{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-79087982f0019c59", "name": "Possibly dead Python function: read_da_tools_version", "shortDescription": {"text": "Possibly dead Python function: read_da_tools_version"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4197fce331397ff8", "name": "Possibly dead Python function: add_config_dir_arg", "shortDescription": {"text": "Possibly dead Python function: add_config_dir_arg"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-57825674da2aa319", "name": "Possibly dead Python function: add_json_arg", "shortDescription": {"text": "Possibly dead Python function: add_json_arg"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5d6203f23f4d1dab", "name": "Possibly dead Python function: add_ci_arg", "shortDescription": {"text": "Possibly dead Python function: add_ci_arg"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-915c77b3422a9627", "name": "Possibly dead Python function: add_prometheus_arg", "shortDescription": {"text": "Possibly dead Python function: add_prometheus_arg"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cb310b36aec1fef9", "name": "Possibly dead Python function: query_prometheus_instant", "shortDescription": {"text": "Possibly dead Python function: query_prometheus_instant"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a107f6f5b4b29f7f", "name": "Possibly dead Python function: prompt_choice", "shortDescription": {"text": "Possibly dead Python function: prompt_choice"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-97a8dc8ac9091844", "name": "Possibly dead Python function: git_log", "shortDescription": {"text": "Possibly dead Python function: git_log"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-763a39232f84daf7", "name": "Possibly dead Python function: render_configmap", "shortDescription": {"text": "Possibly dead Python function: render_configmap"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-02b777330edb04cb", "name": "Possibly dead Python function: known_recipes", "shortDescription": {"text": "Possibly dead Python function: known_recipes"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b53b58dd224e96df", "name": "Possibly dead Python function: count_recipes_per_tenant", "shortDescription": {"text": "Possibly dead Python function: count_recipes_per_tenant"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e1bfc8c76c7bc8a9", "name": "Stray `console.log` in TS/JS \u2014 tests/e2e/operator-setup-wizard.spec.ts:244", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 tests/e2e/operator-setup-wizard.spec.ts:244"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ded9db059181dab2", "name": "`truncate` class without `title=` for hover reveal \u2014 tools/portal/src/interactive/tools/health-dashboard.jsx:156", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 tools/portal/src/interactive/tools/health-dashboard.jsx:156"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-20c104edc37332a8", "name": "`truncate` class without `title=` for hover reveal \u2014 tools/portal/src/interactive/tools/threshold-heatmap.jsx:359", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 tools/portal/src/interactive/tools/threshold-heatmap.jsx:359"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-6d05dd0dea9c579c", "name": "`truncate` class without `title=` for hover reveal \u2014 tools/portal/src/interactive/tools/alert-simulator.jsx:162", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 tools/portal/src/interactive/tools/alert-simulator.jsx:162"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f8635f1673aa314f", "name": "`truncate` class without `title=` for hover reveal \u2014 tools/portal/src/interactive/tools/promql-tester.jsx:208", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 tools/portal/src/interactive/tools/promql-tester.jsx:208"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e5f1369f30e9e36c", "name": "Icon-only button without accessible name \u2014 tools/portal/src/interactive/tools/tenant-manager/components/CustomAlertsModa", "shortDescription": {"text": "Icon-only button without accessible name \u2014 tools/portal/src/interactive/tools/tenant-manager/components/CustomAlertsModal.jsx:185"}, "fullDescription": {"text": "A `<button>` whose only child is a single glyph or symbol needs `title=` or `aria-label=` so screen readers (and tooltips on hover) work.\n\nWhy: P3 in CHECKLIST.md \u2014 icon-only buttons skipped a title.\nRule id: fq.button.no-label"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d97286bc9f396c36", "name": "Privileged port 14 in use", "shortDescription": {"text": "Privileged port 14 in use"}, "fullDescription": {"text": "Port 14 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ca8effafd73bbc1f", "name": "Privileged port 30 in use", "shortDescription": {"text": "Privileged port 30 in use"}, "fullDescription": {"text": "Port 30 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-97f04defc0c6d5f1", "name": "Privileged port 10 in use", "shortDescription": {"text": "Privileged port 10 in use"}, "fullDescription": {"text": "Port 10 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6e731584ba22827d", "name": "Privileged port 9 in use", "shortDescription": {"text": "Privileged port 9 in use"}, "fullDescription": {"text": "Port 9 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5699f818c6be9b89", "name": "Privileged port 17 in use", "shortDescription": {"text": "Privileged port 17 in use"}, "fullDescription": {"text": "Port 17 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cefb90b797224b60", "name": "Privileged port 2 in use", "shortDescription": {"text": "Privileged port 2 in use"}, "fullDescription": {"text": "Port 2 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-669bdab69903a1b7", "name": "Privileged port 4 in use", "shortDescription": {"text": "Privileged port 4 in use"}, "fullDescription": {"text": "Port 4 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b730d760f66c0830", "name": "Privileged port 15 in use", "shortDescription": {"text": "Privileged port 15 in use"}, "fullDescription": {"text": "Port 15 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d9331c94a959b453", "name": "Privileged port 6 in use", "shortDescription": {"text": "Privileged port 6 in use"}, "fullDescription": {"text": "Port 6 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cb7580735043953d", "name": "Privileged port 12 in use", "shortDescription": {"text": "Privileged port 12 in use"}, "fullDescription": {"text": "Port 12 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d329b6da20a38709", "name": "Privileged port 70 in use", "shortDescription": {"text": "Privileged port 70 in use"}, "fullDescription": {"text": "Port 70 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fa338f5242af22c9", "name": "Privileged port 10 in use", "shortDescription": {"text": "Privileged port 10 in use"}, "fullDescription": {"text": "Port 10 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-520b9e048c50aa1a", "name": "Privileged port 11 in use", "shortDescription": {"text": "Privileged port 11 in use"}, "fullDescription": {"text": "Port 11 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-115df8cd338a2524", "name": "Privileged port 12 in use", "shortDescription": {"text": "Privileged port 12 in use"}, "fullDescription": {"text": "Port 12 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e5f1d432004ef39b", "name": "Privileged port 13 in use", "shortDescription": {"text": "Privileged port 13 in use"}, "fullDescription": {"text": "Port 13 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-da306cf27737ed5d", "name": "Privileged port 14 in use", "shortDescription": {"text": "Privileged port 14 in use"}, "fullDescription": {"text": "Port 14 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ecb7a81ae16732a6", "name": "Privileged port 15 in use", "shortDescription": {"text": "Privileged port 15 in use"}, "fullDescription": {"text": "Port 15 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8c1eb5006b6ad913", "name": "Privileged port 16 in use", "shortDescription": {"text": "Privileged port 16 in use"}, "fullDescription": {"text": "Port 16 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fb9c440b6b5894f8", "name": "Privileged port 17 in use", "shortDescription": {"text": "Privileged port 17 in use"}, "fullDescription": {"text": "Port 17 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-de7a548cc9c0a1c5", "name": "Privileged port 18 in use", "shortDescription": {"text": "Privileged port 18 in use"}, "fullDescription": {"text": "Port 18 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-db2e99fc2c228d34", "name": "Privileged port 19 in use", "shortDescription": {"text": "Privileged port 19 in use"}, "fullDescription": {"text": "Port 19 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1c5d864882468bdd", "name": "Privileged port 20 in use", "shortDescription": {"text": "Privileged port 20 in use"}, "fullDescription": {"text": "Port 20 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-593d623aa07c2f18", "name": "Privileged port 21 in use", "shortDescription": {"text": "Privileged port 21 in use"}, "fullDescription": {"text": "Port 21 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-40cb743e0fd0c7f5", "name": "Privileged port 23 in use", "shortDescription": {"text": "Privileged port 23 in use"}, "fullDescription": {"text": "Port 23 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6dbd0204a9c3a4a9", "name": "Privileged port 24 in use", "shortDescription": {"text": "Privileged port 24 in use"}, "fullDescription": {"text": "Port 24 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a0a626bcb445b677", "name": "Privileged port 26 in use", "shortDescription": {"text": "Privileged port 26 in use"}, "fullDescription": {"text": "Port 26 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7f3afff0f6e332ae", "name": "Privileged port 27 in use", "shortDescription": {"text": "Privileged port 27 in use"}, "fullDescription": {"text": "Port 27 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-187b19dd225560b6", "name": "Privileged port 28 in use", "shortDescription": {"text": "Privileged port 28 in use"}, "fullDescription": {"text": "Port 28 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7bf1807e65a20d56", "name": "Privileged port 29 in use", "shortDescription": {"text": "Privileged port 29 in use"}, "fullDescription": {"text": "Port 29 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-999d3554b971181b", "name": "Privileged port 30 in use", "shortDescription": {"text": "Privileged port 30 in use"}, "fullDescription": {"text": "Port 30 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f1da766d534c372c", "name": "Privileged port 31 in use", "shortDescription": {"text": "Privileged port 31 in use"}, "fullDescription": {"text": "Port 31 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-67741a2c921ae63b", "name": "Privileged port 32 in use", "shortDescription": {"text": "Privileged port 32 in use"}, "fullDescription": {"text": "Port 32 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ea8e737e2fd5ab71", "name": "Privileged port 33 in use", "shortDescription": {"text": "Privileged port 33 in use"}, "fullDescription": {"text": "Port 33 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-41ce51608316ae40", "name": "Privileged port 34 in use", "shortDescription": {"text": "Privileged port 34 in use"}, "fullDescription": {"text": "Port 34 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ed8119e014ff12da", "name": "Privileged port 35 in use", "shortDescription": {"text": "Privileged port 35 in use"}, "fullDescription": {"text": "Port 35 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-373dce1a1115645a", "name": "Privileged port 36 in use", "shortDescription": {"text": "Privileged port 36 in use"}, "fullDescription": {"text": "Port 36 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b1bafb48fbd666f8", "name": "Privileged port 37 in use", "shortDescription": {"text": "Privileged port 37 in use"}, "fullDescription": {"text": "Port 37 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c7f1353acfb448fc", "name": "Privileged port 38 in use", "shortDescription": {"text": "Privileged port 38 in use"}, "fullDescription": {"text": "Port 38 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-45ee60c01377bd2f", "name": "Privileged port 39 in use", "shortDescription": {"text": "Privileged port 39 in use"}, "fullDescription": {"text": "Port 39 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cb11c8eba1a3d468", "name": "Privileged port 40 in use", "shortDescription": {"text": "Privileged port 40 in use"}, "fullDescription": {"text": "Port 40 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-024a0601e21c5bdf", "name": "Privileged port 41 in use", "shortDescription": {"text": "Privileged port 41 in use"}, "fullDescription": {"text": "Port 41 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-53a042138546f2fd", "name": "Privileged port 42 in use", "shortDescription": {"text": "Privileged port 42 in use"}, "fullDescription": {"text": "Port 42 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a6f6b14c40b9978f", "name": "Privileged port 43 in use", "shortDescription": {"text": "Privileged port 43 in use"}, "fullDescription": {"text": "Port 43 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e5c385b054d7941f", "name": "Privileged port 44 in use", "shortDescription": {"text": "Privileged port 44 in use"}, "fullDescription": {"text": "Port 44 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2a8cb5461855dd05", "name": "Privileged port 45 in use", "shortDescription": {"text": "Privileged port 45 in use"}, "fullDescription": {"text": "Port 45 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4702fa69e7c522dc", "name": "Privileged port 46 in use", "shortDescription": {"text": "Privileged port 46 in use"}, "fullDescription": {"text": "Port 46 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9d27338c8215dc0a", "name": "Privileged port 47 in use", "shortDescription": {"text": "Privileged port 47 in use"}, "fullDescription": {"text": "Port 47 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c11837ae7e7295e1", "name": "Privileged port 48 in use", "shortDescription": {"text": "Privileged port 48 in use"}, "fullDescription": {"text": "Port 48 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ebf95e854a7cf25b", "name": "Privileged port 49 in use", "shortDescription": {"text": "Privileged port 49 in use"}, "fullDescription": {"text": "Port 49 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-274c811a6f825026", "name": "Privileged port 50 in use", "shortDescription": {"text": "Privileged port 50 in use"}, "fullDescription": {"text": "Port 50 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-88c1864bba193f3a", "name": "Privileged port 51 in use", "shortDescription": {"text": "Privileged port 51 in use"}, "fullDescription": {"text": "Port 51 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-075f0a5d7f644661", "name": "Privileged port 52 in use", "shortDescription": {"text": "Privileged port 52 in use"}, "fullDescription": {"text": "Port 52 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e83181bec7350a12", "name": "Privileged port 54 in use", "shortDescription": {"text": "Privileged port 54 in use"}, "fullDescription": {"text": "Port 54 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-502cf572324a8c90", "name": "Privileged port 55 in use", "shortDescription": {"text": "Privileged port 55 in use"}, "fullDescription": {"text": "Port 55 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8530701dde33526f", "name": "Privileged port 56 in use", "shortDescription": {"text": "Privileged port 56 in use"}, "fullDescription": {"text": "Port 56 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0d9939b357ac7722", "name": "Privileged port 57 in use", "shortDescription": {"text": "Privileged port 57 in use"}, "fullDescription": {"text": "Port 57 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-93c62e4f2bd7fb5a", "name": "Privileged port 58 in use", "shortDescription": {"text": "Privileged port 58 in use"}, "fullDescription": {"text": "Port 58 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-65eb1fcb19a2754b", "name": "Privileged port 59 in use", "shortDescription": {"text": "Privileged port 59 in use"}, "fullDescription": {"text": "Port 59 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2e4335a6ca8c2e06", "name": "Privileged port 233 in use", "shortDescription": {"text": "Privileged port 233 in use"}, "fullDescription": {"text": "Port 233 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-958e349c263b31bb", "name": "Dockerfile runs as root: tests/e2e-bench/driver/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tests/e2e-bench/driver/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7e815bcb57f51fbc", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.13.13-alpine3.22", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.13.13-alpine3.22"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cef5ec45225d1507", "name": "Dockerfile runs as root: tests/e2e-bench/receiver/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: tests/e2e-bench/receiver/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5fd26c59fae8b962", "name": "Docker base image is tag-pinned but not digest-pinned: golang:1.26.3-alpine3.22", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: golang:1.26.3-alpine3.22"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a9824882ff9e3624", "name": "Docker base image is tag-pinned but not digest-pinned: gcr.io/distroless/static-debian12:nonroot", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: gcr.io/distroless/static-debian12:nonroot"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2f7b8f3e071a6559", "name": "Docker base image is tag-pinned but not digest-pinned: golang:1.26.4-alpine3.22", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: golang:1.26.4-alpine3.22"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-23de723bf7981331", "name": "Docker base image is tag-pinned but not digest-pinned: alpine:3.22", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: alpine:3.22"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0e95562a02eee792", "name": "Dockerfile runs as root: components/threshold-exporter/app/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: components/threshold-exporter/app/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3eb38f2e72b86236", "name": "Docker base image is tag-pinned but not digest-pinned: golang:1.26.4-alpine3.22", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: golang:1.26.4-alpine3.22"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9814e7bd8faae909", "name": "Docker base image is tag-pinned but not digest-pinned: gcr.io/distroless/static-debian12:nonroot", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: gcr.io/distroless/static-debian12:nonroot"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-08c7a4990508f722", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.13.13-alpine3.22", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.13.13-alpine3.22"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e4932324eb3145e0", "name": "Dockerfile runs as root: components/da-portal/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: components/da-portal/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d7f78a181a66b300", "name": "Docker base image is tag-pinned but not digest-pinned: nginx:1.30-alpine3.23", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: nginx:1.30-alpine3.23"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-95b88b2aa678f318", "name": "Docker base image is tag-pinned but not digest-pinned: alpine:3.23.4", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: alpine:3.23.4"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5aa9844e06e1f4d9", "name": "Insecure pattern 'subprocess_shell_true' in Makefile:779", "shortDescription": {"text": "Insecure pattern 'subprocess_shell_true' in Makefile:779"}, "fullDescription": {"text": "Found a known-risky pattern (subprocess_shell_true). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7b9d7840defc7102", "name": "Insecure pattern 'document_write' in docs/assets/jsx-loader.html:56", "shortDescription": {"text": "Insecure pattern 'document_write' in docs/assets/jsx-loader.html:56"}, "fullDescription": {"text": "Found a known-risky pattern (document_write). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8cda487d85c88690", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/assets/jsx-loader.html:595", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/assets/jsx-loader.html:595"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-61b7143971521421", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/interactive/index.html:1097", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/interactive/index.html:1097"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-94f7fae0c739b154", "name": "Possible secret in scripts/run_load.sh", "shortDescription": {"text": "Possible secret in scripts/run_load.sh"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-6b047c346157f086", "name": "Insecure pattern 'cors_wildcard' in components/tenant-api/internal/ws/hub.go:242", "shortDescription": {"text": "Insecure pattern 'cors_wildcard' in components/tenant-api/internal/ws/hub.go:242"}, "fullDescription": {"text": "Found a known-risky pattern (cors_wildcard). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9e4a3df667f07d12", "name": "Insecure pattern 'eval_used' in components/threshold-exporter/app/pkg/config/custom_alert.go:76", "shortDescription": {"text": "Insecure pattern 'eval_used' in components/threshold-exporter/app/pkg/config/custom_alert.go:76"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ba71d1ce87e11925", "name": "Possible secret in tools/portal/src/interactive/tools/operator-setup-wizard/utils/generators.js", "shortDescription": {"text": "Possible secret in tools/portal/src/interactive/tools/operator-setup-wizard/utils/generators.js"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-a04653be0be368c8", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v6 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6b8699f202c36554", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/cache@v5 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fa34e21db3669635", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2e000242f6dfa599", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v6 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8e54309f597bbeef", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v6 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-75140d7076f32b51", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v6 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f8cdfffd70600cb1", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v6 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-414a36161613e49f", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v6 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b0b19affe0a45d72", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f1cfa257f575bfef", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v6 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7e07d5143de8bdce", "name": "pull_request_target workflow appears to check out untrusted PR code", "shortDescription": {"text": "pull_request_target workflow appears to check out untrusted PR code"}, "fullDescription": {"text": "pull_request_target runs with base-repo privileges. Checking out PR head code in that context can expose repository tokens or secrets to attacker-controlled code."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e2d0519635166268", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "docker/login-action@v3 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7dc7c1e428a24a89", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bfca6cfa14ed275e", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v6 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-27924aa79fa4a517", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v6 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-13809ba2d1451d5e", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v6 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a2cd7a476c513f05", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "docker/setup-buildx-action@v3 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7bf3d0101b76536d", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v6 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-274ba001632db72c", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v6 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-07d3f69cebb78389", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/github-script@v9 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fa7db45bf83654be", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v6 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7cdd4b3d484f530e", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v6 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-12522bf27bea173c", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v6 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d6cef86a9c9ebc4d", "name": "pull_request_target workflow appears to check out untrusted PR code", "shortDescription": {"text": "pull_request_target workflow appears to check out untrusted PR code"}, "fullDescription": {"text": "pull_request_target runs with base-repo privileges. Checking out PR head code in that context can expose repository tokens or secrets to attacker-controlled code."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "high", "confidence": 1.0}}, {"id": "scanner-7988b45f7c5c357d", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v6 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f8cb54459c917a8e", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v6 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7fafab8369b9d785", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v6 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c54b29ab5f37069a", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "marocchino/sticky-pull-request-comment@v2 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-afeb80bcd548a443", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v6 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a5b6ae3aeb4ef85e", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v6 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-91a03197e6ce0b40", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v6 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-62127913f9c47b02", "name": "Very large file: tests/ops/test_generate_alertmanager_routes.py (1849 lines)", "shortDescription": {"text": "Very large file: tests/ops/test_generate_alertmanager_routes.py (1849 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3f4f8e70df5b5f20", "name": "Very large file: tests/ops/test_init_project.py (1496 lines)", "shortDescription": {"text": "Very large file: tests/ops/test_init_project.py (1496 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5d13805cc352e89a", "name": "Very large file: tests/shared/test_property_tools.py (2077 lines)", "shortDescription": {"text": "Very large file: tests/shared/test_property_tools.py (2077 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-717accd0f6b3c5d6", "name": "Very large file: scripts/tools/ops/migrate_rule.py (1240 lines)", "shortDescription": {"text": "Very large file: scripts/tools/ops/migrate_rule.py (1240 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ec552ac1c00e27ac", "name": "Very large file: scripts/tools/ops/init_project.py (1460 lines)", "shortDescription": {"text": "Very large file: scripts/tools/ops/init_project.py (1460 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3ec87b5e648ad3ec", "name": "Very large file: scripts/tools/ops/scaffold_tenant.py (1166 lines)", "shortDescription": {"text": "Very large file: scripts/tools/ops/scaffold_tenant.py (1166 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-42bd221e6427a99c", "name": "Very large file: scripts/tools/dx/pr_preflight.py (1394 lines)", "shortDescription": {"text": "Very large file: scripts/tools/dx/pr_preflight.py (1394 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4e0310872dd42c75", "name": "Very large file: scripts/tools/dx/bump_docs.py (1590 lines)", "shortDescription": {"text": "Very large file: scripts/tools/dx/bump_docs.py (1590 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c0de672e95dfedb7", "name": "Very large file: components/tenant-api/docs/docs.go (2175 lines)", "shortDescription": {"text": "Very large file: components/tenant-api/docs/docs.go (2175 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-99ab1557271d72be", "name": "63 TODO/FIXME markers", "shortDescription": {"text": "63 TODO/FIXME markers"}, "fullDescription": {"text": "High count of TODO/FIXME/HACK markers \u2014 track them as issues so they're not forgotten."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3ab5d313dda8e5f9", "name": "Debug logging residue appears in source files", "shortDescription": {"text": "Debug logging residue appears in source files"}, "fullDescription": {"text": "Found 2489 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-72b2a6250083a784", "name": "Placeholder or mock-heavy implementation detected", "shortDescription": {"text": "Placeholder or mock-heavy implementation detected"}, "fullDescription": {"text": "Found 234 placeholder/mock markers across 68 source files. This often means the repo looks complete while core flows still use generated scaffolding or fake data."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2d0c7b7ab8f8aacf", "name": "Critical user flow still appears backed by mock or placeholder data", "shortDescription": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "fullDescription": {"text": "A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ea8f3013f588db25", "name": "Shallow git history limits provenance confidence", "shortDescription": {"text": "Shallow git history limits provenance confidence"}, "fullDescription": {"text": "The repository is a shallow clone. Origin/evolution analysis cannot distinguish fresh generation, imported legacy code, or long-lived human code with high confidence."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8424db9c75e04ba4", "name": "Very short observed git history", "shortDescription": {"text": "Very short observed git history"}, "fullDescription": {"text": "The repo has multiple source files but two or fewer visible commits. This is not a failure by itself, but it lowers confidence in evolution-based diagnosis."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-37ae90f0b05d4d9c", "name": "Commented-code block (7 lines) in tests/conftest.py:41", "shortDescription": {"text": "Commented-code block (7 lines) in tests/conftest.py:41"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-cd7bd94f7d30654a", "name": "Commented-code block (6 lines) in tests/ops/test_lint_custom_rules.py:379", "shortDescription": {"text": "Commented-code block (6 lines) in tests/ops/test_lint_custom_rules.py:379"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-0ae5abb6302388b3", "name": "Legacy-named symbol `patch_legacy` in tests/ops/test_patch_config.py:9", "shortDescription": {"text": "Legacy-named symbol `patch_legacy` in tests/ops/test_patch_config.py:9"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e089a449e252832f", "name": "Commented-code block (5 lines) in tests/ops/test_benchmark.py:21", "shortDescription": {"text": "Commented-code block (5 lines) in tests/ops/test_benchmark.py:21"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ac9ab679af4aaf4a", "name": "Legacy-named symbol `script_copy` in tests/ops/test_git_check_lock.py:90", "shortDescription": {"text": "Legacy-named symbol `script_copy` in tests/ops/test_git_check_lock.py:90"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-734e9aef9a2260e0", "name": "Commented-code block (5 lines) in tests/ops/test_git_check_lock.py:51", "shortDescription": {"text": "Commented-code block (5 lines) in tests/ops/test_git_check_lock.py:51"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ff9c532d429baaf3", "name": "Legacy-named symbol `test_operator_generate_v2` in tests/ops/test_operator_generate_v2.py:1", "shortDescription": {"text": "Legacy-named symbol `test_operator_generate_v2` in tests/ops/test_operator_generate_v2.py:1"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e9132e3cd288e432", "name": "Commented-code block (6 lines) in tests/ops/test_property_based.py:492", "shortDescription": {"text": "Commented-code block (6 lines) in tests/ops/test_property_based.py:492"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2f9e39e888288ee1", "name": "Commented-code block (7 lines) in tests/shared/_go_mutation_pilot.py:161", "shortDescription": {"text": "Commented-code block (7 lines) in tests/shared/_go_mutation_pilot.py:161"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7458752f8a88220c", "name": "Legacy-named symbol `exec_time_ms_legacy` in tests/shared/test_helm_chart_log_aggregation.py:427", "shortDescription": {"text": "Legacy-named symbol `exec_time_ms_legacy` in tests/shared/test_helm_chart_log_aggregation.py:427"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-160dba5ecc9fe11d", "name": "Commented-code block (6 lines) in tests/shared/_mutation_pilot.py:417", "shortDescription": {"text": "Commented-code block (6 lines) in tests/shared/_mutation_pilot.py:417"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-6ca95857de6bba1e", "name": "Commented-code block (8 lines) in tests/shared/test_tool_exit_codes.py:62", "shortDescription": {"text": "Commented-code block (8 lines) in tests/shared/test_tool_exit_codes.py:62"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-316994ad85b86af5", "name": "Commented-code block (5 lines) in tests/shared/test_property_tools.py:160", "shortDescription": {"text": "Commented-code block (5 lines) in tests/shared/test_property_tools.py:160"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7767d5556eb1c9b6", "name": "Commented-code block (5 lines) in tests/dx/test_scaffold_jsx_dep.py:82", "shortDescription": {"text": "Commented-code block (5 lines) in tests/dx/test_scaffold_jsx_dep.py:82"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-81f98c9db7ae0acc", "name": "Commented-code block (6 lines) in tests/dx/test_analyze_bench_history.py:466", "shortDescription": {"text": "Commented-code block (6 lines) in tests/dx/test_analyze_bench_history.py:466"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-be7451ed9b258c9f", "name": "Legacy-named symbol `generate_synthetic_v2` in tests/dx/test_generate_tenant_fixture.py:104", "shortDescription": {"text": "Legacy-named symbol `generate_synthetic_v2` in tests/dx/test_generate_tenant_fixture.py:104"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ecbbe1458d0fa26f", "name": "Commented-code block (6 lines) in tests/dx/test_generate_tenant_fixture.py:200", "shortDescription": {"text": "Commented-code block (6 lines) in tests/dx/test_generate_tenant_fixture.py:200"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c8434521473c3221", "name": "Commented-code block (5 lines) in tests/dx/test_gen_recipe_status_json.py:47", "shortDescription": {"text": "Commented-code block (5 lines) in tests/dx/test_gen_recipe_status_json.py:47"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-47dcfc31a884d71d", "name": "Commented-code block (5 lines) in tests/dx/test_preflight_pass_gate.py:25", "shortDescription": {"text": "Commented-code block (5 lines) in tests/dx/test_preflight_pass_gate.py:25"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ea89bfdf20744f14", "name": "Commented-code block (5 lines) in tests/dx/test_recover_index.py:17", "shortDescription": {"text": "Commented-code block (5 lines) in tests/dx/test_recover_index.py:17"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-6a19c270db4f1f20", "name": "Commented-code block (5 lines) in tests/dx/test_sync_schema.py:23", "shortDescription": {"text": "Commented-code block (5 lines) in tests/dx/test_sync_schema.py:23"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d0ef686081bcd175", "name": "Commented-code block (5 lines) in tests/dx/test_preflight_msg_validator.py:183", "shortDescription": {"text": "Commented-code block (5 lines) in tests/dx/test_preflight_msg_validator.py:183"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b4d17b27eebbcaa6", "name": "Legacy-named symbol `test_replace_is_used_not_copy` in tests/dx/test_atomic_write.py:162", "shortDescription": {"text": "Legacy-named symbol `test_replace_is_used_not_copy` in tests/dx/test_atomic_write.py:162"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-28711bea81ed64f2", "name": "Commented-code block (7 lines) in tests/dx/test_bat_label_integrity.py:158", "shortDescription": {"text": "Commented-code block (7 lines) in tests/dx/test_bat_label_integrity.py:158"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8303a9a3e6a79974", "name": "Commented-code block (5 lines) in tests/dx/test_preflight_marker.py:24", "shortDescription": {"text": "Commented-code block (5 lines) in tests/dx/test_preflight_marker.py:24"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-282f65e8b1d4faa1", "name": "Commented-code block (7 lines) in tests/dx/test_verify_release.py:30", "shortDescription": {"text": "Commented-code block (7 lines) in tests/dx/test_verify_release.py:30"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e4471991d1c5ee5a", "name": "Commented-code block (11 lines) in tests/e2e-bench/aggregate.py:173", "shortDescription": {"text": "Commented-code block (11 lines) in tests/e2e-bench/aggregate.py:173"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d78f62cae4bd033c", "name": "Commented-code block (5 lines) in tests/e2e-bench/driver/driver.py:321", "shortDescription": {"text": "Commented-code block (5 lines) in tests/e2e-bench/driver/driver.py:321"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-406126f3df1fc678", "name": "Commented-code block (5 lines) in tests/contract/run_contract_tests.py:145", "shortDescription": {"text": "Commented-code block (5 lines) in tests/contract/run_contract_tests.py:145"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-5f4a35e83a30391a", "name": "Commented-code block (6 lines) in tests/lint/test_check_iac_vibe_rules.py:24", "shortDescription": {"text": "Commented-code block (6 lines) in tests/lint/test_check_iac_vibe_rules.py:24"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b9ddcf5132aa6d04", "name": "Legacy-named symbol `another_legacy` in tests/lint/test_check_metric_dictionary.py:62", "shortDescription": {"text": "Legacy-named symbol `another_legacy` in tests/lint/test_check_metric_dictionary.py:62"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-afcc9741182e9260", "name": "Legacy-named symbol `test_root_readme_pair_legacy` in tests/lint/test_check_bilingual_structure.py:404", "shortDescription": {"text": "Legacy-named symbol `test_root_readme_pair_legacy` in tests/lint/test_check_bilingual_structure.py:404"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-256ef6004741dc04", "name": "Commented-code block (5 lines) in tests/lint/test_check_bilingual_structure.py:291", "shortDescription": {"text": "Commented-code block (5 lines) in tests/lint/test_check_bilingual_structure.py:291"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-66379649abdc8994", "name": "Legacy-named symbol `test_snapshot_v2` in tests/lint/test_snapshot_v2.py:2", "shortDescription": {"text": "Legacy-named symbol `test_snapshot_v2` in tests/lint/test_snapshot_v2.py:2"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ac29d530c86a78ee", "name": "Commented-code block (5 lines) in tests/lint/test_lint_jsx_babel_linecount.py:99", "shortDescription": {"text": "Commented-code block (5 lines) in tests/lint/test_lint_jsx_babel_linecount.py:99"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1e8b532ee71fc1d8", "name": "Commented-code block (6 lines) in tests/lint/test_check_jsx_i18n.py:309", "shortDescription": {"text": "Commented-code block (6 lines) in tests/lint/test_check_jsx_i18n.py:309"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8c66655b61352ac1", "name": "Commented-code block (6 lines) in tests/lint/test_check_codename_gate.py:357", "shortDescription": {"text": "Commented-code block (6 lines) in tests/lint/test_check_codename_gate.py:357"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-aa9fd0171711cf0a", "name": "Commented-code block (7 lines) in tests/e2e/threshold-heatmap.spec.ts:45", "shortDescription": {"text": "Commented-code block (7 lines) in tests/e2e/threshold-heatmap.spec.ts:45"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-36253e2f39570a21", "name": "Commented-code block (6 lines) in tests/e2e/playground.spec.ts:46", "shortDescription": {"text": "Commented-code block (6 lines) in tests/e2e/playground.spec.ts:46"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-fb3f8bff65a04d9f", "name": "Commented-code block (6 lines) in tests/e2e/cicd-setup-wizard.spec.ts:45", "shortDescription": {"text": "Commented-code block (6 lines) in tests/e2e/cicd-setup-wizard.spec.ts:45"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-0491fc4858a22bf6", "name": "Commented-code block (6 lines) in tests/e2e/master-onboarding.spec.ts:51", "shortDescription": {"text": "Commented-code block (6 lines) in tests/e2e/master-onboarding.spec.ts:51"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ec792055a51a7ab5", "name": "Commented-code block (8 lines) in tests/e2e/config-lint.spec.ts:45", "shortDescription": {"text": "Commented-code block (8 lines) in tests/e2e/config-lint.spec.ts:45"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-90f04d692a9b3f0f", "name": "Commented-code block (6 lines) in tests/e2e/tenant-manager.spec.ts:175", "shortDescription": {"text": "Commented-code block (6 lines) in tests/e2e/tenant-manager.spec.ts:175"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-da9ed85540bb47f3", "name": "Commented-code block (5 lines) in tests/e2e/portal-error-boundary.spec.ts:47", "shortDescription": {"text": "Commented-code block (5 lines) in tests/e2e/portal-error-boundary.spec.ts:47"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-cdbb35f54fa4aef8", "name": "Commented-code block (7 lines) in tests/e2e/rbac-setup-wizard.spec.ts:29", "shortDescription": {"text": "Commented-code block (7 lines) in tests/e2e/rbac-setup-wizard.spec.ts:29"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-4d7c6065b531eeeb", "name": "Commented-code block (5 lines) in tests/e2e/eslint.config.mjs:3", "shortDescription": {"text": "Commented-code block (5 lines) in tests/e2e/eslint.config.mjs:3"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-78294a3edcedf084", "name": "Commented-code block (6 lines) in tests/e2e/tenant-manager-deeplink.spec.ts:110", "shortDescription": {"text": "Commented-code block (6 lines) in tests/e2e/tenant-manager-deeplink.spec.ts:110"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-547655120e6183e5", "name": "Commented-code block (5 lines) in tests/e2e/saved-views.spec.ts:124", "shortDescription": {"text": "Commented-code block (5 lines) in tests/e2e/saved-views.spec.ts:124"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1e6889e568ce6c93", "name": "Commented-code block (7 lines) in tests/e2e/fixtures/portal-tool-smoke.ts:94", "shortDescription": {"text": "Commented-code block (7 lines) in tests/e2e/fixtures/portal-tool-smoke.ts:94"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-4775a8c601933821", "name": "Commented-code block (5 lines) in tests/federation-e2e/test_federation_e2e.py:72", "shortDescription": {"text": "Commented-code block (5 lines) in tests/federation-e2e/test_federation_e2e.py:72"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f87711c7cd9064e8", "name": "Commented-code block (8 lines) in scripts/ops/add_t_parallel.py:27", "shortDescription": {"text": "Commented-code block (8 lines) in scripts/ops/add_t_parallel.py:27"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c94c15e0610e8cec", "name": "Network/subprocess call without timeout or try/except \u2014 scripts/ops/dx_run.py:147", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 scripts/ops/dx_run.py:147"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b41e02d7daa7bfcb", "name": "Commented-code block (6 lines) in scripts/ops/route_metrics_through_field.py:50", "shortDescription": {"text": "Commented-code block (6 lines) in scripts/ops/route_metrics_through_field.py:50"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-18f151967b315859", "name": "Commented-code block (6 lines) in scripts/dx/generate_planning_index.py:85", "shortDescription": {"text": "Commented-code block (6 lines) in scripts/dx/generate_planning_index.py:85"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-de3ffbaf5a50f234", "name": "Commented-code block (7 lines) in scripts/dx/generate_adr_index.py:27", "shortDescription": {"text": "Commented-code block (7 lines) in scripts/dx/generate_adr_index.py:27"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-3a9247b4ff9c6e68", "name": "Commented-code block (9 lines) in scripts/session-guards/preflight_bash.py:58", "shortDescription": {"text": "Commented-code block (9 lines) in scripts/session-guards/preflight_bash.py:58"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-41bf1f6acc9a3d66", "name": "Commented-code block (5 lines) in scripts/tools/_lib_godispatch.py:55", "shortDescription": {"text": "Commented-code block (5 lines) in scripts/tools/_lib_godispatch.py:55"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-6889a8930bd5999b", "name": "Network/subprocess call without timeout or try/except \u2014 scripts/tools/_lib_godispatch.py:264", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 scripts/tools/_lib_godispatch.py:264"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-21336e61a28ff661", "name": "Commented-code block (6 lines) in scripts/tools/_lib_constants.py:70", "shortDescription": {"text": "Commented-code block (6 lines) in scripts/tools/_lib_constants.py:70"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ceebd67680366e62", "name": "Commented-code block (5 lines) in scripts/tools/ops/check_alert.py:87", "shortDescription": {"text": "Commented-code block (5 lines) in scripts/tools/ops/check_alert.py:87"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-38e9f3817fb2bd7b", "name": "Commented-code block (7 lines) in scripts/tools/ops/threshold_recommend.py:750", "shortDescription": {"text": "Commented-code block (7 lines) in scripts/tools/ops/threshold_recommend.py:750"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-347438eee987b478", "name": "Commented-code block (6 lines) in scripts/tools/ops/federation_keygen.py:180", "shortDescription": {"text": "Commented-code block (6 lines) in scripts/tools/ops/federation_keygen.py:180"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ba9d553018c20444", "name": "Commented-code block (11 lines) in scripts/tools/ops/lint_custom_rules.py:70", "shortDescription": {"text": "Commented-code block (11 lines) in scripts/tools/ops/lint_custom_rules.py:70"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-aa43f6b7d697b20b", "name": "Legacy-named symbol `has_legacy` in scripts/tools/ops/_grar_validate.py:145", "shortDescription": {"text": "Legacy-named symbol `has_legacy` in scripts/tools/ops/_grar_validate.py:145"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d5073bcc7372c625", "name": "Commented-code block (7 lines) in scripts/tools/ops/_grar_validate.py:91", "shortDescription": {"text": "Commented-code block (7 lines) in scripts/tools/ops/_grar_validate.py:91"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ddf949f30f910afa", "name": "Commented-code block (5 lines) in scripts/tools/ops/migrate_rule.py:757", "shortDescription": {"text": "Commented-code block (5 lines) in scripts/tools/ops/migrate_rule.py:757"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a70d951e54733074", "name": "Commented-code block (7 lines) in scripts/tools/ops/_grar_merge.py:130", "shortDescription": {"text": "Commented-code block (7 lines) in scripts/tools/ops/_grar_merge.py:130"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8177d602d52ebee0", "name": "Commented-code block (6 lines) in scripts/tools/ops/blast_radius.py:41", "shortDescription": {"text": "Commented-code block (6 lines) in scripts/tools/ops/blast_radius.py:41"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-43f745f8fcb9ab6f", "name": "Commented-code block (8 lines) in scripts/tools/ops/state_reconcile.py:71", "shortDescription": {"text": "Commented-code block (8 lines) in scripts/tools/ops/state_reconcile.py:71"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-126ce5974c41e853", "name": "Commented-code block (5 lines) in scripts/tools/ops/runtime_audit.py:198", "shortDescription": {"text": "Commented-code block (5 lines) in scripts/tools/ops/runtime_audit.py:198"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-87d4c62597e7faea", "name": "Commented-code block (8 lines) in scripts/tools/ops/init_project.py:726", "shortDescription": {"text": "Commented-code block (8 lines) in scripts/tools/ops/init_project.py:726"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c6c9f59a07055bed", "name": "Commented-code block (5 lines) in scripts/tools/ops/diagnose.py:354", "shortDescription": {"text": "Commented-code block (5 lines) in scripts/tools/ops/diagnose.py:354"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-98e3719dbbc5a89c", "name": "Legacy-named symbol `group_v1` in scripts/tools/ops/rule_pack_diff.py:310", "shortDescription": {"text": "Legacy-named symbol `group_v1` in scripts/tools/ops/rule_pack_diff.py:310"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2df7606cbfe514f0", "name": "Commented-code block (7 lines) in scripts/tools/ops/rule_pack_diff.py:273", "shortDescription": {"text": "Commented-code block (7 lines) in scripts/tools/ops/rule_pack_diff.py:273"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-213cd89d0970c774", "name": "Commented-code block (8 lines) in scripts/tools/ops/_grar_render.py:255", "shortDescription": {"text": "Commented-code block (8 lines) in scripts/tools/ops/_grar_render.py:255"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d792e7dda5211ef6", "name": "Legacy-named symbol `patch_legacy` in scripts/tools/ops/patch_config.py:58", "shortDescription": {"text": "Legacy-named symbol `patch_legacy` in scripts/tools/ops/patch_config.py:58"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ecb1e5e5d9ec56eb", "name": "Commented-code block (5 lines) in scripts/tools/ops/_observed_map_lib.py:262", "shortDescription": {"text": "Commented-code block (5 lines) in scripts/tools/ops/_observed_map_lib.py:262"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-09e08b8dabf0630e", "name": "Commented-code block (5 lines) in scripts/tools/ops/validate_migration.py:217", "shortDescription": {"text": "Commented-code block (5 lines) in scripts/tools/ops/validate_migration.py:217"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-737d18d44a0959c8", "name": "Commented-code block (8 lines) in scripts/tools/ops/baseline_discovery.py:297", "shortDescription": {"text": "Commented-code block (8 lines) in scripts/tools/ops/baseline_discovery.py:297"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c9f55354ee161201", "name": "Commented-code block (5 lines) in scripts/tools/ops/config_diff.py:38", "shortDescription": {"text": "Commented-code block (5 lines) in scripts/tools/ops/config_diff.py:38"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-6105b2e5951f1058", "name": "Commented-code block (10 lines) in scripts/tools/dx/tenant_verify.py:47", "shortDescription": {"text": "Commented-code block (10 lines) in scripts/tools/dx/tenant_verify.py:47"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-180c70fba9f1b860", "name": "Commented-code block (5 lines) in scripts/tools/dx/scaffold_lint.py:241", "shortDescription": {"text": "Commented-code block (5 lines) in scripts/tools/dx/scaffold_lint.py:241"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1b96ec192cb0bc51", "name": "Commented-code block (5 lines) in scripts/tools/dx/scan_component_health.py:64", "shortDescription": {"text": "Commented-code block (5 lines) in scripts/tools/dx/scan_component_health.py:64"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c9dcf3a2f42f2e80", "name": "Commented-code block (6 lines) in scripts/tools/dx/axe_lite_static.py:258", "shortDescription": {"text": "Commented-code block (6 lines) in scripts/tools/dx/axe_lite_static.py:258"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-956300b2d4f1ec9b", "name": "Commented-code block (7 lines) in scripts/tools/dx/analyze_bench_history.py:80", "shortDescription": {"text": "Commented-code block (7 lines) in scripts/tools/dx/analyze_bench_history.py:80"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-65264f58abb2da58", "name": "Network/subprocess call without timeout or try/except \u2014 scripts/tools/dx/analyze_bench_history.py:809", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 scripts/tools/dx/analyze_bench_history.py:809"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8904b2a420ab9601", "name": "Commented-code block (7 lines) in scripts/tools/dx/run_chaos_soak.py:97", "shortDescription": {"text": "Commented-code block (7 lines) in scripts/tools/dx/run_chaos_soak.py:97"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-92cf4fb4ca7049dc", "name": "Commented-code block (6 lines) in scripts/tools/dx/gen_recipe_status_json.py:88", "shortDescription": {"text": "Commented-code block (6 lines) in scripts/tools/dx/gen_recipe_status_json.py:88"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2539d71e67761323", "name": "Commented-code block (7 lines) in scripts/tools/dx/pr_preflight.py:37", "shortDescription": {"text": "Commented-code block (7 lines) in scripts/tools/dx/pr_preflight.py:37"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-9a514f86c156f806", "name": "Legacy-named symbol `generate_synthetic_v2` in scripts/tools/dx/generate_tenant_fixture.py:428", "shortDescription": {"text": "Legacy-named symbol `generate_synthetic_v2` in scripts/tools/dx/generate_tenant_fixture.py:428"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a2aa5e8332ec94b8", "name": "Commented-code block (8 lines) in scripts/tools/dx/generate_doc_map.py:98", "shortDescription": {"text": "Commented-code block (8 lines) in scripts/tools/dx/generate_doc_map.py:98"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-3410080817d2bb4d", "name": "Commented-code block (8 lines) in scripts/tools/dx/sync_schema.py:35", "shortDescription": {"text": "Commented-code block (8 lines) in scripts/tools/dx/sync_schema.py:35"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2c029de1db39fc35", "name": "Commented-code block (6 lines) in scripts/tools/dx/scaffold_jsx_dep.py:120", "shortDescription": {"text": "Commented-code block (6 lines) in scripts/tools/dx/scaffold_jsx_dep.py:120"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ca4562d4b35567ed", "name": "Commented-code block (7 lines) in scripts/tools/dx/diag_pr_ci.py:54", "shortDescription": {"text": "Commented-code block (7 lines) in scripts/tools/dx/diag_pr_ci.py:54"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b971d593b3674be5", "name": "Commented-code block (6 lines) in scripts/tools/dx/generate_rule_pack_readme.py:135", "shortDescription": {"text": "Commented-code block (6 lines) in scripts/tools/dx/generate_rule_pack_readme.py:135"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-5873a7b9b39b5dd5", "name": "Commented-code block (7 lines) in scripts/tools/dx/compile_custom_alerts.py:126", "shortDescription": {"text": "Commented-code block (7 lines) in scripts/tools/dx/compile_custom_alerts.py:126"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-40d3eca12266cbaa", "name": "Legacy-named symbol `unique_old` in scripts/tools/dx/bump_docs.py:1041", "shortDescription": {"text": "Legacy-named symbol `unique_old` in scripts/tools/dx/bump_docs.py:1041"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4557a954e93511ed", "name": "Commented-code block (9 lines) in scripts/tools/dx/bump_docs.py:535", "shortDescription": {"text": "Commented-code block (9 lines) in scripts/tools/dx/bump_docs.py:535"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e0981bb04a636deb", "name": "Commented-code block (7 lines) in scripts/tools/dx/describe_tenant.py:39", "shortDescription": {"text": "Commented-code block (7 lines) in scripts/tools/dx/describe_tenant.py:39"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a2c09526086a4482", "name": "Commented-code block (5 lines) in scripts/tools/dx/inject_related_docs.py:222", "shortDescription": {"text": "Commented-code block (5 lines) in scripts/tools/dx/inject_related_docs.py:222"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-844bad5a5a0144bd", "name": "Network/subprocess call without timeout or try/except \u2014 scripts/tools/dx/generate_tool_map.py:216", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 scripts/tools/dx/generate_tool_map.py:216"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e7d90cbed84a99a5", "name": "Commented-code block (5 lines) in scripts/tools/dx/analyze_tier1_fp_rate.py:184", "shortDescription": {"text": "Commented-code block (5 lines) in scripts/tools/dx/analyze_tier1_fp_rate.py:184"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1d28748a77e64353", "name": "Commented-code block (5 lines) in scripts/tools/dx/custom_alerts/shape.py:52", "shortDescription": {"text": "Commented-code block (5 lines) in scripts/tools/dx/custom_alerts/shape.py:52"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-729f61d7a432fb1a", "name": "Commented-code block (5 lines) in scripts/tools/dx/custom_alerts/recipes.py:27", "shortDescription": {"text": "Commented-code block (5 lines) in scripts/tools/dx/custom_alerts/recipes.py:27"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b1b75590a62dfe89", "name": "Commented-code block (8 lines) in scripts/tools/dx/custom_alerts/loader.py:32", "shortDescription": {"text": "Commented-code block (8 lines) in scripts/tools/dx/custom_alerts/loader.py:32"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-0591781e926c028c", "name": "Commented-code block (5 lines) in scripts/tools/lint/check_design_token_usage.py:63", "shortDescription": {"text": "Commented-code block (5 lines) in scripts/tools/lint/check_design_token_usage.py:63"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8c4549e2cc5cb42c", "name": "Commented-code block (6 lines) in scripts/tools/lint/validate_mermaid.py:31", "shortDescription": {"text": "Commented-code block (6 lines) in scripts/tools/lint/validate_mermaid.py:31"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1e4ebc13ce21689c", "name": "Network/subprocess call without timeout or try/except \u2014 scripts/tools/lint/validate_mermaid.py:375", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 scripts/tools/lint/validate_mermaid.py:375"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ea4131ca4b305193", "name": "Commented-code block (6 lines) in scripts/tools/lint/_version_patterns.py:168", "shortDescription": {"text": "Commented-code block (6 lines) in scripts/tools/lint/_version_patterns.py:168"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-5bbd07ff3dc1ed01", "name": "Commented-code block (8 lines) in scripts/tools/lint/_lint_helpers.py:51", "shortDescription": {"text": "Commented-code block (8 lines) in scripts/tools/lint/_lint_helpers.py:51"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-5248ee5c251e1aa5", "name": "Commented-code block (5 lines) in scripts/tools/lint/check_doc_k8s_refs.py:88", "shortDescription": {"text": "Commented-code block (5 lines) in scripts/tools/lint/check_doc_k8s_refs.py:88"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7b8fe830ff5d457c", "name": "Commented-code block (6 lines) in scripts/tools/lint/check_lint_toolchain_fit.py:64", "shortDescription": {"text": "Commented-code block (6 lines) in scripts/tools/lint/check_lint_toolchain_fit.py:64"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7f48fe512a5e3144", "name": "Commented-code block (5 lines) in scripts/tools/lint/check_playwright_rtl_drift.py:91", "shortDescription": {"text": "Commented-code block (5 lines) in scripts/tools/lint/check_playwright_rtl_drift.py:91"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-aa1e6ea30e3c13e4", "name": "Commented-code block (6 lines) in scripts/tools/lint/lint_jsx_babel.py:148", "shortDescription": {"text": "Commented-code block (6 lines) in scripts/tools/lint/lint_jsx_babel.py:148"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-aa1b2bec627b442f", "name": "Commented-code block (7 lines) in scripts/tools/lint/check_iac_vibe_rules.py:93", "shortDescription": {"text": "Commented-code block (7 lines) in scripts/tools/lint/check_iac_vibe_rules.py:93"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e3192de461fd8118", "name": "Commented-code block (5 lines) in scripts/tools/lint/check_dist_source_consistency.py:84", "shortDescription": {"text": "Commented-code block (5 lines) in scripts/tools/lint/check_dist_source_consistency.py:84"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-269a0237ef22892c", "name": "Commented-code block (5 lines) in scripts/tools/lint/check_codename_gate.py:110", "shortDescription": {"text": "Commented-code block (5 lines) in scripts/tools/lint/check_codename_gate.py:110"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-6f820bd019453590", "name": "Commented-code block (5 lines) in scripts/tools/lint/check_helm_values_secrets.py:148", "shortDescription": {"text": "Commented-code block (5 lines) in scripts/tools/lint/check_helm_values_secrets.py:148"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-48fa9473491f0a41", "name": "Commented-code block (5 lines) in scripts/tools/lint/check_window_x_no_fallback.py:99", "shortDescription": {"text": "Commented-code block (5 lines) in scripts/tools/lint/check_window_x_no_fallback.py:99"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-5d5ea488295f15c1", "name": "Commented-code block (5 lines) in scripts/tools/lint/check_property_coverage.py:251", "shortDescription": {"text": "Commented-code block (5 lines) in scripts/tools/lint/check_property_coverage.py:251"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-0bc7465df2e6cd29", "name": "Commented-code block (5 lines) in scripts/tools/lint/check_doc_datools_cmds.py:42", "shortDescription": {"text": "Commented-code block (5 lines) in scripts/tools/lint/check_doc_datools_cmds.py:42"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-acf0f868bbe6ce6b", "name": "Commented-code block (11 lines) in scripts/tools/lint/check_devrules_size.py:37", "shortDescription": {"text": "Commented-code block (11 lines) in scripts/tools/lint/check_devrules_size.py:37"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-af87ca363ad6349e", "name": "Commented-code block (9 lines) in scripts/tools/lint/check_jsx_i18n.py:187", "shortDescription": {"text": "Commented-code block (9 lines) in scripts/tools/lint/check_jsx_i18n.py:187"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2d59e22494fb190d", "name": "Network/subprocess call without timeout or try/except \u2014 scripts/tools/lint/check_open_encoding.py:118", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 scripts/tools/lint/check_open_encoding.py:118"}, "fullDescription": {"text": "`urllib.request.urlopen(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-79c54a474a84c8d1", "name": "Commented-code block (6 lines) in scripts/tools/lint/check_log_egress_policy.py:195", "shortDescription": {"text": "Commented-code block (6 lines) in scripts/tools/lint/check_log_egress_policy.py:195"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-22336f26dc58fec1", "name": "Commented-code block (6 lines) in scripts/tools/lint/check_subprocess_timeout.py:142", "shortDescription": {"text": "Commented-code block (6 lines) in scripts/tools/lint/check_subprocess_timeout.py:142"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a766b31158f03be9", "name": "Network/subprocess call without timeout or try/except \u2014 scripts/tools/lint/check_subprocess_timeout.py:38", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 scripts/tools/lint/check_subprocess_timeout.py:38"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4369f2bbcf58a40e", "name": "Commented-code block (8 lines) in scripts/tools/lint/check_doc_links.py:363", "shortDescription": {"text": "Commented-code block (8 lines) in scripts/tools/lint/check_doc_links.py:363"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-fac1bb284a425208", "name": "Legacy-named symbol `_fix_working_copy` in scripts/tools/lint/check_head_blob_hygiene.py:354", "shortDescription": {"text": "Legacy-named symbol `_fix_working_copy` in scripts/tools/lint/check_head_blob_hygiene.py:354"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8d886c304cbffa5d", "name": "Commented-code block (5 lines) in scripts/tools/lint/check_head_blob_hygiene.py:279", "shortDescription": {"text": "Commented-code block (5 lines) in scripts/tools/lint/check_head_blob_hygiene.py:279"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-16558599d6c56f90", "name": "Commented-code block (5 lines) in scripts/tools/lint/check_hardcode_tenant.py:85", "shortDescription": {"text": "Commented-code block (5 lines) in scripts/tools/lint/check_hardcode_tenant.py:85"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-51a8689fd0ac55db", "name": "Commented-code block (6 lines) in scripts/tools/lint/lint_tool_consistency.py:428", "shortDescription": {"text": "Commented-code block (6 lines) in scripts/tools/lint/lint_tool_consistency.py:428"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b1f76abf3be3efc8", "name": "Commented-code block (7 lines) in scripts/tools/lint/check_single_writer_invariant.py:91", "shortDescription": {"text": "Commented-code block (7 lines) in scripts/tools/lint/check_single_writer_invariant.py:91"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-4afc2071ea97fe82", "name": "Commented-code block (5 lines) in scripts/tools/lint/validate_docs_versions.py:549", "shortDescription": {"text": "Commented-code block (5 lines) in scripts/tools/lint/validate_docs_versions.py:549"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c82a1a639238b237", "name": "Commented-code block (6 lines) in scripts/tools/lint/check_codename_leak.py:81", "shortDescription": {"text": "Commented-code block (6 lines) in scripts/tools/lint/check_codename_leak.py:81"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-6720fc9d7f42e5e3", "name": "Commented-code block (5 lines) in components/da-tools/app/entrypoint.py:222", "shortDescription": {"text": "Commented-code block (5 lines) in components/da-tools/app/entrypoint.py:222"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-4e2f67db5d3b0593", "name": "Commented-code block (7 lines) in tools/portal/build.mjs:179", "shortDescription": {"text": "Commented-code block (7 lines) in tools/portal/build.mjs:179"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-31f5c461f730e635", "name": "Commented-code block (5 lines) in tools/portal/tests/useModalFocusTrap.test.tsx:81", "shortDescription": {"text": "Commented-code block (5 lines) in tools/portal/tests/useModalFocusTrap.test.tsx:81"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-992184ec432b69a4", "name": "Commented-code block (8 lines) in tools/portal/src/getting-started/wizard.jsx:12", "shortDescription": {"text": "Commented-code block (8 lines) in tools/portal/src/getting-started/wizard.jsx:12"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b953dfe23f5a4310", "name": "Commented-code block (5 lines) in tools/portal/src/interactive/tools/multi-tenant-comparison.jsx:14", "shortDescription": {"text": "Commented-code block (5 lines) in tools/portal/src/interactive/tools/multi-tenant-comparison.jsx:14"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f8451f91437a5cb0", "name": "Commented-code block (5 lines) in tools/portal/src/interactive/tools/alert-builder.jsx:115", "shortDescription": {"text": "Commented-code block (5 lines) in tools/portal/src/interactive/tools/alert-builder.jsx:115"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-fb8088c5d2bff158", "name": "Commented-code block (6 lines) in tools/portal/src/interactive/tools/template-gallery.jsx:14", "shortDescription": {"text": "Commented-code block (6 lines) in tools/portal/src/interactive/tools/template-gallery.jsx:14"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-75d2c7407b966f0f", "name": "Commented-code block (5 lines) in tools/portal/src/interactive/tools/tenant-manager.jsx:57", "shortDescription": {"text": "Commented-code block (5 lines) in tools/portal/src/interactive/tools/tenant-manager.jsx:57"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a75e8adbb4a7a87a", "name": "Commented-code block (5 lines) in tools/portal/src/interactive/tools/config-lint.jsx:46", "shortDescription": {"text": "Commented-code block (5 lines) in tools/portal/src/interactive/tools/config-lint.jsx:46"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-235803410d20838d", "name": "Commented-code block (5 lines) in tools/portal/src/interactive/tools/recipe-builder.jsx:117", "shortDescription": {"text": "Commented-code block (5 lines) in tools/portal/src/interactive/tools/recipe-builder.jsx:117"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-58e8db524434dcdc", "name": "`fetch()` without try/.catch or AbortSignal \u2014 tools/portal/src/interactive/tools/recipe-builder.jsx:198", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 tools/portal/src/interactive/tools/recipe-builder.jsx:198"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a1a1f2235f02493d", "name": "Commented-code block (6 lines) in tools/portal/src/interactive/tools/dependency-graph.jsx:75", "shortDescription": {"text": "Commented-code block (6 lines) in tools/portal/src/interactive/tools/dependency-graph.jsx:75"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c00fd95347ab89dc", "name": "Commented-code block (5 lines) in tools/portal/src/interactive/tools/deployment-wizard.jsx:19", "shortDescription": {"text": "Commented-code block (5 lines) in tools/portal/src/interactive/tools/deployment-wizard.jsx:19"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8210d8e3aa644cb5", "name": "Commented-code block (5 lines) in tools/portal/src/interactive/tools/_common/hooks/useDebouncedValue.js:51", "shortDescription": {"text": "Commented-code block (5 lines) in tools/portal/src/interactive/tools/_common/hooks/useDebouncedValue.js:51"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-97d214ebccaf451d", "name": "Commented-code block (5 lines) in tools/portal/src/interactive/tools/tenant-manager/components/TenantCard.jsx:42", "shortDescription": {"text": "Commented-code block (5 lines) in tools/portal/src/interactive/tools/tenant-manager/components/TenantCard.jsx:42"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ad040a5bca21e48d", "name": "Commented-code block (5 lines) in tools/portal/src/interactive/tools/tenant-manager/components/GroupSidebar.jsx:17", "shortDescription": {"text": "Commented-code block (5 lines) in tools/portal/src/interactive/tools/tenant-manager/components/GroupSidebar.jsx:17"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-624e0b26283711c1", "name": "Commented-code block (8 lines) in tools/portal/src/interactive/tools/tenant-manager/components/CustomAlertsModal.jsx:155", "shortDescription": {"text": "Commented-code block (8 lines) in tools/portal/src/interactive/tools/tenant-manager/components/CustomAlertsModal.jsx:155"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7061e996a8d66296", "name": "`fetch()` without try/.catch or AbortSignal \u2014 tools/portal/src/interactive/tools/tenant-manager/components/CustomAlertsM", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 tools/portal/src/interactive/tools/tenant-manager/components/CustomAlertsModal.jsx:24"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-63baa93dc82d2ab0", "name": "Commented-code block (7 lines) in tools/portal/src/interactive/tools/tenant-manager/hooks/useSavedViews.js:66", "shortDescription": {"text": "Commented-code block (7 lines) in tools/portal/src/interactive/tools/tenant-manager/hooks/useSavedViews.js:66"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b2790a0398308a00", "name": "Commented-code block (7 lines) in tools/portal/src/interactive/tools/tenant-manager/hooks/useTenantData.js:154", "shortDescription": {"text": "Commented-code block (7 lines) in tools/portal/src/interactive/tools/tenant-manager/hooks/useTenantData.js:154"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1fc9d4d61cb0c181", "name": "`fetch()` without try/.catch or AbortSignal \u2014 tools/portal/src/interactive/tools/tenant-manager/hooks/useTenantData.js:1", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 tools/portal/src/interactive/tools/tenant-manager/hooks/useTenantData.js:194"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f808a4ef3e1071fb", "name": "14 env vars used in code but missing from .env.example", "shortDescription": {"text": "14 env vars used in code but missing from .env.example"}, "fullDescription": {"text": "Drift between code and config docs. The first few: `BYPASS_DIST_CHECK`, `CLAUDE_SESSION`, `CLAUDE_SESSION_ID`, `DX_CONTAINER`, `DX_WORKSPACE`, `GITHUB_ACTIONS`, `GITHUB_BASE_REF`, `LANG` + 6 more. Add them (with a placeholder/comment) to .env.example so onboarding doesn't break."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2c04133e54348533", "name": "Near-duplicate function bodies in 2 places", "shortDescription": {"text": "Near-duplicate function bodies in 2 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nscripts/ops/fuse_plumbing_commit.py:plumbing_commit, scripts/ops/fuse_plumbing_commit.py:normal_commit\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-be46ea126aa5d8dc", "name": "Near-duplicate function bodies in 3 places", "shortDescription": {"text": "Near-duplicate function bodies in 3 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nscripts/tools/dx/bump_playbook_versions.py:find_repo_root, scripts/tools/lint/check_path_metadata_consistency.py:find_repo_root, scripts/tools/lint/check_bat_ascii_purity.py:find_repo_root\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-49c98f7cedd9c977", "name": "Near-duplicate function bodies in 4 places", "shortDescription": {"text": "Near-duplicate function bodies in 4 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nscripts/tools/lint/check_k8s_manifests.py:main, scripts/tools/lint/check_iac_vibe_rules.py:main, scripts/tools/lint/check_helm_values_secrets.py:main, scripts/tools/lint/check_iac_helm.py:main\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-02525d39071dd2c7", "name": "Near-duplicate function bodies in 5 places", "shortDescription": {"text": "Near-duplicate function bodies in 5 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nscripts/tools/lint/check_playwright_rtl_drift.py:render, scripts/tools/lint/check_changelog_no_tbd.py:render, scripts/tools/lint/check_undefined_tokens.py:render, scripts/tools/lint/check_jsx_loader_compat.py:render\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/22152"}, "properties": {"repository": "vencil/Dynamic-Alerting-Integrations", "repoUrl": "https://github.com/vencil/Dynamic-Alerting-Integrations", "branch": "main"}, "results": [{"ruleId": "scanner-79087982f0019c59", "level": "note", "message": {"text": "Possibly dead Python function: read_da_tools_version"}, "properties": {"repobilityId": "5b95ea4197f78a19", "scanner": "scanner-primary", "fingerprint": "79087982f0019c59", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/tools/_lib_versions.py:51"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4197fce331397ff8", "level": "note", "message": {"text": "Possibly dead Python function: add_config_dir_arg"}, "properties": {"repobilityId": "eb910932f8edbcff", "scanner": "scanner-primary", "fingerprint": "4197fce331397ff8", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/tools/_lib_io.py:178"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-57825674da2aa319", "level": "note", "message": {"text": "Possibly dead Python function: add_json_arg"}, "properties": {"repobilityId": "eb7a1aadf7878885", "scanner": "scanner-primary", "fingerprint": "57825674da2aa319", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/tools/_lib_io.py:194"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5d6203f23f4d1dab", "level": "note", "message": {"text": "Possibly dead Python function: add_ci_arg"}, "properties": {"repobilityId": "d21e2b3eaa7dbf67", "scanner": "scanner-primary", "fingerprint": "5d6203f23f4d1dab", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/tools/_lib_io.py:203"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-915c77b3422a9627", "level": "note", "message": {"text": "Possibly dead Python function: add_prometheus_arg"}, "properties": {"repobilityId": "6991a8bc2bf998fb", "scanner": "scanner-primary", "fingerprint": "915c77b3422a9627", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/tools/_lib_io.py:212"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cb310b36aec1fef9", "level": "note", "message": {"text": "Possibly dead Python function: query_prometheus_instant"}, "properties": {"repobilityId": "2fa277ce0ab00703", "scanner": "scanner-primary", "fingerprint": "cb310b36aec1fef9", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/tools/_lib_prometheus.py:174"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a107f6f5b4b29f7f", "level": "note", "message": {"text": "Possibly dead Python function: prompt_choice"}, "properties": {"repobilityId": "b3aeb4ab134a3d43", "scanner": "scanner-primary", "fingerprint": "a107f6f5b4b29f7f", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/tools/ops/scaffold_tenant.py:408"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-97a8dc8ac9091844", "level": "note", "message": {"text": "Possibly dead Python function: git_log"}, "properties": {"repobilityId": "02b7e48f06ab950a", "scanner": "scanner-primary", "fingerprint": "97a8dc8ac9091844", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/tools/dx/scan_component_health.py:103"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-763a39232f84daf7", "level": "note", "message": {"text": "Possibly dead Python function: render_configmap"}, "properties": {"repobilityId": "b4a0c718a40ccff6", "scanner": "scanner-primary", "fingerprint": "763a39232f84daf7", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/tools/dx/generate_rulepack_configmaps.py:91"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-02b777330edb04cb", "level": "note", "message": {"text": "Possibly dead Python function: known_recipes"}, "properties": {"repobilityId": "e3c8b15860ee288e", "scanner": "scanner-primary", "fingerprint": "02b777330edb04cb", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/tools/dx/custom_alerts/shape.py:419"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b53b58dd224e96df", "level": "note", "message": {"text": "Possibly dead Python function: count_recipes_per_tenant"}, "properties": {"repobilityId": "3dc726c8a9c7f02a", "scanner": "scanner-primary", "fingerprint": "b53b58dd224e96df", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/tools/dx/custom_alerts/loader.py:303"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e1bfc8c76c7bc8a9", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 tests/e2e/operator-setup-wizard.spec.ts:244"}, "properties": {"repobilityId": "ec7164bd811df55b", "scanner": "scanner-primary", "fingerprint": "e1bfc8c76c7bc8a9", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-ded9db059181dab2", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 tools/portal/src/interactive/tools/health-dashboard.jsx:156"}, "properties": {"repobilityId": "a1d00d1392b895ad", "scanner": "scanner-primary", "fingerprint": "ded9db059181dab2", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-20c104edc37332a8", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 tools/portal/src/interactive/tools/threshold-heatmap.jsx:359"}, "properties": {"repobilityId": "203708e9cdd87967", "scanner": "scanner-primary", "fingerprint": "20c104edc37332a8", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-6d05dd0dea9c579c", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 tools/portal/src/interactive/tools/alert-simulator.jsx:162"}, "properties": {"repobilityId": "36bc84e18543b8aa", "scanner": "scanner-primary", "fingerprint": "6d05dd0dea9c579c", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-f8635f1673aa314f", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 tools/portal/src/interactive/tools/promql-tester.jsx:208"}, "properties": {"repobilityId": "4260041998cff594", "scanner": "scanner-primary", "fingerprint": "f8635f1673aa314f", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-e5f1369f30e9e36c", "level": "note", "message": {"text": "Icon-only button without accessible name \u2014 tools/portal/src/interactive/tools/tenant-manager/components/CustomAlertsModal.jsx:185"}, "properties": {"repobilityId": "62af3c7be90e73da", "scanner": "scanner-primary", "fingerprint": "e5f1369f30e9e36c", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.button.no-label"]}}, {"ruleId": "scanner-d97286bc9f396c36", "level": "warning", "message": {"text": "Privileged port 14 in use"}, "properties": {"repobilityId": "2dbd4b719a1412ff", "scanner": "scanner-primary", "fingerprint": "d97286bc9f396c36", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/api/threshold-exporter-openapi.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ca8effafd73bbc1f", "level": "warning", "message": {"text": "Privileged port 30 in use"}, "properties": {"repobilityId": "54f172e7d16fc662", "scanner": "scanner-primary", "fingerprint": "ca8effafd73bbc1f", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/api/threshold-exporter-openapi.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-97f04defc0c6d5f1", "level": "warning", "message": {"text": "Privileged port 10 in use"}, "properties": {"repobilityId": "735372d6b5594915", "scanner": "scanner-primary", "fingerprint": "97f04defc0c6d5f1", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/api/threshold-exporter-openapi.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6e731584ba22827d", "level": "warning", "message": {"text": "Privileged port 9 in use"}, "properties": {"repobilityId": "31590a6ba3409390", "scanner": "scanner-primary", "fingerprint": "6e731584ba22827d", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/api/threshold-exporter-openapi.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5699f818c6be9b89", "level": "warning", "message": {"text": "Privileged port 17 in use"}, "properties": {"repobilityId": "0bf38fb8f89ec589", "scanner": "scanner-primary", "fingerprint": "5699f818c6be9b89", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/api/threshold-exporter-openapi.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cefb90b797224b60", "level": "warning", "message": {"text": "Privileged port 2 in use"}, "properties": {"repobilityId": "755b04866010e843", "scanner": "scanner-primary", "fingerprint": "cefb90b797224b60", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/api/threshold-exporter-openapi.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-669bdab69903a1b7", "level": "warning", "message": {"text": "Privileged port 4 in use"}, "properties": {"repobilityId": "1594bfeff919296e", "scanner": "scanner-primary", "fingerprint": "669bdab69903a1b7", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/api/threshold-exporter-openapi.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b730d760f66c0830", "level": "warning", "message": {"text": "Privileged port 15 in use"}, "properties": {"repobilityId": "3340f9a170f285cd", "scanner": "scanner-primary", "fingerprint": "b730d760f66c0830", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/api/threshold-exporter-openapi.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d9331c94a959b453", "level": "warning", "message": {"text": "Privileged port 6 in use"}, "properties": {"repobilityId": "888a3c205ea7334c", "scanner": "scanner-primary", "fingerprint": "d9331c94a959b453", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/demo-showcase.sh"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cb7580735043953d", "level": "warning", "message": {"text": "Privileged port 12 in use"}, "properties": {"repobilityId": "65e7eefa33f2def4", "scanner": "scanner-primary", "fingerprint": "cb7580735043953d", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/demo-showcase.sh"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d329b6da20a38709", "level": "warning", "message": {"text": "Privileged port 70 in use"}, "properties": {"repobilityId": "353d31c086b0a24a", "scanner": "scanner-primary", "fingerprint": "d329b6da20a38709", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "components/da-tools/app/examples/cardinality-demo/conf.d/over-budget-tenant.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fa338f5242af22c9", "level": "warning", "message": {"text": "Privileged port 10 in use"}, "properties": {"repobilityId": "735372d6b5594915", "scanner": "scanner-primary", "fingerprint": "fa338f5242af22c9", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "components/da-tools/app/examples/cardinality-demo/conf.d/over-budget-tenant.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-520b9e048c50aa1a", "level": "warning", "message": {"text": "Privileged port 11 in use"}, "properties": {"repobilityId": "5b3038c67fabb4c8", "scanner": "scanner-primary", "fingerprint": "520b9e048c50aa1a", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "components/da-tools/app/examples/cardinality-demo/conf.d/over-budget-tenant.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-115df8cd338a2524", "level": "warning", "message": {"text": "Privileged port 12 in use"}, "properties": {"repobilityId": "65e7eefa33f2def4", "scanner": "scanner-primary", "fingerprint": "115df8cd338a2524", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "components/da-tools/app/examples/cardinality-demo/conf.d/over-budget-tenant.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e5f1d432004ef39b", "level": "warning", "message": {"text": "Privileged port 13 in use"}, "properties": {"repobilityId": "79d721e4d6f64798", "scanner": "scanner-primary", "fingerprint": "e5f1d432004ef39b", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "components/da-tools/app/examples/cardinality-demo/conf.d/over-budget-tenant.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-da306cf27737ed5d", "level": "warning", "message": {"text": "Privileged port 14 in use"}, "properties": {"repobilityId": "2dbd4b719a1412ff", "scanner": "scanner-primary", "fingerprint": "da306cf27737ed5d", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "components/da-tools/app/examples/cardinality-demo/conf.d/over-budget-tenant.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ecb7a81ae16732a6", "level": "warning", "message": {"text": "Privileged port 15 in use"}, "properties": {"repobilityId": "3340f9a170f285cd", "scanner": "scanner-primary", "fingerprint": "ecb7a81ae16732a6", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "components/da-tools/app/examples/cardinality-demo/conf.d/over-budget-tenant.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8c1eb5006b6ad913", "level": "warning", "message": {"text": "Privileged port 16 in use"}, "properties": {"repobilityId": "d31009168c502ace", "scanner": "scanner-primary", "fingerprint": "8c1eb5006b6ad913", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "components/da-tools/app/examples/cardinality-demo/conf.d/over-budget-tenant.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fb9c440b6b5894f8", "level": "warning", "message": {"text": "Privileged port 17 in use"}, "properties": {"repobilityId": "0bf38fb8f89ec589", "scanner": "scanner-primary", "fingerprint": "fb9c440b6b5894f8", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "components/da-tools/app/examples/cardinality-demo/conf.d/over-budget-tenant.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-de7a548cc9c0a1c5", "level": "warning", "message": {"text": "Privileged port 18 in use"}, "properties": {"repobilityId": "2d7b5e7d9c158e43", "scanner": "scanner-primary", "fingerprint": "de7a548cc9c0a1c5", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "components/da-tools/app/examples/cardinality-demo/conf.d/over-budget-tenant.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-db2e99fc2c228d34", "level": "warning", "message": {"text": "Privileged port 19 in use"}, "properties": {"repobilityId": "a6b5b06deac36eac", "scanner": "scanner-primary", "fingerprint": "db2e99fc2c228d34", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "components/da-tools/app/examples/cardinality-demo/conf.d/over-budget-tenant.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1c5d864882468bdd", "level": "warning", "message": {"text": "Privileged port 20 in use"}, "properties": {"repobilityId": "a59f3e53d617e0f8", "scanner": "scanner-primary", "fingerprint": "1c5d864882468bdd", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "components/da-tools/app/examples/cardinality-demo/conf.d/over-budget-tenant.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-593d623aa07c2f18", "level": "warning", "message": {"text": "Privileged port 21 in use"}, "properties": {"repobilityId": "d920b7cd1b1a16dc", "scanner": "scanner-primary", "fingerprint": "593d623aa07c2f18", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "components/da-tools/app/examples/cardinality-demo/conf.d/over-budget-tenant.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-40cb743e0fd0c7f5", "level": "warning", "message": {"text": "Privileged port 23 in use"}, "properties": {"repobilityId": "a1230e3dfc4becfa", "scanner": "scanner-primary", "fingerprint": "40cb743e0fd0c7f5", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "components/da-tools/app/examples/cardinality-demo/conf.d/over-budget-tenant.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6dbd0204a9c3a4a9", "level": "warning", "message": {"text": "Privileged port 24 in use"}, "properties": {"repobilityId": "a6356ba91a17fcb8", "scanner": "scanner-primary", "fingerprint": "6dbd0204a9c3a4a9", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "components/da-tools/app/examples/cardinality-demo/conf.d/over-budget-tenant.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a0a626bcb445b677", "level": "warning", "message": {"text": "Privileged port 26 in use"}, "properties": {"repobilityId": "9c5e4d9c5edd9bd2", "scanner": "scanner-primary", "fingerprint": "a0a626bcb445b677", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "components/da-tools/app/examples/cardinality-demo/conf.d/over-budget-tenant.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7f3afff0f6e332ae", "level": "warning", "message": {"text": "Privileged port 27 in use"}, "properties": {"repobilityId": "69cb2b980eb576a0", "scanner": "scanner-primary", "fingerprint": "7f3afff0f6e332ae", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "components/da-tools/app/examples/cardinality-demo/conf.d/over-budget-tenant.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-187b19dd225560b6", "level": "warning", "message": {"text": "Privileged port 28 in use"}, "properties": {"repobilityId": "5c3f00b3e839840d", "scanner": "scanner-primary", "fingerprint": "187b19dd225560b6", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "components/da-tools/app/examples/cardinality-demo/conf.d/over-budget-tenant.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7bf1807e65a20d56", "level": "warning", "message": {"text": "Privileged port 29 in use"}, "properties": {"repobilityId": "f09242400239b5a3", "scanner": "scanner-primary", "fingerprint": "7bf1807e65a20d56", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "components/da-tools/app/examples/cardinality-demo/conf.d/over-budget-tenant.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-999d3554b971181b", "level": "warning", "message": {"text": "Privileged port 30 in use"}, "properties": {"repobilityId": "54f172e7d16fc662", "scanner": "scanner-primary", "fingerprint": "999d3554b971181b", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "components/da-tools/app/examples/cardinality-demo/conf.d/over-budget-tenant.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f1da766d534c372c", "level": "warning", "message": {"text": "Privileged port 31 in use"}, "properties": {"repobilityId": "8a1049d03b927a2d", "scanner": "scanner-primary", "fingerprint": "f1da766d534c372c", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "components/da-tools/app/examples/cardinality-demo/conf.d/over-budget-tenant.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-67741a2c921ae63b", "level": "warning", "message": {"text": "Privileged port 32 in use"}, "properties": {"repobilityId": "20c0fabc691cdde4", "scanner": "scanner-primary", "fingerprint": "67741a2c921ae63b", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "components/da-tools/app/examples/cardinality-demo/conf.d/over-budget-tenant.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ea8e737e2fd5ab71", "level": "warning", "message": {"text": "Privileged port 33 in use"}, "properties": {"repobilityId": "f08e29b4b53f7301", "scanner": "scanner-primary", "fingerprint": "ea8e737e2fd5ab71", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "components/da-tools/app/examples/cardinality-demo/conf.d/over-budget-tenant.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-41ce51608316ae40", "level": "warning", "message": {"text": "Privileged port 34 in use"}, "properties": {"repobilityId": "2febb579b1c7080d", "scanner": "scanner-primary", "fingerprint": "41ce51608316ae40", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "components/da-tools/app/examples/cardinality-demo/conf.d/over-budget-tenant.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ed8119e014ff12da", "level": "warning", "message": {"text": "Privileged port 35 in use"}, "properties": {"repobilityId": "e997ec9811d79c6d", "scanner": "scanner-primary", "fingerprint": "ed8119e014ff12da", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "components/da-tools/app/examples/cardinality-demo/conf.d/over-budget-tenant.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-373dce1a1115645a", "level": "warning", "message": {"text": "Privileged port 36 in use"}, "properties": {"repobilityId": "d1c2650d13d67a60", "scanner": "scanner-primary", "fingerprint": "373dce1a1115645a", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "components/da-tools/app/examples/cardinality-demo/conf.d/over-budget-tenant.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b1bafb48fbd666f8", "level": "warning", "message": {"text": "Privileged port 37 in use"}, "properties": {"repobilityId": "3bc0728a81a76695", "scanner": "scanner-primary", "fingerprint": "b1bafb48fbd666f8", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "components/da-tools/app/examples/cardinality-demo/conf.d/over-budget-tenant.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c7f1353acfb448fc", "level": "warning", "message": {"text": "Privileged port 38 in use"}, "properties": {"repobilityId": "b7214bb254c5881d", "scanner": "scanner-primary", "fingerprint": "c7f1353acfb448fc", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "components/da-tools/app/examples/cardinality-demo/conf.d/over-budget-tenant.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-45ee60c01377bd2f", "level": "warning", "message": {"text": "Privileged port 39 in use"}, "properties": {"repobilityId": "9b982a253b897533", "scanner": "scanner-primary", "fingerprint": "45ee60c01377bd2f", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "components/da-tools/app/examples/cardinality-demo/conf.d/over-budget-tenant.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cb11c8eba1a3d468", "level": "warning", "message": {"text": "Privileged port 40 in use"}, "properties": {"repobilityId": "28c59d470d4929c6", "scanner": "scanner-primary", "fingerprint": "cb11c8eba1a3d468", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "components/da-tools/app/examples/cardinality-demo/conf.d/over-budget-tenant.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-024a0601e21c5bdf", "level": "warning", "message": {"text": "Privileged port 41 in use"}, "properties": {"repobilityId": "21c3be090ea64fdb", "scanner": "scanner-primary", "fingerprint": "024a0601e21c5bdf", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "components/da-tools/app/examples/cardinality-demo/conf.d/over-budget-tenant.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-53a042138546f2fd", "level": "warning", "message": {"text": "Privileged port 42 in use"}, "properties": {"repobilityId": "16d9608735f9e01a", "scanner": "scanner-primary", "fingerprint": "53a042138546f2fd", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "components/da-tools/app/examples/cardinality-demo/conf.d/over-budget-tenant.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a6f6b14c40b9978f", "level": "warning", "message": {"text": "Privileged port 43 in use"}, "properties": {"repobilityId": "af1bc8881542418e", "scanner": "scanner-primary", "fingerprint": "a6f6b14c40b9978f", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "components/da-tools/app/examples/cardinality-demo/conf.d/over-budget-tenant.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e5c385b054d7941f", "level": "warning", "message": {"text": "Privileged port 44 in use"}, "properties": {"repobilityId": "1f021a2e926773a0", "scanner": "scanner-primary", "fingerprint": "e5c385b054d7941f", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "components/da-tools/app/examples/cardinality-demo/conf.d/over-budget-tenant.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2a8cb5461855dd05", "level": "warning", "message": {"text": "Privileged port 45 in use"}, "properties": {"repobilityId": "73cf64d92574d41c", "scanner": "scanner-primary", "fingerprint": "2a8cb5461855dd05", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "components/da-tools/app/examples/cardinality-demo/conf.d/over-budget-tenant.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4702fa69e7c522dc", "level": "warning", "message": {"text": "Privileged port 46 in use"}, "properties": {"repobilityId": "e83b659b6ec9a0fc", "scanner": "scanner-primary", "fingerprint": "4702fa69e7c522dc", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "components/da-tools/app/examples/cardinality-demo/conf.d/over-budget-tenant.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9d27338c8215dc0a", "level": "warning", "message": {"text": "Privileged port 47 in use"}, "properties": {"repobilityId": "986e85543d70890d", "scanner": "scanner-primary", "fingerprint": "9d27338c8215dc0a", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "components/da-tools/app/examples/cardinality-demo/conf.d/over-budget-tenant.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c11837ae7e7295e1", "level": "warning", "message": {"text": "Privileged port 48 in use"}, "properties": {"repobilityId": "6a483602fa277896", "scanner": "scanner-primary", "fingerprint": "c11837ae7e7295e1", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "components/da-tools/app/examples/cardinality-demo/conf.d/over-budget-tenant.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ebf95e854a7cf25b", "level": "warning", "message": {"text": "Privileged port 49 in use"}, "properties": {"repobilityId": "6108a3341973dcab", "scanner": "scanner-primary", "fingerprint": "ebf95e854a7cf25b", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "components/da-tools/app/examples/cardinality-demo/conf.d/over-budget-tenant.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-274c811a6f825026", "level": "warning", "message": {"text": "Privileged port 50 in use"}, "properties": {"repobilityId": "da61f654c07ea7a9", "scanner": "scanner-primary", "fingerprint": "274c811a6f825026", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "components/da-tools/app/examples/cardinality-demo/conf.d/over-budget-tenant.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-88c1864bba193f3a", "level": "warning", "message": {"text": "Privileged port 51 in use"}, "properties": {"repobilityId": "22e13070198289ad", "scanner": "scanner-primary", "fingerprint": "88c1864bba193f3a", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "components/da-tools/app/examples/cardinality-demo/conf.d/over-budget-tenant.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-075f0a5d7f644661", "level": "warning", "message": {"text": "Privileged port 52 in use"}, "properties": {"repobilityId": "2b6877fa37212075", "scanner": "scanner-primary", "fingerprint": "075f0a5d7f644661", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "components/da-tools/app/examples/cardinality-demo/conf.d/over-budget-tenant.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e83181bec7350a12", "level": "warning", "message": {"text": "Privileged port 54 in use"}, "properties": {"repobilityId": "cfa860c24fdc3eef", "scanner": "scanner-primary", "fingerprint": "e83181bec7350a12", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "components/da-tools/app/examples/cardinality-demo/conf.d/over-budget-tenant.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-502cf572324a8c90", "level": "warning", "message": {"text": "Privileged port 55 in use"}, "properties": {"repobilityId": "51a768b3e1831ac0", "scanner": "scanner-primary", "fingerprint": "502cf572324a8c90", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "components/da-tools/app/examples/cardinality-demo/conf.d/over-budget-tenant.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8530701dde33526f", "level": "warning", "message": {"text": "Privileged port 56 in use"}, "properties": {"repobilityId": "104b02b29065e84a", "scanner": "scanner-primary", "fingerprint": "8530701dde33526f", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "components/da-tools/app/examples/cardinality-demo/conf.d/over-budget-tenant.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0d9939b357ac7722", "level": "warning", "message": {"text": "Privileged port 57 in use"}, "properties": {"repobilityId": "7f473bea32892301", "scanner": "scanner-primary", "fingerprint": "0d9939b357ac7722", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "components/da-tools/app/examples/cardinality-demo/conf.d/over-budget-tenant.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-93c62e4f2bd7fb5a", "level": "warning", "message": {"text": "Privileged port 58 in use"}, "properties": {"repobilityId": "6d9ae83ac6aad676", "scanner": "scanner-primary", "fingerprint": "93c62e4f2bd7fb5a", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "components/da-tools/app/examples/cardinality-demo/conf.d/over-budget-tenant.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-65eb1fcb19a2754b", "level": "warning", "message": {"text": "Privileged port 59 in use"}, "properties": {"repobilityId": "6c14a9dab4958e92", "scanner": "scanner-primary", "fingerprint": "65eb1fcb19a2754b", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "components/da-tools/app/examples/cardinality-demo/conf.d/over-budget-tenant.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2e4335a6ca8c2e06", "level": "warning", "message": {"text": "Privileged port 233 in use"}, "properties": {"repobilityId": "1217fc1066070b1e", "scanner": "scanner-primary", "fingerprint": "2e4335a6ca8c2e06", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/playwright.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-958e349c263b31bb", "level": "warning", "message": {"text": "Dockerfile runs as root: tests/e2e-bench/driver/Dockerfile"}, "properties": {"repobilityId": "2077d19023e77211", "scanner": "scanner-primary", "fingerprint": "958e349c263b31bb", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-7e815bcb57f51fbc", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.13.13-alpine3.22"}, "properties": {"repobilityId": "6a754790e7933834", "scanner": "scanner-primary", "fingerprint": "7e815bcb57f51fbc", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/e2e-bench/driver/Dockerfile"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-cef5ec45225d1507", "level": "warning", "message": {"text": "Dockerfile runs as root: tests/e2e-bench/receiver/Dockerfile"}, "properties": {"repobilityId": "f2dd35e4c53a961b", "scanner": "scanner-primary", "fingerprint": "cef5ec45225d1507", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-5fd26c59fae8b962", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: golang:1.26.3-alpine3.22"}, "properties": {"repobilityId": "1b41c2654fb03e3a", "scanner": "scanner-primary", "fingerprint": "5fd26c59fae8b962", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/e2e-bench/receiver/Dockerfile"}, "region": {"startLine": 6}}}]}, {"ruleId": "scanner-a9824882ff9e3624", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: gcr.io/distroless/static-debian12:nonroot"}, "properties": {"repobilityId": "325f18bb16c65d98", "scanner": "scanner-primary", "fingerprint": "a9824882ff9e3624", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/e2e-bench/receiver/Dockerfile"}, "region": {"startLine": 12}}}]}, {"ruleId": "scanner-2f7b8f3e071a6559", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: golang:1.26.4-alpine3.22"}, "properties": {"repobilityId": "d8e34df87be15fa1", "scanner": "scanner-primary", "fingerprint": "2f7b8f3e071a6559", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "components/tenant-api/Dockerfile"}, "region": {"startLine": 17}}}]}, {"ruleId": "scanner-23de723bf7981331", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: alpine:3.22"}, "properties": {"repobilityId": "5ce375ec26bd6526", "scanner": "scanner-primary", "fingerprint": "23de723bf7981331", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "components/tenant-api/Dockerfile"}, "region": {"startLine": 44}}}]}, {"ruleId": "scanner-0e95562a02eee792", "level": "warning", "message": {"text": "Dockerfile runs as root: components/threshold-exporter/app/Dockerfile"}, "properties": {"repobilityId": "d0ebd80c73fb9e41", "scanner": "scanner-primary", "fingerprint": "0e95562a02eee792", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-3eb38f2e72b86236", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: golang:1.26.4-alpine3.22"}, "properties": {"repobilityId": "16302751cd9c4f3d", "scanner": "scanner-primary", "fingerprint": "3eb38f2e72b86236", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "components/threshold-exporter/app/Dockerfile"}, "region": {"startLine": 4}}}]}, {"ruleId": "scanner-9814e7bd8faae909", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: gcr.io/distroless/static-debian12:nonroot"}, "properties": {"repobilityId": "33d8d31bb9b02e9a", "scanner": "scanner-primary", "fingerprint": "9814e7bd8faae909", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "components/threshold-exporter/app/Dockerfile"}, "region": {"startLine": 19}}}]}, {"ruleId": "scanner-08c7a4990508f722", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.13.13-alpine3.22"}, "properties": {"repobilityId": "dcd7e155b3630efb", "scanner": "scanner-primary", "fingerprint": "08c7a4990508f722", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "components/da-tools/app/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-08c7a4990508f722", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.13.13-alpine3.22"}, "properties": {"repobilityId": "9c7e07db2c4d2095", "scanner": "scanner-primary", "fingerprint": "08c7a4990508f722", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "components/da-tools/app/Dockerfile"}, "region": {"startLine": 19}}}]}, {"ruleId": "scanner-e4932324eb3145e0", "level": "warning", "message": {"text": "Dockerfile runs as root: components/da-portal/Dockerfile"}, "properties": {"repobilityId": "04cd553ca3b2436b", "scanner": "scanner-primary", "fingerprint": "e4932324eb3145e0", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-d7f78a181a66b300", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: nginx:1.30-alpine3.23"}, "properties": {"repobilityId": "27920feff99d2501", "scanner": "scanner-primary", "fingerprint": "d7f78a181a66b300", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "components/da-portal/Dockerfile"}, "region": {"startLine": 15}}}]}, {"ruleId": "scanner-95b88b2aa678f318", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: alpine:3.23.4"}, "properties": {"repobilityId": "2d4b162305e5f1d9", "scanner": "scanner-primary", "fingerprint": "95b88b2aa678f318", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "helm/federation-gateway/audit-sidecar/Dockerfile"}, "region": {"startLine": 18}}}]}, {"ruleId": "scanner-95b88b2aa678f318", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: alpine:3.23.4"}, "properties": {"repobilityId": "8967fcf7131c671b", "scanner": "scanner-primary", "fingerprint": "95b88b2aa678f318", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "helm/federation-gateway/audit-sidecar/Dockerfile"}, "region": {"startLine": 30}}}]}, {"ruleId": "scanner-5aa9844e06e1f4d9", "level": "warning", "message": {"text": "Insecure pattern 'subprocess_shell_true' in Makefile:779"}, "properties": {"repobilityId": "50462277ed52f50a", "scanner": "scanner-primary", "fingerprint": "5aa9844e06e1f4d9", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "subprocess_shell_true"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Makefile"}, "region": {"startLine": 779}}}]}, {"ruleId": "scanner-7b9d7840defc7102", "level": "note", "message": {"text": "Insecure pattern 'document_write' in docs/assets/jsx-loader.html:56"}, "properties": {"repobilityId": "9ba469f90d9a77de", "scanner": "scanner-primary", "fingerprint": "7b9d7840defc7102", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "document_write"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/assets/jsx-loader.html"}, "region": {"startLine": 56}}}]}, {"ruleId": "scanner-8cda487d85c88690", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/assets/jsx-loader.html:595"}, "properties": {"repobilityId": "f5d2ee5018d6f84c", "scanner": "scanner-primary", "fingerprint": "8cda487d85c88690", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/assets/jsx-loader.html"}, "region": {"startLine": 595}}}]}, {"ruleId": "scanner-61b7143971521421", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/interactive/index.html:1097"}, "properties": {"repobilityId": "e18d0b30d1414423", "scanner": "scanner-primary", "fingerprint": "61b7143971521421", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/interactive/index.html"}, "region": {"startLine": 1097}}}]}, {"ruleId": "scanner-94f7fae0c739b154", "level": "error", "message": {"text": "Possible secret in scripts/run_load.sh"}, "properties": {"repobilityId": "642d37e3133f35f9", "scanner": "scanner-primary", "fingerprint": "94f7fae0c739b154", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/run_load.sh"}, "region": {"startLine": 258}}}]}, {"ruleId": "scanner-94f7fae0c739b154", "level": "error", "message": {"text": "Possible secret in scripts/run_load.sh"}, "properties": {"repobilityId": "642d37e3133f35f9", "scanner": "scanner-primary", "fingerprint": "94f7fae0c739b154", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/run_load.sh"}, "region": {"startLine": 271}}}]}, {"ruleId": "scanner-94f7fae0c739b154", "level": "error", "message": {"text": "Possible secret in scripts/run_load.sh"}, "properties": {"repobilityId": "642d37e3133f35f9", "scanner": "scanner-primary", "fingerprint": "94f7fae0c739b154", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/run_load.sh"}, "region": {"startLine": 287}}}]}, {"ruleId": "scanner-6b047c346157f086", "level": "warning", "message": {"text": "Insecure pattern 'cors_wildcard' in components/tenant-api/internal/ws/hub.go:242"}, "properties": {"repobilityId": "6f60a7b2171caa12", "scanner": "scanner-primary", "fingerprint": "6b047c346157f086", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "cors_wildcard"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "components/tenant-api/internal/ws/hub.go"}, "region": {"startLine": 242}}}]}, {"ruleId": "scanner-9e4a3df667f07d12", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in components/threshold-exporter/app/pkg/config/custom_alert.go:76"}, "properties": {"repobilityId": "7ba0c663e5d2d414", "scanner": "scanner-primary", "fingerprint": "9e4a3df667f07d12", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "components/threshold-exporter/app/pkg/config/custom_alert.go"}, "region": {"startLine": 76}}}]}, {"ruleId": "scanner-ba71d1ce87e11925", "level": "error", "message": {"text": "Possible secret in tools/portal/src/interactive/tools/operator-setup-wizard/utils/generators.js"}, "properties": {"repobilityId": "38ba59bf227b170a", "scanner": "scanner-primary", "fingerprint": "ba71d1ce87e11925", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/portal/src/interactive/tools/operator-setup-wizard/utils/generators.js"}, "region": {"startLine": 65}}}]}, {"ruleId": "scanner-a04653be0be368c8", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "daa067a3fe755e14", "scanner": "scanner-primary", "fingerprint": "a04653be0be368c8", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/bench-record.yaml"}, "region": {"startLine": 44}}}]}, {"ruleId": "scanner-a04653be0be368c8", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "1dd39449431d5321", "scanner": "scanner-primary", "fingerprint": "a04653be0be368c8", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/bench-record.yaml"}, "region": {"startLine": 47}}}]}, {"ruleId": "scanner-a04653be0be368c8", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "7a3a2d857231caa5", "scanner": "scanner-primary", "fingerprint": "a04653be0be368c8", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/bench-record.yaml"}, "region": {"startLine": 52}}}]}, {"ruleId": "scanner-a04653be0be368c8", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "b8511bd977b4c1b5", "scanner": "scanner-primary", "fingerprint": "a04653be0be368c8", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/bench-record.yaml"}, "region": {"startLine": 90}}}]}, {"ruleId": "scanner-a04653be0be368c8", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "daa067a3fe755e14", "scanner": "scanner-primary", "fingerprint": "a04653be0be368c8", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/bench-record.yaml"}, "region": {"startLine": 121}}}]}, {"ruleId": "scanner-a04653be0be368c8", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "be0296f37010d1de", "scanner": "scanner-primary", "fingerprint": "a04653be0be368c8", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/bench-record.yaml"}, "region": {"startLine": 124}}}]}, {"ruleId": "scanner-6b8699f202c36554", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "94e40033256e6b83", "scanner": "scanner-primary", "fingerprint": "6b8699f202c36554", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/mkdocs-deploy.yaml"}, "region": {"startLine": 24}}}]}, {"ruleId": "scanner-fa34e21db3669635", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "1799a6d7d2f81e36", "scanner": "scanner-primary", "fingerprint": "fa34e21db3669635", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/mkdocs-deploy.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2e000242f6dfa599", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "c5a2c3c1e6bc5fcb", "scanner": "scanner-primary", "fingerprint": "2e000242f6dfa599", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/commitlint.yaml"}, "region": {"startLine": 14}}}]}, {"ruleId": "scanner-2e000242f6dfa599", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "d5bae287478da4e3", "scanner": "scanner-primary", "fingerprint": "2e000242f6dfa599", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/commitlint.yaml"}, "region": {"startLine": 19}}}]}, {"ruleId": "scanner-8e54309f597bbeef", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "9f54b647c4378ae1", "scanner": "scanner-primary", "fingerprint": "8e54309f597bbeef", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/coverage-delta.yml"}, "region": {"startLine": 53}}}]}, {"ruleId": "scanner-8e54309f597bbeef", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "0bded74d17e7aa19", "scanner": "scanner-primary", "fingerprint": "8e54309f597bbeef", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/coverage-delta.yml"}, "region": {"startLine": 61}}}]}, {"ruleId": "scanner-75140d7076f32b51", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "663da46a01e42281", "scanner": "scanner-primary", "fingerprint": "75140d7076f32b51", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/nightly-race.yaml"}, "region": {"startLine": 45}}}]}, {"ruleId": "scanner-75140d7076f32b51", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "d9202453c3346324", "scanner": "scanner-primary", "fingerprint": "75140d7076f32b51", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/nightly-race.yaml"}, "region": {"startLine": 48}}}]}, {"ruleId": "scanner-75140d7076f32b51", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "4f40ea3d4492afab", "scanner": "scanner-primary", "fingerprint": "75140d7076f32b51", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/nightly-race.yaml"}, "region": {"startLine": 53}}}]}, {"ruleId": "scanner-75140d7076f32b51", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "c67b1c2799f7cc27", "scanner": "scanner-primary", "fingerprint": "75140d7076f32b51", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/nightly-race.yaml"}, "region": {"startLine": 70}}}]}, {"ruleId": "scanner-f8cdfffd70600cb1", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "2b7ca20f3964fe6b", "scanner": "scanner-primary", "fingerprint": "f8cdfffd70600cb1", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/playwright.yml"}, "region": {"startLine": 61}}}]}, {"ruleId": "scanner-f8cdfffd70600cb1", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "07c02d3457e0087b", "scanner": "scanner-primary", "fingerprint": "f8cdfffd70600cb1", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/playwright.yml"}, "region": {"startLine": 72}}}]}, {"ruleId": "scanner-f8cdfffd70600cb1", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "18c8174306e70d67", "scanner": "scanner-primary", "fingerprint": "f8cdfffd70600cb1", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/playwright.yml"}, "region": {"startLine": 87}}}]}, {"ruleId": "scanner-f8cdfffd70600cb1", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "70bd5e1ab83dad41", "scanner": "scanner-primary", "fingerprint": "f8cdfffd70600cb1", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/playwright.yml"}, "region": {"startLine": 148}}}]}, {"ruleId": "scanner-f8cdfffd70600cb1", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "70bd5e1ab83dad41", "scanner": "scanner-primary", "fingerprint": "f8cdfffd70600cb1", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/playwright.yml"}, "region": {"startLine": 156}}}]}, {"ruleId": "scanner-f8cdfffd70600cb1", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "8b7fbe6b87af003e", "scanner": "scanner-primary", "fingerprint": "f8cdfffd70600cb1", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/playwright.yml"}, "region": {"startLine": 164}}}]}, {"ruleId": "scanner-414a36161613e49f", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "3cab93c51ebfc146", "scanner": "scanner-primary", "fingerprint": "414a36161613e49f", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release-attach-bench-baseline.yaml"}, "region": {"startLine": 43}}}]}, {"ruleId": "scanner-b0b19affe0a45d72", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "adba87447fde021f", "scanner": "scanner-primary", "fingerprint": "b0b19affe0a45d72", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release-attach-bench-baseline.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f1cfa257f575bfef", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "253a317a92679183", "scanner": "scanner-primary", "fingerprint": "f1cfa257f575bfef", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/bench-gate-pr.yaml"}, "region": {"startLine": 132}}}]}, {"ruleId": "scanner-f1cfa257f575bfef", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "253a317a92679183", "scanner": "scanner-primary", "fingerprint": "f1cfa257f575bfef", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/bench-gate-pr.yaml"}, "region": {"startLine": 186}}}]}, {"ruleId": "scanner-f1cfa257f575bfef", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "bf04259b4d53d405", "scanner": "scanner-primary", "fingerprint": "f1cfa257f575bfef", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/bench-gate-pr.yaml"}, "region": {"startLine": 191}}}]}, {"ruleId": "scanner-f1cfa257f575bfef", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "79ae6802d11867e5", "scanner": "scanner-primary", "fingerprint": "f1cfa257f575bfef", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/bench-gate-pr.yaml"}, "region": {"startLine": 202}}}]}, {"ruleId": "scanner-7e07d5143de8bdce", "level": "error", "message": {"text": "pull_request_target workflow appears to check out untrusted PR code"}, "properties": {"repobilityId": "e1925dfeebdfc92f", "scanner": "scanner-primary", "fingerprint": "7e07d5143de8bdce", "layer": "cicd", "severity": "high", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pull-request-target"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/bench-gate-pr.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e2d0519635166268", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "1ab250a2cd39ee49", "scanner": "scanner-primary", "fingerprint": "e2d0519635166268", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release.yaml"}, "region": {"startLine": 64}}}]}, {"ruleId": "scanner-e2d0519635166268", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "2c94c8f4a1a11401", "scanner": "scanner-primary", "fingerprint": "e2d0519635166268", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release.yaml"}, "region": {"startLine": 72}}}]}, {"ruleId": "scanner-e2d0519635166268", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "62005a5d167d1e75", "scanner": "scanner-primary", "fingerprint": "e2d0519635166268", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release.yaml"}, "region": {"startLine": 74}}}]}, {"ruleId": "scanner-e2d0519635166268", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "6eb31721825ad6a2", "scanner": "scanner-primary", "fingerprint": "e2d0519635166268", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release.yaml"}, "region": {"startLine": 77}}}]}, {"ruleId": "scanner-e2d0519635166268", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "ef80e297001239be", "scanner": "scanner-primary", "fingerprint": "e2d0519635166268", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release.yaml"}, "region": {"startLine": 107}}}]}, {"ruleId": "scanner-e2d0519635166268", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "4ff45e227c75397e", "scanner": "scanner-primary", "fingerprint": "e2d0519635166268", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release.yaml"}, "region": {"startLine": 121}}}]}, {"ruleId": "scanner-e2d0519635166268", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "1ab250a2cd39ee49", "scanner": "scanner-primary", "fingerprint": "e2d0519635166268", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release.yaml"}, "region": {"startLine": 176}}}]}, {"ruleId": "scanner-e2d0519635166268", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "f23b014d4a336a0e", "scanner": "scanner-primary", "fingerprint": "e2d0519635166268", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release.yaml"}, "region": {"startLine": 186}}}]}, {"ruleId": "scanner-e2d0519635166268", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "ca50c974742767b5", "scanner": "scanner-primary", "fingerprint": "e2d0519635166268", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release.yaml"}, "region": {"startLine": 198}}}]}, {"ruleId": "scanner-e2d0519635166268", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "4a48a17c40c90e3c", "scanner": "scanner-primary", "fingerprint": "e2d0519635166268", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release.yaml"}, "region": {"startLine": 203}}}]}, {"ruleId": "scanner-e2d0519635166268", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "2c94c8f4a1a11401", "scanner": "scanner-primary", "fingerprint": "e2d0519635166268", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release.yaml"}, "region": {"startLine": 215}}}]}, {"ruleId": "scanner-e2d0519635166268", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "62005a5d167d1e75", "scanner": "scanner-primary", "fingerprint": "e2d0519635166268", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release.yaml"}, "region": {"startLine": 217}}}]}, {"ruleId": "scanner-e2d0519635166268", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "6eb31721825ad6a2", "scanner": "scanner-primary", "fingerprint": "e2d0519635166268", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release.yaml"}, "region": {"startLine": 220}}}]}, {"ruleId": "scanner-e2d0519635166268", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "4ff45e227c75397e", "scanner": "scanner-primary", "fingerprint": "e2d0519635166268", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release.yaml"}, "region": {"startLine": 243}}}]}, {"ruleId": "scanner-e2d0519635166268", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "1ab250a2cd39ee49", "scanner": "scanner-primary", "fingerprint": "e2d0519635166268", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release.yaml"}, "region": {"startLine": 489}}}]}, {"ruleId": "scanner-e2d0519635166268", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "2c94c8f4a1a11401", "scanner": "scanner-primary", "fingerprint": "e2d0519635166268", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release.yaml"}, "region": {"startLine": 499}}}]}, {"ruleId": "scanner-e2d0519635166268", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "62005a5d167d1e75", "scanner": "scanner-primary", "fingerprint": "e2d0519635166268", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release.yaml"}, "region": {"startLine": 501}}}]}, {"ruleId": "scanner-e2d0519635166268", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "6eb31721825ad6a2", "scanner": "scanner-primary", "fingerprint": "e2d0519635166268", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release.yaml"}, "region": {"startLine": 504}}}]}, {"ruleId": "scanner-e2d0519635166268", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "4ff45e227c75397e", "scanner": "scanner-primary", "fingerprint": "e2d0519635166268", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release.yaml"}, "region": {"startLine": 525}}}]}, {"ruleId": "scanner-e2d0519635166268", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "1ab250a2cd39ee49", "scanner": "scanner-primary", "fingerprint": "e2d0519635166268", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release.yaml"}, "region": {"startLine": 555}}}]}, {"ruleId": "scanner-7dc7c1e428a24a89", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "55c4144d6305e149", "scanner": "scanner-primary", "fingerprint": "7dc7c1e428a24a89", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bfca6cfa14ed275e", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "605c75de6da9e5f5", "scanner": "scanner-primary", "fingerprint": "bfca6cfa14ed275e", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/planning-status-sync.yaml"}, "region": {"startLine": 32}}}]}, {"ruleId": "scanner-bfca6cfa14ed275e", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "036ad8aa00b4dc3c", "scanner": "scanner-primary", "fingerprint": "bfca6cfa14ed275e", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/planning-status-sync.yaml"}, "region": {"startLine": 45}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "97a9a5de61d82fcd", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 19}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "1b0add4759a308ec", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 30}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "a22664b58dca3181", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 35}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "97a9a5de61d82fcd", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 142}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "1b0add4759a308ec", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 145}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "a22664b58dca3181", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 150}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "97a9a5de61d82fcd", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 258}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "1b0add4759a308ec", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 261}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "fa57e468c32f4d09", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 266}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "97a9a5de61d82fcd", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 304}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "1b0add4759a308ec", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 307}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "fa57e468c32f4d09", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 317}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "a22664b58dca3181", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 320}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "90dca2b9a9fbfb28", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 360}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "97a9a5de61d82fcd", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 375}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "be8027642c95a9ce", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 378}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "a22664b58dca3181", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 387}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "a22664b58dca3181", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 460}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "90dca2b9a9fbfb28", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 478}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "97a9a5de61d82fcd", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 495}}}]}, {"ruleId": "scanner-13809ba2d1451d5e", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "6ff8f630da615253", "scanner": "scanner-primary", "fingerprint": "13809ba2d1451d5e", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/blast-radius.yml"}, "region": {"startLine": 31}}}]}, {"ruleId": "scanner-13809ba2d1451d5e", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "99523dda372758e1", "scanner": "scanner-primary", "fingerprint": "13809ba2d1451d5e", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/blast-radius.yml"}, "region": {"startLine": 36}}}]}, {"ruleId": "scanner-13809ba2d1451d5e", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "16a5f030d23b5487", "scanner": "scanner-primary", "fingerprint": "13809ba2d1451d5e", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/blast-radius.yml"}, "region": {"startLine": 113}}}]}, {"ruleId": "scanner-13809ba2d1451d5e", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "b5306930faa86aed", "scanner": "scanner-primary", "fingerprint": "13809ba2d1451d5e", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/blast-radius.yml"}, "region": {"startLine": 146}}}]}, {"ruleId": "scanner-a2cd7a476c513f05", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "ece4c4e2720197db", "scanner": "scanner-primary", "fingerprint": "a2cd7a476c513f05", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/component-docker-build.yaml"}, "region": {"startLine": 80}}}]}, {"ruleId": "scanner-a2cd7a476c513f05", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "1cd35de119af6249", "scanner": "scanner-primary", "fingerprint": "a2cd7a476c513f05", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/component-docker-build.yaml"}, "region": {"startLine": 111}}}]}, {"ruleId": "scanner-a2cd7a476c513f05", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "6d1be8e4e0815580", "scanner": "scanner-primary", "fingerprint": "a2cd7a476c513f05", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/component-docker-build.yaml"}, "region": {"startLine": 121}}}]}, {"ruleId": "scanner-7bf3d0101b76536d", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "5754be0aa8c58bc8", "scanner": "scanner-primary", "fingerprint": "7bf3d0101b76536d", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/nightly-mutation-pilot.yaml"}, "region": {"startLine": 50}}}]}, {"ruleId": "scanner-7bf3d0101b76536d", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "fc5a582f2aa05b23", "scanner": "scanner-primary", "fingerprint": "7bf3d0101b76536d", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/nightly-mutation-pilot.yaml"}, "region": {"startLine": 53}}}]}, {"ruleId": "scanner-7bf3d0101b76536d", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "0b06bdb83971c697", "scanner": "scanner-primary", "fingerprint": "7bf3d0101b76536d", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/nightly-mutation-pilot.yaml"}, "region": {"startLine": 95}}}]}, {"ruleId": "scanner-7bf3d0101b76536d", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "5754be0aa8c58bc8", "scanner": "scanner-primary", "fingerprint": "7bf3d0101b76536d", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/nightly-mutation-pilot.yaml"}, "region": {"startLine": 107}}}]}, {"ruleId": "scanner-7bf3d0101b76536d", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "fc5a582f2aa05b23", "scanner": "scanner-primary", "fingerprint": "7bf3d0101b76536d", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/nightly-mutation-pilot.yaml"}, "region": {"startLine": 110}}}]}, {"ruleId": "scanner-7bf3d0101b76536d", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "1cbf71c0e6860ef6", "scanner": "scanner-primary", "fingerprint": "7bf3d0101b76536d", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/nightly-mutation-pilot.yaml"}, "region": {"startLine": 115}}}]}, {"ruleId": "scanner-7bf3d0101b76536d", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "16dd47fd9375f914", "scanner": "scanner-primary", "fingerprint": "7bf3d0101b76536d", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/nightly-mutation-pilot.yaml"}, "region": {"startLine": 120}}}]}, {"ruleId": "scanner-7bf3d0101b76536d", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "0b06bdb83971c697", "scanner": "scanner-primary", "fingerprint": "7bf3d0101b76536d", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/nightly-mutation-pilot.yaml"}, "region": {"startLine": 149}}}]}, {"ruleId": "scanner-274ba001632db72c", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "fdec05050417ff8e", "scanner": "scanner-primary", "fingerprint": "274ba001632db72c", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/docs-ci.yaml"}, "region": {"startLine": 44}}}]}, {"ruleId": "scanner-274ba001632db72c", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "88ff9e986cf89bac", "scanner": "scanner-primary", "fingerprint": "274ba001632db72c", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/docs-ci.yaml"}, "region": {"startLine": 47}}}]}, {"ruleId": "scanner-274ba001632db72c", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "c16e3bfa042d1182", "scanner": "scanner-primary", "fingerprint": "274ba001632db72c", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/docs-ci.yaml"}, "region": {"startLine": 56}}}]}, {"ruleId": "scanner-274ba001632db72c", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "a11f4378908d1106", "scanner": "scanner-primary", "fingerprint": "274ba001632db72c", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/docs-ci.yaml"}, "region": {"startLine": 68}}}]}, {"ruleId": "scanner-274ba001632db72c", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "c16e3bfa042d1182", "scanner": "scanner-primary", "fingerprint": "274ba001632db72c", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/docs-ci.yaml"}, "region": {"startLine": 73}}}]}, {"ruleId": "scanner-274ba001632db72c", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "fdec05050417ff8e", "scanner": "scanner-primary", "fingerprint": "274ba001632db72c", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/docs-ci.yaml"}, "region": {"startLine": 97}}}]}, {"ruleId": "scanner-274ba001632db72c", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "a11f4378908d1106", "scanner": "scanner-primary", "fingerprint": "274ba001632db72c", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/docs-ci.yaml"}, "region": {"startLine": 100}}}]}, {"ruleId": "scanner-274ba001632db72c", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "c16e3bfa042d1182", "scanner": "scanner-primary", "fingerprint": "274ba001632db72c", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/docs-ci.yaml"}, "region": {"startLine": 105}}}]}, {"ruleId": "scanner-274ba001632db72c", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "fdec05050417ff8e", "scanner": "scanner-primary", "fingerprint": "274ba001632db72c", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/docs-ci.yaml"}, "region": {"startLine": 140}}}]}, {"ruleId": "scanner-274ba001632db72c", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "a11f4378908d1106", "scanner": "scanner-primary", "fingerprint": "274ba001632db72c", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/docs-ci.yaml"}, "region": {"startLine": 144}}}]}, {"ruleId": "scanner-274ba001632db72c", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "fdec05050417ff8e", "scanner": "scanner-primary", "fingerprint": "274ba001632db72c", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/docs-ci.yaml"}, "region": {"startLine": 158}}}]}, {"ruleId": "scanner-274ba001632db72c", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "a11f4378908d1106", "scanner": "scanner-primary", "fingerprint": "274ba001632db72c", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/docs-ci.yaml"}, "region": {"startLine": 161}}}]}, {"ruleId": "scanner-274ba001632db72c", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "c16e3bfa042d1182", "scanner": "scanner-primary", "fingerprint": "274ba001632db72c", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/docs-ci.yaml"}, "region": {"startLine": 166}}}]}, {"ruleId": "scanner-274ba001632db72c", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "fdec05050417ff8e", "scanner": "scanner-primary", "fingerprint": "274ba001632db72c", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/docs-ci.yaml"}, "region": {"startLine": 190}}}]}, {"ruleId": "scanner-274ba001632db72c", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "a11f4378908d1106", "scanner": "scanner-primary", "fingerprint": "274ba001632db72c", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/docs-ci.yaml"}, "region": {"startLine": 193}}}]}, {"ruleId": "scanner-274ba001632db72c", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "c16e3bfa042d1182", "scanner": "scanner-primary", "fingerprint": "274ba001632db72c", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/docs-ci.yaml"}, "region": {"startLine": 198}}}]}, {"ruleId": "scanner-274ba001632db72c", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "fdec05050417ff8e", "scanner": "scanner-primary", "fingerprint": "274ba001632db72c", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/docs-ci.yaml"}, "region": {"startLine": 240}}}]}, {"ruleId": "scanner-274ba001632db72c", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "a11f4378908d1106", "scanner": "scanner-primary", "fingerprint": "274ba001632db72c", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/docs-ci.yaml"}, "region": {"startLine": 243}}}]}, {"ruleId": "scanner-274ba001632db72c", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "c16e3bfa042d1182", "scanner": "scanner-primary", "fingerprint": "274ba001632db72c", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/docs-ci.yaml"}, "region": {"startLine": 248}}}]}, {"ruleId": "scanner-274ba001632db72c", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "fdec05050417ff8e", "scanner": "scanner-primary", "fingerprint": "274ba001632db72c", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/docs-ci.yaml"}, "region": {"startLine": 273}}}]}, {"ruleId": "scanner-07d3f69cebb78389", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "0994a918c709b67b", "scanner": "scanner-primary", "fingerprint": "07d3f69cebb78389", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/config-diff.yaml"}, "region": {"startLine": 58}}}]}, {"ruleId": "scanner-fa7db45bf83654be", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "c5a013cc706019d9", "scanner": "scanner-primary", "fingerprint": "fa7db45bf83654be", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/bench-e2e-record.yaml"}, "region": {"startLine": 64}}}]}, {"ruleId": "scanner-fa7db45bf83654be", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "c097314463413b22", "scanner": "scanner-primary", "fingerprint": "fa7db45bf83654be", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/bench-e2e-record.yaml"}, "region": {"startLine": 67}}}]}, {"ruleId": "scanner-fa7db45bf83654be", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "72b6ae86e97da8df", "scanner": "scanner-primary", "fingerprint": "fa7db45bf83654be", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/bench-e2e-record.yaml"}, "region": {"startLine": 120}}}]}, {"ruleId": "scanner-7cdd4b3d484f530e", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "1751f01becad3dc8", "scanner": "scanner-primary", "fingerprint": "7cdd4b3d484f530e", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/bench-gate-release.yaml"}, "region": {"startLine": 77}}}]}, {"ruleId": "scanner-7cdd4b3d484f530e", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "cabd85a1ae24fb3b", "scanner": "scanner-primary", "fingerprint": "7cdd4b3d484f530e", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/bench-gate-release.yaml"}, "region": {"startLine": 82}}}]}, {"ruleId": "scanner-7cdd4b3d484f530e", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "8465d0f8d759cebb", "scanner": "scanner-primary", "fingerprint": "7cdd4b3d484f530e", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/bench-gate-release.yaml"}, "region": {"startLine": 87}}}]}, {"ruleId": "scanner-12522bf27bea173c", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "b2704fa1d7a70eba", "scanner": "scanner-primary", "fingerprint": "12522bf27bea173c", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/secret-scan.yml"}, "region": {"startLine": 73}}}]}, {"ruleId": "scanner-12522bf27bea173c", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "1e27e94b9ba1a4d4", "scanner": "scanner-primary", "fingerprint": "12522bf27bea173c", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/secret-scan.yml"}, "region": {"startLine": 164}}}]}, {"ruleId": "scanner-12522bf27bea173c", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "2b63c2b7dcbdf116", "scanner": "scanner-primary", "fingerprint": "12522bf27bea173c", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/secret-scan.yml"}, "region": {"startLine": 179}}}]}, {"ruleId": "scanner-d6cef86a9c9ebc4d", "level": "error", "message": {"text": "pull_request_target workflow appears to check out untrusted PR code"}, "properties": {"repobilityId": "9a8aac537201e618", "scanner": "scanner-primary", "fingerprint": "d6cef86a9c9ebc4d", "layer": "cicd", "severity": "high", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pull-request-target"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/secret-scan.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7988b45f7c5c357d", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "4ee9e19ff6b2f9e9", "scanner": "scanner-primary", "fingerprint": "7988b45f7c5c357d", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/forge-e2e-gitlab.yaml"}, "region": {"startLine": 32}}}]}, {"ruleId": "scanner-7988b45f7c5c357d", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "47783ffeb5bff539", "scanner": "scanner-primary", "fingerprint": "7988b45f7c5c357d", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/forge-e2e-gitlab.yaml"}, "region": {"startLine": 35}}}]}, {"ruleId": "scanner-7988b45f7c5c357d", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "410259202e5294ab", "scanner": "scanner-primary", "fingerprint": "7988b45f7c5c357d", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/forge-e2e-gitlab.yaml"}, "region": {"startLine": 48}}}]}, {"ruleId": "scanner-f8cb54459c917a8e", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "e1f20004d9a7ee74", "scanner": "scanner-primary", "fingerprint": "f8cb54459c917a8e", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/weekly-fuzz.yaml"}, "region": {"startLine": 53}}}]}, {"ruleId": "scanner-f8cb54459c917a8e", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "c96d6c5f003485d4", "scanner": "scanner-primary", "fingerprint": "f8cb54459c917a8e", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/weekly-fuzz.yaml"}, "region": {"startLine": 56}}}]}, {"ruleId": "scanner-f8cb54459c917a8e", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "145f1d9d486b4143", "scanner": "scanner-primary", "fingerprint": "f8cb54459c917a8e", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/weekly-fuzz.yaml"}, "region": {"startLine": 61}}}]}, {"ruleId": "scanner-f8cb54459c917a8e", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "145f1d9d486b4143", "scanner": "scanner-primary", "fingerprint": "f8cb54459c917a8e", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/weekly-fuzz.yaml"}, "region": {"startLine": 75}}}]}, {"ruleId": "scanner-f8cb54459c917a8e", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "4c8b748a0a7f551d", "scanner": "scanner-primary", "fingerprint": "f8cb54459c917a8e", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/weekly-fuzz.yaml"}, "region": {"startLine": 126}}}]}, {"ruleId": "scanner-7fafab8369b9d785", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "afb3f54ae4763a4f", "scanner": "scanner-primary", "fingerprint": "7fafab8369b9d785", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/visual-baseline.yaml"}, "region": {"startLine": 39}}}]}, {"ruleId": "scanner-7fafab8369b9d785", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "5ccbc5621e273e75", "scanner": "scanner-primary", "fingerprint": "7fafab8369b9d785", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/visual-baseline.yaml"}, "region": {"startLine": 49}}}]}, {"ruleId": "scanner-7fafab8369b9d785", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "17119292f9e9879f", "scanner": "scanner-primary", "fingerprint": "7fafab8369b9d785", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/visual-baseline.yaml"}, "region": {"startLine": 81}}}]}, {"ruleId": "scanner-c54b29ab5f37069a", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "49b0a5aaeba2917c", "scanner": "scanner-primary", "fingerprint": "c54b29ab5f37069a", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/backtest.yaml"}, "region": {"startLine": 54}}}]}, {"ruleId": "scanner-afeb80bcd548a443", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "9ef70ae67b2073c9", "scanner": "scanner-primary", "fingerprint": "afeb80bcd548a443", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/guard-defaults-impact.yml"}, "region": {"startLine": 54}}}]}, {"ruleId": "scanner-afeb80bcd548a443", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "822f34da3f37cfa7", "scanner": "scanner-primary", "fingerprint": "afeb80bcd548a443", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/guard-defaults-impact.yml"}, "region": {"startLine": 57}}}]}, {"ruleId": "scanner-afeb80bcd548a443", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "b5d6945bb53eb1ef", "scanner": "scanner-primary", "fingerprint": "afeb80bcd548a443", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/guard-defaults-impact.yml"}, "region": {"startLine": 153}}}]}, {"ruleId": "scanner-afeb80bcd548a443", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "59a5913c51d9fff6", "scanner": "scanner-primary", "fingerprint": "afeb80bcd548a443", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/guard-defaults-impact.yml"}, "region": {"startLine": 198}}}]}, {"ruleId": "scanner-a5b6ae3aeb4ef85e", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "54741bd81ca84d6e", "scanner": "scanner-primary", "fingerprint": "a5b6ae3aeb4ef85e", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/security-audit.yaml"}, "region": {"startLine": 38}}}]}, {"ruleId": "scanner-a5b6ae3aeb4ef85e", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "b4b486db0d219ecc", "scanner": "scanner-primary", "fingerprint": "a5b6ae3aeb4ef85e", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/security-audit.yaml"}, "region": {"startLine": 41}}}]}, {"ruleId": "scanner-a5b6ae3aeb4ef85e", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "cd0798115dcd1ceb", "scanner": "scanner-primary", "fingerprint": "a5b6ae3aeb4ef85e", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/security-audit.yaml"}, "region": {"startLine": 82}}}]}, {"ruleId": "scanner-91a03197e6ce0b40", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "138a54498e7606bf", "scanner": "scanner-primary", "fingerprint": "91a03197e6ce0b40", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/self-review-pass2.yaml"}, "region": {"startLine": 35}}}]}, {"ruleId": "scanner-91a03197e6ce0b40", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "c7d62089b3450052", "scanner": "scanner-primary", "fingerprint": "91a03197e6ce0b40", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/self-review-pass2.yaml"}, "region": {"startLine": 44}}}]}, {"ruleId": "scanner-62127913f9c47b02", "level": "note", "message": {"text": "Very large file: tests/ops/test_generate_alertmanager_routes.py (1849 lines)"}, "properties": {"repobilityId": "c36a09c5b4d28eac", "scanner": "scanner-primary", "fingerprint": "62127913f9c47b02", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-3f4f8e70df5b5f20", "level": "note", "message": {"text": "Very large file: tests/ops/test_init_project.py (1496 lines)"}, "properties": {"repobilityId": "3a5e49f5f6eb6baf", "scanner": "scanner-primary", "fingerprint": "3f4f8e70df5b5f20", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-5d13805cc352e89a", "level": "note", "message": {"text": "Very large file: tests/shared/test_property_tools.py (2077 lines)"}, "properties": {"repobilityId": "c92ca8c70437a31a", "scanner": "scanner-primary", "fingerprint": "5d13805cc352e89a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-717accd0f6b3c5d6", "level": "note", "message": {"text": "Very large file: scripts/tools/ops/migrate_rule.py (1240 lines)"}, "properties": {"repobilityId": "13a9fcda282b90a1", "scanner": "scanner-primary", "fingerprint": "717accd0f6b3c5d6", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-ec552ac1c00e27ac", "level": "note", "message": {"text": "Very large file: scripts/tools/ops/init_project.py (1460 lines)"}, "properties": {"repobilityId": "3d6bf3d2833d3643", "scanner": "scanner-primary", "fingerprint": "ec552ac1c00e27ac", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-3ec87b5e648ad3ec", "level": "note", "message": {"text": "Very large file: scripts/tools/ops/scaffold_tenant.py (1166 lines)"}, "properties": {"repobilityId": "9beaef29c31b02dd", "scanner": "scanner-primary", "fingerprint": "3ec87b5e648ad3ec", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-42bd221e6427a99c", "level": "note", "message": {"text": "Very large file: scripts/tools/dx/pr_preflight.py (1394 lines)"}, "properties": {"repobilityId": "23e5bf202b9c024c", "scanner": "scanner-primary", "fingerprint": "42bd221e6427a99c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-4e0310872dd42c75", "level": "note", "message": {"text": "Very large file: scripts/tools/dx/bump_docs.py (1590 lines)"}, "properties": {"repobilityId": "5701b7323e39089b", "scanner": "scanner-primary", "fingerprint": "4e0310872dd42c75", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-c0de672e95dfedb7", "level": "note", "message": {"text": "Very large file: components/tenant-api/docs/docs.go (2175 lines)"}, "properties": {"repobilityId": "81b728c1149fdb07", "scanner": "scanner-primary", "fingerprint": "c0de672e95dfedb7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-99ab1557271d72be", "level": "note", "message": {"text": "63 TODO/FIXME markers"}, "properties": {"repobilityId": "4b38c118003e07d2", "scanner": "scanner-primary", "fingerprint": "99ab1557271d72be", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["maintenance"]}}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "ff049adcdf367773", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-72b2a6250083a784", "level": "warning", "message": {"text": "Placeholder or mock-heavy implementation detected"}, "properties": {"repobilityId": "ed66646d2c5a4bff", "scanner": "scanner-primary", "fingerprint": "72b2a6250083a784", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "incomplete", "generated-repo-pattern"]}}, {"ruleId": "scanner-2d0c7b7ab8f8aacf", "level": "warning", "message": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "properties": {"repobilityId": "7044ec52eb1c46ee", "scanner": "scanner-primary", "fingerprint": "2d0c7b7ab8f8aacf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "critical-flow", "generated-repo-pattern"]}}, {"ruleId": "scanner-ea8f3013f588db25", "level": "note", "message": {"text": "Shallow git history limits provenance confidence"}, "properties": {"repobilityId": "5893fe2cf33f3130", "scanner": "scanner-primary", "fingerprint": "ea8f3013f588db25", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-8424db9c75e04ba4", "level": "none", "message": {"text": "Very short observed git history"}, "properties": {"repobilityId": "16a6b1cd73d8c8b7", "scanner": "scanner-primary", "fingerprint": "8424db9c75e04ba4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-37ae90f0b05d4d9c", "level": "none", "message": {"text": "Commented-code block (7 lines) in tests/conftest.py:41"}, "properties": {"repobilityId": "5966a198fde8637f", "scanner": "scanner-primary", "fingerprint": "37ae90f0b05d4d9c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-cd7bd94f7d30654a", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/ops/test_lint_custom_rules.py:379"}, "properties": {"repobilityId": "06867cdf0594b7f4", "scanner": "scanner-primary", "fingerprint": "cd7bd94f7d30654a", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-0ae5abb6302388b3", "level": "note", "message": {"text": "Legacy-named symbol `patch_legacy` in tests/ops/test_patch_config.py:9"}, "properties": {"repobilityId": "e7d081af6e4dd291", "scanner": "scanner-primary", "fingerprint": "0ae5abb6302388b3", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-e089a449e252832f", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/ops/test_benchmark.py:21"}, "properties": {"repobilityId": "ed6fe3e0ce2f3a1e", "scanner": "scanner-primary", "fingerprint": "e089a449e252832f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-ac9ab679af4aaf4a", "level": "note", "message": {"text": "Legacy-named symbol `script_copy` in tests/ops/test_git_check_lock.py:90"}, "properties": {"repobilityId": "e9c9048e73eceef3", "scanner": "scanner-primary", "fingerprint": "ac9ab679af4aaf4a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-734e9aef9a2260e0", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/ops/test_git_check_lock.py:51"}, "properties": {"repobilityId": "dc75d8d47f34a999", "scanner": "scanner-primary", "fingerprint": "734e9aef9a2260e0", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-ff9c532d429baaf3", "level": "note", "message": {"text": "Legacy-named symbol `test_operator_generate_v2` in tests/ops/test_operator_generate_v2.py:1"}, "properties": {"repobilityId": "a58df67974717249", "scanner": "scanner-primary", "fingerprint": "ff9c532d429baaf3", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-e9132e3cd288e432", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/ops/test_property_based.py:492"}, "properties": {"repobilityId": "c609c30767db7435", "scanner": "scanner-primary", "fingerprint": "e9132e3cd288e432", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2f9e39e888288ee1", "level": "none", "message": {"text": "Commented-code block (7 lines) in tests/shared/_go_mutation_pilot.py:161"}, "properties": {"repobilityId": "c3ac146e3efb60da", "scanner": "scanner-primary", "fingerprint": "2f9e39e888288ee1", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-7458752f8a88220c", "level": "note", "message": {"text": "Legacy-named symbol `exec_time_ms_legacy` in tests/shared/test_helm_chart_log_aggregation.py:427"}, "properties": {"repobilityId": "73046d49f366638f", "scanner": "scanner-primary", "fingerprint": "7458752f8a88220c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-160dba5ecc9fe11d", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/shared/_mutation_pilot.py:417"}, "properties": {"repobilityId": "c48756255177765f", "scanner": "scanner-primary", "fingerprint": "160dba5ecc9fe11d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-6ca95857de6bba1e", "level": "none", "message": {"text": "Commented-code block (8 lines) in tests/shared/test_tool_exit_codes.py:62"}, "properties": {"repobilityId": "9ec0b6bb785eb782", "scanner": "scanner-primary", "fingerprint": "6ca95857de6bba1e", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-316994ad85b86af5", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/shared/test_property_tools.py:160"}, "properties": {"repobilityId": "ffc175120d4a4bcd", "scanner": "scanner-primary", "fingerprint": "316994ad85b86af5", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-7767d5556eb1c9b6", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/dx/test_scaffold_jsx_dep.py:82"}, "properties": {"repobilityId": "3abe667615e02623", "scanner": "scanner-primary", "fingerprint": "7767d5556eb1c9b6", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-81f98c9db7ae0acc", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/dx/test_analyze_bench_history.py:466"}, "properties": {"repobilityId": "a4b829b5558ccc6a", "scanner": "scanner-primary", "fingerprint": "81f98c9db7ae0acc", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-be7451ed9b258c9f", "level": "note", "message": {"text": "Legacy-named symbol `generate_synthetic_v2` in tests/dx/test_generate_tenant_fixture.py:104"}, "properties": {"repobilityId": "c311b2f67d3fac54", "scanner": "scanner-primary", "fingerprint": "be7451ed9b258c9f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-ecbbe1458d0fa26f", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/dx/test_generate_tenant_fixture.py:200"}, "properties": {"repobilityId": "98faef48c2b936f6", "scanner": "scanner-primary", "fingerprint": "ecbbe1458d0fa26f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-c8434521473c3221", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/dx/test_gen_recipe_status_json.py:47"}, "properties": {"repobilityId": "5856555f2556d351", "scanner": "scanner-primary", "fingerprint": "c8434521473c3221", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-47dcfc31a884d71d", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/dx/test_preflight_pass_gate.py:25"}, "properties": {"repobilityId": "9fe2aad0e4c8a885", "scanner": "scanner-primary", "fingerprint": "47dcfc31a884d71d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-ea89bfdf20744f14", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/dx/test_recover_index.py:17"}, "properties": {"repobilityId": "9c31e8480ec66d53", "scanner": "scanner-primary", "fingerprint": "ea89bfdf20744f14", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-6a19c270db4f1f20", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/dx/test_sync_schema.py:23"}, "properties": {"repobilityId": "767048ab56ebdd21", "scanner": "scanner-primary", "fingerprint": "6a19c270db4f1f20", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-d0ef686081bcd175", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/dx/test_preflight_msg_validator.py:183"}, "properties": {"repobilityId": "689519d5394027bf", "scanner": "scanner-primary", "fingerprint": "d0ef686081bcd175", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b4d17b27eebbcaa6", "level": "note", "message": {"text": "Legacy-named symbol `test_replace_is_used_not_copy` in tests/dx/test_atomic_write.py:162"}, "properties": {"repobilityId": "014d144de4fdb8ef", "scanner": "scanner-primary", "fingerprint": "b4d17b27eebbcaa6", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-28711bea81ed64f2", "level": "none", "message": {"text": "Commented-code block (7 lines) in tests/dx/test_bat_label_integrity.py:158"}, "properties": {"repobilityId": "5cc6fa5deaa463b3", "scanner": "scanner-primary", "fingerprint": "28711bea81ed64f2", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-8303a9a3e6a79974", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/dx/test_preflight_marker.py:24"}, "properties": {"repobilityId": "178a3d38eb13db8c", "scanner": "scanner-primary", "fingerprint": "8303a9a3e6a79974", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-282f65e8b1d4faa1", "level": "none", "message": {"text": "Commented-code block (7 lines) in tests/dx/test_verify_release.py:30"}, "properties": {"repobilityId": "2b3b88398daa1fec", "scanner": "scanner-primary", "fingerprint": "282f65e8b1d4faa1", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-e4471991d1c5ee5a", "level": "none", "message": {"text": "Commented-code block (11 lines) in tests/e2e-bench/aggregate.py:173"}, "properties": {"repobilityId": "6fc6af81cb9d301f", "scanner": "scanner-primary", "fingerprint": "e4471991d1c5ee5a", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-d78f62cae4bd033c", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/e2e-bench/driver/driver.py:321"}, "properties": {"repobilityId": "50d5a4e9e7727203", "scanner": "scanner-primary", "fingerprint": "d78f62cae4bd033c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-406126f3df1fc678", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/contract/run_contract_tests.py:145"}, "properties": {"repobilityId": "53767591d62d1a9c", "scanner": "scanner-primary", "fingerprint": "406126f3df1fc678", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-5f4a35e83a30391a", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/lint/test_check_iac_vibe_rules.py:24"}, "properties": {"repobilityId": "a839e1f9987a66da", "scanner": "scanner-primary", "fingerprint": "5f4a35e83a30391a", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b9ddcf5132aa6d04", "level": "note", "message": {"text": "Legacy-named symbol `another_legacy` in tests/lint/test_check_metric_dictionary.py:62"}, "properties": {"repobilityId": "115c06e196c30b0d", "scanner": "scanner-primary", "fingerprint": "b9ddcf5132aa6d04", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-afcc9741182e9260", "level": "note", "message": {"text": "Legacy-named symbol `test_root_readme_pair_legacy` in tests/lint/test_check_bilingual_structure.py:404"}, "properties": {"repobilityId": "dfb9e60883637a24", "scanner": "scanner-primary", "fingerprint": "afcc9741182e9260", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-256ef6004741dc04", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/lint/test_check_bilingual_structure.py:291"}, "properties": {"repobilityId": "3bf9340d1543108e", "scanner": "scanner-primary", "fingerprint": "256ef6004741dc04", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-66379649abdc8994", "level": "note", "message": {"text": "Legacy-named symbol `test_snapshot_v2` in tests/lint/test_snapshot_v2.py:2"}, "properties": {"repobilityId": "611348079def269f", "scanner": "scanner-primary", "fingerprint": "66379649abdc8994", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-ac29d530c86a78ee", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/lint/test_lint_jsx_babel_linecount.py:99"}, "properties": {"repobilityId": "a8e3e942b443faa8", "scanner": "scanner-primary", "fingerprint": "ac29d530c86a78ee", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-1e8b532ee71fc1d8", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/lint/test_check_jsx_i18n.py:309"}, "properties": {"repobilityId": "b6e7ed3336243549", "scanner": "scanner-primary", "fingerprint": "1e8b532ee71fc1d8", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-8c66655b61352ac1", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/lint/test_check_codename_gate.py:357"}, "properties": {"repobilityId": "66aea8798efde6ff", "scanner": "scanner-primary", "fingerprint": "8c66655b61352ac1", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-aa9fd0171711cf0a", "level": "none", "message": {"text": "Commented-code block (7 lines) in tests/e2e/threshold-heatmap.spec.ts:45"}, "properties": {"repobilityId": "b185ff67d3d0a44e", "scanner": "scanner-primary", "fingerprint": "aa9fd0171711cf0a", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-36253e2f39570a21", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/e2e/playground.spec.ts:46"}, "properties": {"repobilityId": "60004eeafa9a3444", "scanner": "scanner-primary", "fingerprint": "36253e2f39570a21", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-fb3f8bff65a04d9f", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/e2e/cicd-setup-wizard.spec.ts:45"}, "properties": {"repobilityId": "6e4b4175569b7c4e", "scanner": "scanner-primary", "fingerprint": "fb3f8bff65a04d9f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-0491fc4858a22bf6", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/e2e/master-onboarding.spec.ts:51"}, "properties": {"repobilityId": "f8e3f52f8b5e723e", "scanner": "scanner-primary", "fingerprint": "0491fc4858a22bf6", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-ec792055a51a7ab5", "level": "none", "message": {"text": "Commented-code block (8 lines) in tests/e2e/config-lint.spec.ts:45"}, "properties": {"repobilityId": "d361c2da6a435e6c", "scanner": "scanner-primary", "fingerprint": "ec792055a51a7ab5", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-90f04d692a9b3f0f", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/e2e/tenant-manager.spec.ts:175"}, "properties": {"repobilityId": "fe7fd4cc828ab65a", "scanner": "scanner-primary", "fingerprint": "90f04d692a9b3f0f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-da9ed85540bb47f3", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/e2e/portal-error-boundary.spec.ts:47"}, "properties": {"repobilityId": "924f7d6efd88efe5", "scanner": "scanner-primary", "fingerprint": "da9ed85540bb47f3", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-cdbb35f54fa4aef8", "level": "none", "message": {"text": "Commented-code block (7 lines) in tests/e2e/rbac-setup-wizard.spec.ts:29"}, "properties": {"repobilityId": "01a5a7784b7ebce1", "scanner": "scanner-primary", "fingerprint": "cdbb35f54fa4aef8", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-4d7c6065b531eeeb", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/e2e/eslint.config.mjs:3"}, "properties": {"repobilityId": "7237d0f024affeb7", "scanner": "scanner-primary", "fingerprint": "4d7c6065b531eeeb", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-78294a3edcedf084", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/e2e/tenant-manager-deeplink.spec.ts:110"}, "properties": {"repobilityId": "4abacb4833c2a66e", "scanner": "scanner-primary", "fingerprint": "78294a3edcedf084", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-547655120e6183e5", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/e2e/saved-views.spec.ts:124"}, "properties": {"repobilityId": "40b9548a7fda581f", "scanner": "scanner-primary", "fingerprint": "547655120e6183e5", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-1e6889e568ce6c93", "level": "none", "message": {"text": "Commented-code block (7 lines) in tests/e2e/fixtures/portal-tool-smoke.ts:94"}, "properties": {"repobilityId": "d025068a514646d3", "scanner": "scanner-primary", "fingerprint": "1e6889e568ce6c93", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-4775a8c601933821", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/federation-e2e/test_federation_e2e.py:72"}, "properties": {"repobilityId": "bca61707ba6da55d", "scanner": "scanner-primary", "fingerprint": "4775a8c601933821", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-f87711c7cd9064e8", "level": "none", "message": {"text": "Commented-code block (8 lines) in scripts/ops/add_t_parallel.py:27"}, "properties": {"repobilityId": "ba0d44a86c637c92", "scanner": "scanner-primary", "fingerprint": "f87711c7cd9064e8", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-c94c15e0610e8cec", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 scripts/ops/dx_run.py:147"}, "properties": {"repobilityId": "e351f056b35bd606", "scanner": "scanner-primary", "fingerprint": "c94c15e0610e8cec", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-b41e02d7daa7bfcb", "level": "none", "message": {"text": "Commented-code block (6 lines) in scripts/ops/route_metrics_through_field.py:50"}, "properties": {"repobilityId": "d0099a2063452e94", "scanner": "scanner-primary", "fingerprint": "b41e02d7daa7bfcb", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-18f151967b315859", "level": "none", "message": {"text": "Commented-code block (6 lines) in scripts/dx/generate_planning_index.py:85"}, "properties": {"repobilityId": "bff4e348dd488500", "scanner": "scanner-primary", "fingerprint": "18f151967b315859", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-de3ffbaf5a50f234", "level": "none", "message": {"text": "Commented-code block (7 lines) in scripts/dx/generate_adr_index.py:27"}, "properties": {"repobilityId": "7d0715511f1d108c", "scanner": "scanner-primary", "fingerprint": "de3ffbaf5a50f234", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-3a9247b4ff9c6e68", "level": "none", "message": {"text": "Commented-code block (9 lines) in scripts/session-guards/preflight_bash.py:58"}, "properties": {"repobilityId": "f7e9bbd69e333c8e", "scanner": "scanner-primary", "fingerprint": "3a9247b4ff9c6e68", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-41bf1f6acc9a3d66", "level": "none", "message": {"text": "Commented-code block (5 lines) in scripts/tools/_lib_godispatch.py:55"}, "properties": {"repobilityId": "faa8befd8d45ea34", "scanner": "scanner-primary", "fingerprint": "41bf1f6acc9a3d66", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-6889a8930bd5999b", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 scripts/tools/_lib_godispatch.py:264"}, "properties": {"repobilityId": "15dc244bdbc55a7b", "scanner": "scanner-primary", "fingerprint": "6889a8930bd5999b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-21336e61a28ff661", "level": "none", "message": {"text": "Commented-code block (6 lines) in scripts/tools/_lib_constants.py:70"}, "properties": {"repobilityId": "8a69adb608bb69b2", "scanner": "scanner-primary", "fingerprint": "21336e61a28ff661", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-ceebd67680366e62", "level": "none", "message": {"text": "Commented-code block (5 lines) in scripts/tools/ops/check_alert.py:87"}, "properties": {"repobilityId": "8fc2a58d6fb533e3", "scanner": "scanner-primary", "fingerprint": "ceebd67680366e62", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-38e9f3817fb2bd7b", "level": "none", "message": {"text": "Commented-code block (7 lines) in scripts/tools/ops/threshold_recommend.py:750"}, "properties": {"repobilityId": "c998b52d4bdc007f", "scanner": "scanner-primary", "fingerprint": "38e9f3817fb2bd7b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-347438eee987b478", "level": "none", "message": {"text": "Commented-code block (6 lines) in scripts/tools/ops/federation_keygen.py:180"}, "properties": {"repobilityId": "778eec66a4ee8a94", "scanner": "scanner-primary", "fingerprint": "347438eee987b478", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-ba9d553018c20444", "level": "none", "message": {"text": "Commented-code block (11 lines) in scripts/tools/ops/lint_custom_rules.py:70"}, "properties": {"repobilityId": "4418d3474597cd89", "scanner": "scanner-primary", "fingerprint": "ba9d553018c20444", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-aa43f6b7d697b20b", "level": "note", "message": {"text": "Legacy-named symbol `has_legacy` in scripts/tools/ops/_grar_validate.py:145"}, "properties": {"repobilityId": "5f6af9940b95f2d3", "scanner": "scanner-primary", "fingerprint": "aa43f6b7d697b20b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-d5073bcc7372c625", "level": "none", "message": {"text": "Commented-code block (7 lines) in scripts/tools/ops/_grar_validate.py:91"}, "properties": {"repobilityId": "9077b07c2b649f05", "scanner": "scanner-primary", "fingerprint": "d5073bcc7372c625", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-ddf949f30f910afa", "level": "none", "message": {"text": "Commented-code block (5 lines) in scripts/tools/ops/migrate_rule.py:757"}, "properties": {"repobilityId": "0e2935c99005aae4", "scanner": "scanner-primary", "fingerprint": "ddf949f30f910afa", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a70d951e54733074", "level": "none", "message": {"text": "Commented-code block (7 lines) in scripts/tools/ops/_grar_merge.py:130"}, "properties": {"repobilityId": "698cc04b6c35670e", "scanner": "scanner-primary", "fingerprint": "a70d951e54733074", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-8177d602d52ebee0", "level": "none", "message": {"text": "Commented-code block (6 lines) in scripts/tools/ops/blast_radius.py:41"}, "properties": {"repobilityId": "75aa357cbe465227", "scanner": "scanner-primary", "fingerprint": "8177d602d52ebee0", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-43f745f8fcb9ab6f", "level": "none", "message": {"text": "Commented-code block (8 lines) in scripts/tools/ops/state_reconcile.py:71"}, "properties": {"repobilityId": "04778c54ae0649cc", "scanner": "scanner-primary", "fingerprint": "43f745f8fcb9ab6f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-126ce5974c41e853", "level": "none", "message": {"text": "Commented-code block (5 lines) in scripts/tools/ops/runtime_audit.py:198"}, "properties": {"repobilityId": "b2d62b95a1f35f8a", "scanner": "scanner-primary", "fingerprint": "126ce5974c41e853", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-87d4c62597e7faea", "level": "none", "message": {"text": "Commented-code block (8 lines) in scripts/tools/ops/init_project.py:726"}, "properties": {"repobilityId": "0c7f8aed520c37e6", "scanner": "scanner-primary", "fingerprint": "87d4c62597e7faea", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-c6c9f59a07055bed", "level": "none", "message": {"text": "Commented-code block (5 lines) in scripts/tools/ops/diagnose.py:354"}, "properties": {"repobilityId": "d24421eef2a9c346", "scanner": "scanner-primary", "fingerprint": "c6c9f59a07055bed", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-98e3719dbbc5a89c", "level": "note", "message": {"text": "Legacy-named symbol `group_v1` in scripts/tools/ops/rule_pack_diff.py:310"}, "properties": {"repobilityId": "7f2968b3b85602f0", "scanner": "scanner-primary", "fingerprint": "98e3719dbbc5a89c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-2df7606cbfe514f0", "level": "none", "message": {"text": "Commented-code block (7 lines) in scripts/tools/ops/rule_pack_diff.py:273"}, "properties": {"repobilityId": "10cc53a31466b4b0", "scanner": "scanner-primary", "fingerprint": "2df7606cbfe514f0", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-213cd89d0970c774", "level": "none", "message": {"text": "Commented-code block (8 lines) in scripts/tools/ops/_grar_render.py:255"}, "properties": {"repobilityId": "152ba93234047674", "scanner": "scanner-primary", "fingerprint": "213cd89d0970c774", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-d792e7dda5211ef6", "level": "note", "message": {"text": "Legacy-named symbol `patch_legacy` in scripts/tools/ops/patch_config.py:58"}, "properties": {"repobilityId": "a079302e6502e22a", "scanner": "scanner-primary", "fingerprint": "d792e7dda5211ef6", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-ecb1e5e5d9ec56eb", "level": "none", "message": {"text": "Commented-code block (5 lines) in scripts/tools/ops/_observed_map_lib.py:262"}, "properties": {"repobilityId": "5eeb49beaec3abac", "scanner": "scanner-primary", "fingerprint": "ecb1e5e5d9ec56eb", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-09e08b8dabf0630e", "level": "none", "message": {"text": "Commented-code block (5 lines) in scripts/tools/ops/validate_migration.py:217"}, "properties": {"repobilityId": "3e3eeef72b1a7637", "scanner": "scanner-primary", "fingerprint": "09e08b8dabf0630e", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-737d18d44a0959c8", "level": "none", "message": {"text": "Commented-code block (8 lines) in scripts/tools/ops/baseline_discovery.py:297"}, "properties": {"repobilityId": "d4a710eda7c3426f", "scanner": "scanner-primary", "fingerprint": "737d18d44a0959c8", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-c9f55354ee161201", "level": "none", "message": {"text": "Commented-code block (5 lines) in scripts/tools/ops/config_diff.py:38"}, "properties": {"repobilityId": "ddfa5f0535aa897b", "scanner": "scanner-primary", "fingerprint": "c9f55354ee161201", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-6105b2e5951f1058", "level": "none", "message": {"text": "Commented-code block (10 lines) in scripts/tools/dx/tenant_verify.py:47"}, "properties": {"repobilityId": "002b6efb9b9ab3a1", "scanner": "scanner-primary", "fingerprint": "6105b2e5951f1058", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-180c70fba9f1b860", "level": "none", "message": {"text": "Commented-code block (5 lines) in scripts/tools/dx/scaffold_lint.py:241"}, "properties": {"repobilityId": "79edb242892e99c4", "scanner": "scanner-primary", "fingerprint": "180c70fba9f1b860", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-1b96ec192cb0bc51", "level": "none", "message": {"text": "Commented-code block (5 lines) in scripts/tools/dx/scan_component_health.py:64"}, "properties": {"repobilityId": "f67e981dc5dbd27f", "scanner": "scanner-primary", "fingerprint": "1b96ec192cb0bc51", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-c9dcf3a2f42f2e80", "level": "none", "message": {"text": "Commented-code block (6 lines) in scripts/tools/dx/axe_lite_static.py:258"}, "properties": {"repobilityId": "4be47e138e74d873", "scanner": "scanner-primary", "fingerprint": "c9dcf3a2f42f2e80", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-956300b2d4f1ec9b", "level": "none", "message": {"text": "Commented-code block (7 lines) in scripts/tools/dx/analyze_bench_history.py:80"}, "properties": {"repobilityId": "dff5a8e2ced61c91", "scanner": "scanner-primary", "fingerprint": "956300b2d4f1ec9b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-65264f58abb2da58", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 scripts/tools/dx/analyze_bench_history.py:809"}, "properties": {"repobilityId": "031050003f1bca81", "scanner": "scanner-primary", "fingerprint": "65264f58abb2da58", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-8904b2a420ab9601", "level": "none", "message": {"text": "Commented-code block (7 lines) in scripts/tools/dx/run_chaos_soak.py:97"}, "properties": {"repobilityId": "19488bb0afcb94ee", "scanner": "scanner-primary", "fingerprint": "8904b2a420ab9601", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-92cf4fb4ca7049dc", "level": "none", "message": {"text": "Commented-code block (6 lines) in scripts/tools/dx/gen_recipe_status_json.py:88"}, "properties": {"repobilityId": "5e5118334fb7efe7", "scanner": "scanner-primary", "fingerprint": "92cf4fb4ca7049dc", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2539d71e67761323", "level": "none", "message": {"text": "Commented-code block (7 lines) in scripts/tools/dx/pr_preflight.py:37"}, "properties": {"repobilityId": "4368213637be267a", "scanner": "scanner-primary", "fingerprint": "2539d71e67761323", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-9a514f86c156f806", "level": "note", "message": {"text": "Legacy-named symbol `generate_synthetic_v2` in scripts/tools/dx/generate_tenant_fixture.py:428"}, "properties": {"repobilityId": "f479f084bb2dd86d", "scanner": "scanner-primary", "fingerprint": "9a514f86c156f806", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-a2aa5e8332ec94b8", "level": "none", "message": {"text": "Commented-code block (8 lines) in scripts/tools/dx/generate_doc_map.py:98"}, "properties": {"repobilityId": "8ac4359a505d44e2", "scanner": "scanner-primary", "fingerprint": "a2aa5e8332ec94b8", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-3410080817d2bb4d", "level": "none", "message": {"text": "Commented-code block (8 lines) in scripts/tools/dx/sync_schema.py:35"}, "properties": {"repobilityId": "5d27a59010840844", "scanner": "scanner-primary", "fingerprint": "3410080817d2bb4d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2c029de1db39fc35", "level": "none", "message": {"text": "Commented-code block (6 lines) in scripts/tools/dx/scaffold_jsx_dep.py:120"}, "properties": {"repobilityId": "32b37b88a1a44e08", "scanner": "scanner-primary", "fingerprint": "2c029de1db39fc35", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-ca4562d4b35567ed", "level": "none", "message": {"text": "Commented-code block (7 lines) in scripts/tools/dx/diag_pr_ci.py:54"}, "properties": {"repobilityId": "d76313b61af72ca2", "scanner": "scanner-primary", "fingerprint": "ca4562d4b35567ed", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b971d593b3674be5", "level": "none", "message": {"text": "Commented-code block (6 lines) in scripts/tools/dx/generate_rule_pack_readme.py:135"}, "properties": {"repobilityId": "92d6bd9a52b176df", "scanner": "scanner-primary", "fingerprint": "b971d593b3674be5", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-5873a7b9b39b5dd5", "level": "none", "message": {"text": "Commented-code block (7 lines) in scripts/tools/dx/compile_custom_alerts.py:126"}, "properties": {"repobilityId": "4eef0d1b5f3f1e68", "scanner": "scanner-primary", "fingerprint": "5873a7b9b39b5dd5", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-40d3eca12266cbaa", "level": "note", "message": {"text": "Legacy-named symbol `unique_old` in scripts/tools/dx/bump_docs.py:1041"}, "properties": {"repobilityId": "711353c6b58efd79", "scanner": "scanner-primary", "fingerprint": "40d3eca12266cbaa", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-4557a954e93511ed", "level": "none", "message": {"text": "Commented-code block (9 lines) in scripts/tools/dx/bump_docs.py:535"}, "properties": {"repobilityId": "2b549557b779feb9", "scanner": "scanner-primary", "fingerprint": "4557a954e93511ed", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-e0981bb04a636deb", "level": "none", "message": {"text": "Commented-code block (7 lines) in scripts/tools/dx/describe_tenant.py:39"}, "properties": {"repobilityId": "4ad2f3de2224c17a", "scanner": "scanner-primary", "fingerprint": "e0981bb04a636deb", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a2c09526086a4482", "level": "none", "message": {"text": "Commented-code block (5 lines) in scripts/tools/dx/inject_related_docs.py:222"}, "properties": {"repobilityId": "27f6d87e2c203449", "scanner": "scanner-primary", "fingerprint": "a2c09526086a4482", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-844bad5a5a0144bd", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 scripts/tools/dx/generate_tool_map.py:216"}, "properties": {"repobilityId": "f8f71cbb4ed717b4", "scanner": "scanner-primary", "fingerprint": "844bad5a5a0144bd", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-e7d90cbed84a99a5", "level": "none", "message": {"text": "Commented-code block (5 lines) in scripts/tools/dx/analyze_tier1_fp_rate.py:184"}, "properties": {"repobilityId": "655c59fa4883a7ff", "scanner": "scanner-primary", "fingerprint": "e7d90cbed84a99a5", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-1d28748a77e64353", "level": "none", "message": {"text": "Commented-code block (5 lines) in scripts/tools/dx/custom_alerts/shape.py:52"}, "properties": {"repobilityId": "b2e084bad2cb691f", "scanner": "scanner-primary", "fingerprint": "1d28748a77e64353", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-729f61d7a432fb1a", "level": "none", "message": {"text": "Commented-code block (5 lines) in scripts/tools/dx/custom_alerts/recipes.py:27"}, "properties": {"repobilityId": "9d24dff2e2251092", "scanner": "scanner-primary", "fingerprint": "729f61d7a432fb1a", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b1b75590a62dfe89", "level": "none", "message": {"text": "Commented-code block (8 lines) in scripts/tools/dx/custom_alerts/loader.py:32"}, "properties": {"repobilityId": "3a722b6b84db3ad0", "scanner": "scanner-primary", "fingerprint": "b1b75590a62dfe89", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-0591781e926c028c", "level": "none", "message": {"text": "Commented-code block (5 lines) in scripts/tools/lint/check_design_token_usage.py:63"}, "properties": {"repobilityId": "52a9910c16bf751e", "scanner": "scanner-primary", "fingerprint": "0591781e926c028c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-8c4549e2cc5cb42c", "level": "none", "message": {"text": "Commented-code block (6 lines) in scripts/tools/lint/validate_mermaid.py:31"}, "properties": {"repobilityId": "2c27f53ae6d82e17", "scanner": "scanner-primary", "fingerprint": "8c4549e2cc5cb42c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-1e4ebc13ce21689c", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 scripts/tools/lint/validate_mermaid.py:375"}, "properties": {"repobilityId": "a0f33a5f458f2219", "scanner": "scanner-primary", "fingerprint": "1e4ebc13ce21689c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-ea4131ca4b305193", "level": "none", "message": {"text": "Commented-code block (6 lines) in scripts/tools/lint/_version_patterns.py:168"}, "properties": {"repobilityId": "4bb64177fe946ad5", "scanner": "scanner-primary", "fingerprint": "ea4131ca4b305193", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-5bbd07ff3dc1ed01", "level": "none", "message": {"text": "Commented-code block (8 lines) in scripts/tools/lint/_lint_helpers.py:51"}, "properties": {"repobilityId": "2cde076e97309136", "scanner": "scanner-primary", "fingerprint": "5bbd07ff3dc1ed01", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-5248ee5c251e1aa5", "level": "none", "message": {"text": "Commented-code block (5 lines) in scripts/tools/lint/check_doc_k8s_refs.py:88"}, "properties": {"repobilityId": "9dd7e9473bcebebc", "scanner": "scanner-primary", "fingerprint": "5248ee5c251e1aa5", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-7b8fe830ff5d457c", "level": "none", "message": {"text": "Commented-code block (6 lines) in scripts/tools/lint/check_lint_toolchain_fit.py:64"}, "properties": {"repobilityId": "945e769e8be0e1ec", "scanner": "scanner-primary", "fingerprint": "7b8fe830ff5d457c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-7f48fe512a5e3144", "level": "none", "message": {"text": "Commented-code block (5 lines) in scripts/tools/lint/check_playwright_rtl_drift.py:91"}, "properties": {"repobilityId": "606200d28f6e5158", "scanner": "scanner-primary", "fingerprint": "7f48fe512a5e3144", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-aa1e6ea30e3c13e4", "level": "none", "message": {"text": "Commented-code block (6 lines) in scripts/tools/lint/lint_jsx_babel.py:148"}, "properties": {"repobilityId": "3cd5389b9c45fd27", "scanner": "scanner-primary", "fingerprint": "aa1e6ea30e3c13e4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-aa1b2bec627b442f", "level": "none", "message": {"text": "Commented-code block (7 lines) in scripts/tools/lint/check_iac_vibe_rules.py:93"}, "properties": {"repobilityId": "19d11b83ab564b5d", "scanner": "scanner-primary", "fingerprint": "aa1b2bec627b442f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-e3192de461fd8118", "level": "none", "message": {"text": "Commented-code block (5 lines) in scripts/tools/lint/check_dist_source_consistency.py:84"}, "properties": {"repobilityId": "e8d84483296f2145", "scanner": "scanner-primary", "fingerprint": "e3192de461fd8118", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-269a0237ef22892c", "level": "none", "message": {"text": "Commented-code block (5 lines) in scripts/tools/lint/check_codename_gate.py:110"}, "properties": {"repobilityId": "ada2355868d3fe2d", "scanner": "scanner-primary", "fingerprint": "269a0237ef22892c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-6f820bd019453590", "level": "none", "message": {"text": "Commented-code block (5 lines) in scripts/tools/lint/check_helm_values_secrets.py:148"}, "properties": {"repobilityId": "bd7ad3c1e6223cc9", "scanner": "scanner-primary", "fingerprint": "6f820bd019453590", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-48fa9473491f0a41", "level": "none", "message": {"text": "Commented-code block (5 lines) in scripts/tools/lint/check_window_x_no_fallback.py:99"}, "properties": {"repobilityId": "acf829accfd8c49a", "scanner": "scanner-primary", "fingerprint": "48fa9473491f0a41", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-5d5ea488295f15c1", "level": "none", "message": {"text": "Commented-code block (5 lines) in scripts/tools/lint/check_property_coverage.py:251"}, "properties": {"repobilityId": "7896fb5426ec9dea", "scanner": "scanner-primary", "fingerprint": "5d5ea488295f15c1", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-0bc7465df2e6cd29", "level": "none", "message": {"text": "Commented-code block (5 lines) in scripts/tools/lint/check_doc_datools_cmds.py:42"}, "properties": {"repobilityId": "bd202b4cd6aa0d41", "scanner": "scanner-primary", "fingerprint": "0bc7465df2e6cd29", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-acf0f868bbe6ce6b", "level": "none", "message": {"text": "Commented-code block (11 lines) in scripts/tools/lint/check_devrules_size.py:37"}, "properties": {"repobilityId": "2179cc1853452da4", "scanner": "scanner-primary", "fingerprint": "acf0f868bbe6ce6b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-af87ca363ad6349e", "level": "none", "message": {"text": "Commented-code block (9 lines) in scripts/tools/lint/check_jsx_i18n.py:187"}, "properties": {"repobilityId": "1a437ce1c64fdd21", "scanner": "scanner-primary", "fingerprint": "af87ca363ad6349e", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2d59e22494fb190d", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 scripts/tools/lint/check_open_encoding.py:118"}, "properties": {"repobilityId": "403fbe1351fc6971", "scanner": "scanner-primary", "fingerprint": "2d59e22494fb190d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-79c54a474a84c8d1", "level": "none", "message": {"text": "Commented-code block (6 lines) in scripts/tools/lint/check_log_egress_policy.py:195"}, "properties": {"repobilityId": "679c95ccc2ee91bd", "scanner": "scanner-primary", "fingerprint": "79c54a474a84c8d1", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-22336f26dc58fec1", "level": "none", "message": {"text": "Commented-code block (6 lines) in scripts/tools/lint/check_subprocess_timeout.py:142"}, "properties": {"repobilityId": "4182e80be8b1456e", "scanner": "scanner-primary", "fingerprint": "22336f26dc58fec1", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a766b31158f03be9", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 scripts/tools/lint/check_subprocess_timeout.py:38"}, "properties": {"repobilityId": "78eee8f3d670063e", "scanner": "scanner-primary", "fingerprint": "a766b31158f03be9", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-4369f2bbcf58a40e", "level": "none", "message": {"text": "Commented-code block (8 lines) in scripts/tools/lint/check_doc_links.py:363"}, "properties": {"repobilityId": "a9abe4bfd3cfdc63", "scanner": "scanner-primary", "fingerprint": "4369f2bbcf58a40e", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-fac1bb284a425208", "level": "note", "message": {"text": "Legacy-named symbol `_fix_working_copy` in scripts/tools/lint/check_head_blob_hygiene.py:354"}, "properties": {"repobilityId": "97e5ee58303c5336", "scanner": "scanner-primary", "fingerprint": "fac1bb284a425208", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-8d886c304cbffa5d", "level": "none", "message": {"text": "Commented-code block (5 lines) in scripts/tools/lint/check_head_blob_hygiene.py:279"}, "properties": {"repobilityId": "ae7174913c212b2f", "scanner": "scanner-primary", "fingerprint": "8d886c304cbffa5d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-16558599d6c56f90", "level": "none", "message": {"text": "Commented-code block (5 lines) in scripts/tools/lint/check_hardcode_tenant.py:85"}, "properties": {"repobilityId": "99f09e00ec736d11", "scanner": "scanner-primary", "fingerprint": "16558599d6c56f90", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-51a8689fd0ac55db", "level": "none", "message": {"text": "Commented-code block (6 lines) in scripts/tools/lint/lint_tool_consistency.py:428"}, "properties": {"repobilityId": "598700064d112ea0", "scanner": "scanner-primary", "fingerprint": "51a8689fd0ac55db", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b1f76abf3be3efc8", "level": "none", "message": {"text": "Commented-code block (7 lines) in scripts/tools/lint/check_single_writer_invariant.py:91"}, "properties": {"repobilityId": "7cf6fd6223440f94", "scanner": "scanner-primary", "fingerprint": "b1f76abf3be3efc8", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-4afc2071ea97fe82", "level": "none", "message": {"text": "Commented-code block (5 lines) in scripts/tools/lint/validate_docs_versions.py:549"}, "properties": {"repobilityId": "7ece82c3cbf6057a", "scanner": "scanner-primary", "fingerprint": "4afc2071ea97fe82", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-c82a1a639238b237", "level": "none", "message": {"text": "Commented-code block (6 lines) in scripts/tools/lint/check_codename_leak.py:81"}, "properties": {"repobilityId": "ad6da59e89e3c4cd", "scanner": "scanner-primary", "fingerprint": "c82a1a639238b237", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-6720fc9d7f42e5e3", "level": "none", "message": {"text": "Commented-code block (5 lines) in components/da-tools/app/entrypoint.py:222"}, "properties": {"repobilityId": "06892d7c06343849", "scanner": "scanner-primary", "fingerprint": "6720fc9d7f42e5e3", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-4e2f67db5d3b0593", "level": "none", "message": {"text": "Commented-code block (7 lines) in tools/portal/build.mjs:179"}, "properties": {"repobilityId": "07e6855a8d8b5950", "scanner": "scanner-primary", "fingerprint": "4e2f67db5d3b0593", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-31f5c461f730e635", "level": "none", "message": {"text": "Commented-code block (5 lines) in tools/portal/tests/useModalFocusTrap.test.tsx:81"}, "properties": {"repobilityId": "7cec4032cd59c51d", "scanner": "scanner-primary", "fingerprint": "31f5c461f730e635", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-992184ec432b69a4", "level": "none", "message": {"text": "Commented-code block (8 lines) in tools/portal/src/getting-started/wizard.jsx:12"}, "properties": {"repobilityId": "3554c466efbcb71a", "scanner": "scanner-primary", "fingerprint": "992184ec432b69a4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b953dfe23f5a4310", "level": "none", "message": {"text": "Commented-code block (5 lines) in tools/portal/src/interactive/tools/multi-tenant-comparison.jsx:14"}, "properties": {"repobilityId": "1702c8618a40223f", "scanner": "scanner-primary", "fingerprint": "b953dfe23f5a4310", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-f8451f91437a5cb0", "level": "none", "message": {"text": "Commented-code block (5 lines) in tools/portal/src/interactive/tools/alert-builder.jsx:115"}, "properties": {"repobilityId": "716efc6d24be757f", "scanner": "scanner-primary", "fingerprint": "f8451f91437a5cb0", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-fb8088c5d2bff158", "level": "none", "message": {"text": "Commented-code block (6 lines) in tools/portal/src/interactive/tools/template-gallery.jsx:14"}, "properties": {"repobilityId": "550b27c4bb1ae633", "scanner": "scanner-primary", "fingerprint": "fb8088c5d2bff158", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-75d2c7407b966f0f", "level": "none", "message": {"text": "Commented-code block (5 lines) in tools/portal/src/interactive/tools/tenant-manager.jsx:57"}, "properties": {"repobilityId": "421280489db125ea", "scanner": "scanner-primary", "fingerprint": "75d2c7407b966f0f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a75e8adbb4a7a87a", "level": "none", "message": {"text": "Commented-code block (5 lines) in tools/portal/src/interactive/tools/config-lint.jsx:46"}, "properties": {"repobilityId": "78a8ca1595185a22", "scanner": "scanner-primary", "fingerprint": "a75e8adbb4a7a87a", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-235803410d20838d", "level": "none", "message": {"text": "Commented-code block (5 lines) in tools/portal/src/interactive/tools/recipe-builder.jsx:117"}, "properties": {"repobilityId": "f25ae0139335ca8c", "scanner": "scanner-primary", "fingerprint": "235803410d20838d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-58e8db524434dcdc", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 tools/portal/src/interactive/tools/recipe-builder.jsx:198"}, "properties": {"repobilityId": "13cb45ae44eea4f4", "scanner": "scanner-primary", "fingerprint": "58e8db524434dcdc", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-a1a1f2235f02493d", "level": "none", "message": {"text": "Commented-code block (6 lines) in tools/portal/src/interactive/tools/dependency-graph.jsx:75"}, "properties": {"repobilityId": "14f88cb8346f691f", "scanner": "scanner-primary", "fingerprint": "a1a1f2235f02493d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-c00fd95347ab89dc", "level": "none", "message": {"text": "Commented-code block (5 lines) in tools/portal/src/interactive/tools/deployment-wizard.jsx:19"}, "properties": {"repobilityId": "d7e8b3e5224682bf", "scanner": "scanner-primary", "fingerprint": "c00fd95347ab89dc", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-8210d8e3aa644cb5", "level": "none", "message": {"text": "Commented-code block (5 lines) in tools/portal/src/interactive/tools/_common/hooks/useDebouncedValue.js:51"}, "properties": {"repobilityId": "86c8ff92776a8533", "scanner": "scanner-primary", "fingerprint": "8210d8e3aa644cb5", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-97d214ebccaf451d", "level": "none", "message": {"text": "Commented-code block (5 lines) in tools/portal/src/interactive/tools/tenant-manager/components/TenantCard.jsx:42"}, "properties": {"repobilityId": "3e8ef4c85939f8f6", "scanner": "scanner-primary", "fingerprint": "97d214ebccaf451d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-ad040a5bca21e48d", "level": "none", "message": {"text": "Commented-code block (5 lines) in tools/portal/src/interactive/tools/tenant-manager/components/GroupSidebar.jsx:17"}, "properties": {"repobilityId": "00d4d7984b080618", "scanner": "scanner-primary", "fingerprint": "ad040a5bca21e48d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-624e0b26283711c1", "level": "none", "message": {"text": "Commented-code block (8 lines) in tools/portal/src/interactive/tools/tenant-manager/components/CustomAlertsModal.jsx:155"}, "properties": {"repobilityId": "c1ca4a9bb763c884", "scanner": "scanner-primary", "fingerprint": "624e0b26283711c1", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-7061e996a8d66296", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 tools/portal/src/interactive/tools/tenant-manager/components/CustomAlertsModal.jsx:24"}, "properties": {"repobilityId": "9a17f13c2a9aabf7", "scanner": "scanner-primary", "fingerprint": "7061e996a8d66296", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-63baa93dc82d2ab0", "level": "none", "message": {"text": "Commented-code block (7 lines) in tools/portal/src/interactive/tools/tenant-manager/hooks/useSavedViews.js:66"}, "properties": {"repobilityId": "c5769626da94cf84", "scanner": "scanner-primary", "fingerprint": "63baa93dc82d2ab0", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b2790a0398308a00", "level": "none", "message": {"text": "Commented-code block (7 lines) in tools/portal/src/interactive/tools/tenant-manager/hooks/useTenantData.js:154"}, "properties": {"repobilityId": "d5afc5cbeba76368", "scanner": "scanner-primary", "fingerprint": "b2790a0398308a00", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-1fc9d4d61cb0c181", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 tools/portal/src/interactive/tools/tenant-manager/hooks/useTenantData.js:194"}, "properties": {"repobilityId": "fc461dd5e3cf2b06", "scanner": "scanner-primary", "fingerprint": "1fc9d4d61cb0c181", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-f808a4ef3e1071fb", "level": "note", "message": {"text": "14 env vars used in code but missing from .env.example"}, "properties": {"repobilityId": "ce6b2ec4be4ec75a", "scanner": "scanner-primary", "fingerprint": "f808a4ef3e1071fb", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "config-drift"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "e48a2873a414f1fb", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "50b7b8c4a743c755", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "94af1d1bc8076df6", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "413b592e83081844", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "26c0bf9c2a10581b", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "9f2dc00fbb4187f5", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "cef4f93dce36ecbb", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "7a9767aec1762f23", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "c4239ebf80df7e4b", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "1d446118c2832b70", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "10634be0b1693f2a", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-49c98f7cedd9c977", "level": "note", "message": {"text": "Near-duplicate function bodies in 4 places"}, "properties": {"repobilityId": "e6ca9cef6460b244", "scanner": "scanner-primary", "fingerprint": "49c98f7cedd9c977", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-02525d39071dd2c7", "level": "note", "message": {"text": "Near-duplicate function bodies in 5 places"}, "properties": {"repobilityId": "ba733a0b34248efb", "scanner": "scanner-primary", "fingerprint": "02525d39071dd2c7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "421b5275b5c17f27", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "538599be82e7d9fe", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "b8389a4d677a4f1e", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "3f65a12b94398bf8", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "0d6d8130cdf563da", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "1cc694459c14fd7c", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "6ddde92630089d37", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}]}]}