "scanner": "scanner-primary", "fingerprint": "c05a72235a9dd3cc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-ec32180011b9f3d5", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/test_config.py:11"}, "properties": {"repobilityId": "921b1177baa814c1", "scanner": "scanner-primary", "fingerprint": "ec32180011b9f3d5", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-1397df189b0d2823", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/test_derived_secret_state.py:182"}, "properties": {"repobilityId": "25757ec75dba9dfb", "scanner": "scanner-primary", "fingerprint": "1397df189b0d2823", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-726886186501a926", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 scripts/update-deps.py:56"}, "properties": {"repobilityId": "e246c6c975fbdedb", "scanner": "scanner-primary", "fingerprint": "726886186501a926", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-a558e65c26024b11", "level": "note", "message": {"text": "Legacy-named symbol `cage_backup` in src/agentcage/cli.py:2961"}, "properties": {"repobilityId": "0f05f0b84116c535", "scanner": "scanner-primary", "fingerprint": "a558e65c26024b11", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-acd591ee5d77a3c5", "level": "none", "message": {"text": "Commented-code block (7 lines) in src/agentcage/cli.py:650"}, "properties": {"repobilityId": "3fe5009af3983213", "scanner": "scanner-primary", "fingerprint": "acd591ee5d77a3c5", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-e1a9e88664de0931", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 src/agentcage/cli.py:1398"}, "properties": {"repobilityId": "fa8f4c7cecf3eacc", "scanner": "scanner-primary", "fingerprint": "e1a9e88664de0931", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-6a6142718273aec8", "level": "none", "message": {"text": "Commented-code block (6 lines) in src/agentcage/backend.py:100"}, "properties": {"repobilityId": "5ff9cada79fbefea", "scanner": "scanner-primary", "fingerprint": "6a6142718273aec8", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-7e04d833279571d9", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 src/agentcage/podman.py:35"}, "properties": {"repobilityId": "02ab4da3d491894d", "scanner": "scanner-primary", "fingerprint": "7e04d833279571d9", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-dcce7727eb3abb4c", "level": "none", "message": {"text": "Commented-code block (8 lines) in src/agentcage/quadlets.py:247"}, "properties": {"repobilityId": "e57b9cdcea8a3408", "scanner": "scanner-primary", "fingerprint": "dcce7727eb3abb4c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-f8864af7cf265aa9", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 src/agentcage/secret_store.py:174"}, "properties": {"repobilityId": "2e8fc0366ebef75e", "scanner": "scanner-primary", "fingerprint": "f8864af7cf265aa9", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-27f0d1ccb7c442c0", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/agentcage/config.py:99"}, "properties": {"repobilityId": "b69a1418f7530473", "scanner": "scanner-primary", "fingerprint": "27f0d1ccb7c442c0", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b69f7b7779454f8a", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 src/agentcage/systemd.py:36"}, "properties": {"repobilityId": "8362a4e7df367c96", "scanner": "scanner-primary", "fingerprint": "b69f7b7779454f8a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-ffaf72ed2ce49535", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/agentcage/services.py:215"}, "properties": {"repobilityId": "1429d1f1610ac23e", "scanner": "scanner-primary", "fingerprint": "ffaf72ed2ce49535", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-3a322f484a814303", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 src/agentcage/services.py:439"}, "properties": {"repobilityId": "c726effd2fcaed85", "scanner": "scanner-primary", "fingerprint": "3a322f484a814303", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-e81908a67d93a6f5", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/agentcage/state.py:232"}, "properties": {"repobilityId": "7400a8d67d9c9c4f", "scanner": "scanner-primary", "fingerprint": "e81908a67d93a6f5", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-216db070f5bfd4c3", "level": "note", "message": {"text": "Legacy-named symbol `check_cgroup_v2` in src/agentcage/doctor.py:323"}, "properties": {"repobilityId": "0ef9062180387f0c", "scanner": "scanner-primary", "fingerprint": "216db070f5bfd4c3", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-9166ecd9ad13bed2", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 src/agentcage/scaffold_cli.py:186"}, "properties": {"repobilityId": "73c900383b4a68f2", "scanner": "scanner-primary", "fingerprint": "9166ecd9ad13bed2", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-ee498413cfb9b56d", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 src/agentcage/init.py:318"}, "properties": {"repobilityId": "7f6802aa76012863", "scanner": "scanner-primary", "fingerprint": "ee498413cfb9b56d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-285d04eff9ba9568", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/agentcage/output.py:70"}, "properties": {"repobilityId": "7183f87e574bc410", "scanner": "scanner-primary", "fingerprint": "285d04eff9ba9568", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b360fc094a675bb0", "level": "none", "message": {"text": "Commented-code block (8 lines) in src/agentcage/run.py:107"}, "properties": {"repobilityId": "16fd197c855603c9", "scanner": "scanner-primary", "fingerprint": "b360fc094a675bb0", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-40784670c2f894e9", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 src/agentcage/run.py:13"}, "properties": {"repobilityId": "acc1d8d933e759b6", "scanner": "scanner-primary", "fingerprint": "40784670c2f894e9", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-b47c76073884e240", "level": "none", "message": {"text": "Commented-code block (9 lines) in src/agentcage/backends/apple_container.py:305"}, "properties": {"repobilityId": "0008b90fd1194a19", "scanner": "scanner-primary", "fingerprint": "b47c76073884e240", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-679929a55e4b5bbd", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/agentcage/backends/vm.py:44"}, "properties": {"repobilityId": "fcd70da8cd6dd075", "scanner": "scanner-primary", "fingerprint": "679929a55e4b5bbd", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-97f40587739808e6", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 src/agentcage/backends/vm.py:230"}, "properties": {"repobilityId": "0cde30df59f2d205", "scanner": "scanner-primary", "fingerprint": "97f40587739808e6", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-2c54106dd3c88e40", "level": "none", "message": {"text": "Commented-code block (7 lines) in src/agentcage/backends/container.py:167"}, "properties": {"repobilityId": "cea4247dc58941b1", "scanner": "scanner-primary", "fingerprint": "2c54106dd3c88e40", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-1ecc09cc1856c58e", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 src/agentcage/lima/instance.py:25"}, "properties": {"repobilityId": "9a1cdce269b8f98b", "scanner": "scanner-primary", "fingerprint": "1ecc09cc1856c58e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-fc70f7e577e94656", "level": "none", "message": {"text": "Commented-code block (6 lines) in src/agentcage/lima/provisioning.py:106"}, "properties": {"repobilityId": "e59cc3d8c168ce7d", "scanner": "scanner-primary", "fingerprint": "fc70f7e577e94656", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-437f5bffee7570cf", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/agentcage/apple_container/cli.py:59"}, "properties": {"repobilityId": "13a2100ec1021e62", "scanner": "scanner-primary", "fingerprint": "437f5bffee7570cf", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-8818ef48970dfe3b", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 src/agentcage/apple_container/cli.py:52"}, "properties": {"repobilityId": "6678b266e1f893f3", "scanner": "scanner-primary", "fingerprint": "8818ef48970dfe3b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-17da2c1fb984b926", "level": "none", "message": {"text": "Commented-code block (6 lines) in src/agentcage/apple_container/wrapper.py:159"}, "properties": {"repobilityId": "f9564a2390e50933", "scanner": "scanner-primary", "fingerprint": "17da2c1fb984b926", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "48a492a61631415b", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "74b22311682b8de6", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "47d7b00a13a2a51e", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-49c98f7cedd9c977", "level": "note", "message": {"text": "Near-duplicate function bodies in 4 places"}, "properties": {"repobilityId": "94f421662e3975f8", "scanner": "scanner-primary", "fingerprint": "49c98f7cedd9c977", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-49c98f7cedd9c977", "level": "note", "message": {"text": "Near-duplicate function bodies in 4 places"}, "properties": {"repobilityId": "a4e30a4062561288", "scanner": "scanner-primary", "fingerprint": "49c98f7cedd9c977", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "adeaa4c10b02bd88", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-02525d39071dd2c7", "level": "note", "message": {"text": "Near-duplicate function bodies in 5 places"}, "properties": {"repobilityId": "a3d427b8efa135b9", "scanner": "scanner-primary", "fingerprint": "02525d39071dd2c7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-02525d39071dd2c7", "level": "note", "message": {"text": "Near-duplicate function bodies in 5 places"}, "properties": {"repobilityId": "8fe4d8c2dbacf85c", "scanner": "scanner-primary", "fingerprint": "02525d39071dd2c7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-02525d39071dd2c7", "level": "note", "message": {"text": "Near-duplicate function bodies in 5 places"}, "properties": {"repobilityId": "390c646ad5187154", "scanner": "scanner-primary", "fingerprint": "02525d39071dd2c7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "41ad38b691156b6f", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-49c98f7cedd9c977", "level": "note", "message": {"text": "Near-duplicate function bodies in 4 places"}, "properties": {"repobilityId": "0e36c0345442881e", "scanner": "scanner-primary", "fingerprint": "49c98f7cedd9c977", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "9874ff6555c75655", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}]}]}