{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-95a6d411b1f5878b", "name": "Possibly dead Python function: key", "shortDescription": {"text": "Possibly dead Python function: key"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-660ee174ad2e4432", "name": "Possibly dead Python function: describe_specific_condition", "shortDescription": {"text": "Possibly dead Python function: describe_specific_condition"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-87da17d0f57f43c3", "name": "Possibly dead Python function: emit", "shortDescription": {"text": "Possibly dead Python function: emit"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ed42d9cfecad8353", "name": "Possibly dead Python function: enable_debug", "shortDescription": {"text": "Possibly dead Python function: enable_debug"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-716da8f8dca565db", "name": "Possibly dead Python function: parse_g22_gnss_enhanced_places", "shortDescription": {"text": "Possibly dead Python function: parse_g22_gnss_enhanced_places"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8f86c95e7479d09b", "name": "Possibly dead Python function: decode_control_activity", "shortDescription": {"text": "Possibly dead Python function: decode_control_activity"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2c843b2272a5a53f", "name": "Possibly dead Python function: decode_vu_identification", "shortDescription": {"text": "Possibly dead Python function: decode_vu_identification"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b04e4d8fd148cd98", "name": "Possibly dead Python function: decode_calibration", "shortDescription": {"text": "Possibly dead Python function: decode_calibration"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ebc942fb9faf3bfb", "name": "Possibly dead Python function: decode_download_activity", "shortDescription": {"text": "Possibly dead Python function: decode_download_activity"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8d7ee91782c428d2", "name": "Possibly dead Python function: decode_place_daily", "shortDescription": {"text": "Possibly dead Python function: decode_place_daily"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d637c28250ceead7", "name": "Possibly dead Python function: decode_gnss_ad", "shortDescription": {"text": "Possibly dead Python function: decode_gnss_ad"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-46716f1771696662", "name": "Possibly dead Python function: decode_overspeeding_control", "shortDescription": {"text": "Possibly dead Python function: decode_overspeeding_control"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-702f1438dd263635", "name": "Possibly dead Python function: decode_overspeeding_event", "shortDescription": {"text": "Possibly dead Python function: decode_overspeeding_event"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-acb7f3c59626f193", "name": "Possibly dead Python function: decode_power_interruption", "shortDescription": {"text": "Possibly dead Python function: decode_power_interruption"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9904b4c47e430ec2", "name": "Possibly dead Python function: decode_load_unload", "shortDescription": {"text": "Possibly dead Python function: decode_load_unload"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3dc27ebd5625a3d4", "name": "Possibly dead Python function: parse_vu_vehicle_identification", "shortDescription": {"text": "Possibly dead Python function: parse_vu_vehicle_identification"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5cf955075ad74dc6", "name": "Possibly dead Python function: parse_g2_card_record", "shortDescription": {"text": "Possibly dead Python function: parse_g2_card_record"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ecb95ca632501c56", "name": "Possibly dead Python function: parse_g2_card_iw_record", "shortDescription": {"text": "Possibly dead Python function: parse_g2_card_iw_record"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a6e9e5048e659450", "name": "Possibly dead Python function: parse_g2_downloadable_period", "shortDescription": {"text": "Possibly dead Python function: parse_g2_downloadable_period"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-72017d49d7c536c2", "name": "Possibly dead Python function: parse_g2_time_adjustment", "shortDescription": {"text": "Possibly dead Python function: parse_g2_time_adjustment"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0523ffe491346ac0", "name": "Possibly dead Python function: parse_g2_company_locks", "shortDescription": {"text": "Possibly dead Python function: parse_g2_company_locks"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9ac4bee429b68d1d", "name": "Possibly dead Python function: parse_g2_its_consent", "shortDescription": {"text": "Possibly dead Python function: parse_g2_its_consent"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f8e9f645d2c6efb0", "name": "Possibly dead Python function: parse_g22_controller_identification", "shortDescription": {"text": "Possibly dead Python function: parse_g22_controller_identification"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0ed6dd8305180297", "name": "Possibly dead Python function: parse_g22_certificate_subtag", "shortDescription": {"text": "Possibly dead Python function: parse_g22_certificate_subtag"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ddd47612126560e2", "name": "Possibly dead Python function: parse_certificate_signature", "shortDescription": {"text": "Possibly dead Python function: parse_certificate_signature"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ad8a4b6034366adf", "name": "Possibly dead Python function: parse_public_key_info", "shortDescription": {"text": "Possibly dead Python function: parse_public_key_info"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f0748652ad6ac260", "name": "Possibly dead Python function: parse_g22_certificate_profile", "shortDescription": {"text": "Possibly dead Python function: parse_g22_certificate_profile"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3272c2fa5684481f", "name": "Possibly dead Python function: is_signature", "shortDescription": {"text": "Possibly dead Python function: is_signature"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9710c8d059e53154", "name": "No frontend routes/components detected", "shortDescription": {"text": "No frontend routes/components detected"}, "fullDescription": {"text": "No React/Vue/Next routes were found. This is fine for backend-only repos."}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-eac7b03ba3594555", "name": "Insecure pattern 'weak_hash' in signature_validator.py:551", "shortDescription": {"text": "Insecure pattern 'weak_hash' in signature_validator.py:551"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6372cebde0220094", "name": "No auth library detected", "shortDescription": {"text": "No auth library detected"}, "fullDescription": {"text": "The scanner did not find any standard auth library (JWT, OAuth, NextAuth, Auth0, etc.). The repo has auth/admin/session surface indicators, so auth may live in custom code, in a separate service, or be missing."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7efbda965f283c17", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/setup-python@v6 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-46c644c6227e4d4a", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/setup-python@v6 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1838a141491ce38c", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6ba9bfab5f283202", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/setup-python@v6 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-74f8af34a339f700", "name": "Very large file: core/vu_trep_decoders.py (1352 lines)", "shortDescription": {"text": "Very large file: core/vu_trep_decoders.py (1352 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3ab5d313dda8e5f9", "name": "Debug logging residue appears in source files", "shortDescription": {"text": "Debug logging residue appears in source files"}, "fullDescription": {"text": "Found 27 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ea8f3013f588db25", "name": "Shallow git history limits provenance confidence", "shortDescription": {"text": "Shallow git history limits provenance confidence"}, "fullDescription": {"text": "The repository is a shallow clone. Origin/evolution analysis cannot distinguish fresh generation, imported legacy code, or long-lived human code with high confidence."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8424db9c75e04ba4", "name": "Very short observed git history", "shortDescription": {"text": "Very short observed git history"}, "fullDescription": {"text": "The repo has multiple source files but two or fewer visible commits. This is not a failure by itself, but it lowers confidence in evolution-based diagnosis."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-57d5526a33857de9", "name": "Commented-code block (5 lines) in signature_validator.py:73", "shortDescription": {"text": "Commented-code block (5 lines) in signature_validator.py:73"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f52833c04de8a79d", "name": "Commented-code block (5 lines) in gui_tree.py:904", "shortDescription": {"text": "Commented-code block (5 lines) in gui_tree.py:904"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b09678dc76c588a5", "name": "Legacy-named symbol `ts_old` in tests/test_gen22.py:311", "shortDescription": {"text": "Legacy-named symbol `ts_old` in tests/test_gen22.py:311"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-897c99f1f0ac99f3", "name": "Commented-code block (7 lines) in core/event_fault_codes.py:89", "shortDescription": {"text": "Commented-code block (7 lines) in core/event_fault_codes.py:89"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7f0c3699c7dab6c9", "name": "Commented-code block (8 lines) in core/vu_record_dispatcher.py:34", "shortDescription": {"text": "Commented-code block (8 lines) in core/vu_record_dispatcher.py:34"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-5cb609a7f1012e44", "name": "Commented-code block (5 lines) in core/vu_trep_decoders.py:215", "shortDescription": {"text": "Commented-code block (5 lines) in core/vu_trep_decoders.py:215"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2c04133e54348533", "name": "Near-duplicate function bodies in 2 places", "shortDescription": {"text": "Near-duplicate function bodies in 2 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\ncore/vu_record_dispatcher.py:decode_gnss_place_auth, core/vu_record_dispatcher.py:decode_gnss_place\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/20636"}, "properties": {"repository": "Syax89/ddd-tachograph-reader", "repoUrl": "https://github.com/Syax89/ddd-tachograph-reader", "branch": "main"}, "results": [{"ruleId": "scanner-95a6d411b1f5878b", "level": "note", "message": {"text": "Possibly dead Python function: key"}, "properties": {"repobilityId": "82ad9f64418e6fec", "scanner": "scanner-primary", "fingerprint": "95a6d411b1f5878b", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "gui_tree.py:423"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-660ee174ad2e4432", "level": "note", "message": {"text": "Possibly dead Python function: describe_specific_condition"}, "properties": {"repobilityId": "36856a6a56bf722a", "scanner": "scanner-primary", "fingerprint": "660ee174ad2e4432", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "core/event_fault_codes.py:196"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-87da17d0f57f43c3", "level": "note", "message": {"text": "Possibly dead Python function: emit"}, "properties": {"repobilityId": "fecc700ec874b669", "scanner": "scanner-primary", "fingerprint": "87da17d0f57f43c3", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "core/logger.py:26"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ed42d9cfecad8353", "level": "note", "message": {"text": "Possibly dead Python function: enable_debug"}, "properties": {"repobilityId": "a35ce30f3acd3c96", "scanner": "scanner-primary", "fingerprint": "ed42d9cfecad8353", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "core/logger.py:79"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-716da8f8dca565db", "level": "note", "message": {"text": "Possibly dead Python function: parse_g22_gnss_enhanced_places"}, "properties": {"repobilityId": "83983dfd8abfd124", "scanner": "scanner-primary", "fingerprint": "716da8f8dca565db", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "core/g22_card_decoders.py:111"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8f86c95e7479d09b", "level": "note", "message": {"text": "Possibly dead Python function: decode_control_activity"}, "properties": {"repobilityId": "a7796f082dd503ba", "scanner": "scanner-primary", "fingerprint": "8f86c95e7479d09b", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "core/vu_record_dispatcher.py:134"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2c843b2272a5a53f", "level": "note", "message": {"text": "Possibly dead Python function: decode_vu_identification"}, "properties": {"repobilityId": "718a70bffc3bfaf1", "scanner": "scanner-primary", "fingerprint": "2c843b2272a5a53f", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "core/vu_record_dispatcher.py:150"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b04e4d8fd148cd98", "level": "note", "message": {"text": "Possibly dead Python function: decode_calibration"}, "properties": {"repobilityId": "0dd04a7ed143d808", "scanner": "scanner-primary", "fingerprint": "b04e4d8fd148cd98", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "core/vu_record_dispatcher.py:170"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ebc942fb9faf3bfb", "level": "note", "message": {"text": "Possibly dead Python function: decode_download_activity"}, "properties": {"repobilityId": "01e61c778acd1c31", "scanner": "scanner-primary", "fingerprint": "ebc942fb9faf3bfb", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "core/vu_record_dispatcher.py:235"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8d7ee91782c428d2", "level": "note", "message": {"text": "Possibly dead Python function: decode_place_daily"}, "properties": {"repobilityId": "ce3afca9d603f8a8", "scanner": "scanner-primary", "fingerprint": "8d7ee91782c428d2", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "core/vu_record_dispatcher.py:391"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d637c28250ceead7", "level": "note", "message": {"text": "Possibly dead Python function: decode_gnss_ad"}, "properties": {"repobilityId": "8b668e06d83831d8", "scanner": "scanner-primary", "fingerprint": "d637c28250ceead7", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "core/vu_record_dispatcher.py:432"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-46716f1771696662", "level": "note", "message": {"text": "Possibly dead Python function: decode_overspeeding_control"}, "properties": {"repobilityId": "a6bb89af40df2a75", "scanner": "scanner-primary", "fingerprint": "46716f1771696662", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "core/vu_record_dispatcher.py:450"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-702f1438dd263635", "level": "note", "message": {"text": "Possibly dead Python function: decode_overspeeding_event"}, "properties": {"repobilityId": "0977544294c96d34", "scanner": "scanner-primary", "fingerprint": "702f1438dd263635", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "core/vu_record_dispatcher.py:463"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-acb7f3c59626f193", "level": "note", "message": {"text": "Possibly dead Python function: decode_power_interruption"}, "properties": {"repobilityId": "5a50167d1abcd30e", "scanner": "scanner-primary", "fingerprint": "acb7f3c59626f193", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "core/vu_record_dispatcher.py:482"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9904b4c47e430ec2", "level": "note", "message": {"text": "Possibly dead Python function: decode_load_unload"}, "properties": {"repobilityId": "fdb05384cfe7e212", "scanner": "scanner-primary", "fingerprint": "9904b4c47e430ec2", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "core/vu_record_dispatcher.py:547"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3dc27ebd5625a3d4", "level": "note", "message": {"text": "Possibly dead Python function: parse_vu_vehicle_identification"}, "properties": {"repobilityId": "5106839399895e69", "scanner": "scanner-primary", "fingerprint": "3dc27ebd5625a3d4", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "core/vu_trep_decoders.py:69"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5cf955075ad74dc6", "level": "note", "message": {"text": "Possibly dead Python function: parse_g2_card_record"}, "properties": {"repobilityId": "2aa59555ca98c4f7", "scanner": "scanner-primary", "fingerprint": "5cf955075ad74dc6", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "core/g2_decoders.py:20"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ecb95ca632501c56", "level": "note", "message": {"text": "Possibly dead Python function: parse_g2_card_iw_record"}, "properties": {"repobilityId": "76185f900ac05cdb", "scanner": "scanner-primary", "fingerprint": "ecb95ca632501c56", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "core/g2_decoders.py:27"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a6e9e5048e659450", "level": "note", "message": {"text": "Possibly dead Python function: parse_g2_downloadable_period"}, "properties": {"repobilityId": "36b528e504822de8", "scanner": "scanner-primary", "fingerprint": "a6e9e5048e659450", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "core/g2_decoders.py:36"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-72017d49d7c536c2", "level": "note", "message": {"text": "Possibly dead Python function: parse_g2_time_adjustment"}, "properties": {"repobilityId": "779eb2c9c332ecfa", "scanner": "scanner-primary", "fingerprint": "72017d49d7c536c2", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "core/g2_decoders.py:57"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0523ffe491346ac0", "level": "note", "message": {"text": "Possibly dead Python function: parse_g2_company_locks"}, "properties": {"repobilityId": "fe21e0cc1266c87e", "scanner": "scanner-primary", "fingerprint": "0523ffe491346ac0", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "core/g2_decoders.py:64"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9ac4bee429b68d1d", "level": "note", "message": {"text": "Possibly dead Python function: parse_g2_its_consent"}, "properties": {"repobilityId": "81f5f8811929db81", "scanner": "scanner-primary", "fingerprint": "9ac4bee429b68d1d", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "core/g2_decoders.py:340"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f8e9f645d2c6efb0", "level": "note", "message": {"text": "Possibly dead Python function: parse_g22_controller_identification"}, "properties": {"repobilityId": "9810b191227d3dcc", "scanner": "scanner-primary", "fingerprint": "f8e9f645d2c6efb0", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "core/g2_decoders.py:346"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0ed6dd8305180297", "level": "note", "message": {"text": "Possibly dead Python function: parse_g22_certificate_subtag"}, "properties": {"repobilityId": "919202adc65b9125", "scanner": "scanner-primary", "fingerprint": "0ed6dd8305180297", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "core/cert_decoders.py:43"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ddd47612126560e2", "level": "note", "message": {"text": "Possibly dead Python function: parse_certificate_signature"}, "properties": {"repobilityId": "be14022625a8e0c7", "scanner": "scanner-primary", "fingerprint": "ddd47612126560e2", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "core/cert_decoders.py:99"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ad8a4b6034366adf", "level": "note", "message": {"text": "Possibly dead Python function: parse_public_key_info"}, "properties": {"repobilityId": "4d2aaeea61b72831", "scanner": "scanner-primary", "fingerprint": "ad8a4b6034366adf", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "core/cert_decoders.py:124"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f0748652ad6ac260", "level": "note", "message": {"text": "Possibly dead Python function: parse_g22_certificate_profile"}, "properties": {"repobilityId": "737b2fe4634cc6f0", "scanner": "scanner-primary", "fingerprint": "f0748652ad6ac260", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "core/cert_decoders.py:163"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3272c2fa5684481f", "level": "note", "message": {"text": "Possibly dead Python function: is_signature"}, "properties": {"repobilityId": "0fc41bf12f9a0a2b", "scanner": "scanner-primary", "fingerprint": "3272c2fa5684481f", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "core/decoder_registry.py:510"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9710c8d059e53154", "level": "none", "message": {"text": "No frontend routes/components detected"}, "properties": {"repobilityId": "44ca61485762e494", "scanner": "scanner-primary", "fingerprint": "9710c8d059e53154", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["coverage"]}}, {"ruleId": "scanner-eac7b03ba3594555", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in signature_validator.py:551"}, "properties": {"repobilityId": "f3ccd5faa43d682f", "scanner": "scanner-primary", "fingerprint": "eac7b03ba3594555", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "signature_validator.py"}, "region": {"startLine": 551}}}]}, {"ruleId": "scanner-6372cebde0220094", "level": "warning", "message": {"text": "No auth library detected"}, "properties": {"repobilityId": "a5b6035a5bbf8054", "scanner": "scanner-primary", "fingerprint": "6372cebde0220094", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["coverage", "auth"]}}, {"ruleId": "scanner-7efbda965f283c17", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "925b528a63157ee6", "scanner": "scanner-primary", "fingerprint": "7efbda965f283c17", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/test.yml"}, "region": {"startLine": 15}}}]}, {"ruleId": "scanner-7efbda965f283c17", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "925b528a63157ee6", "scanner": "scanner-primary", "fingerprint": "7efbda965f283c17", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/test.yml"}, "region": {"startLine": 39}}}]}, {"ruleId": "scanner-46c644c6227e4d4a", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "111ded8435b78771", "scanner": "scanner-primary", "fingerprint": "46c644c6227e4d4a", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release.yml"}, "region": {"startLine": 32}}}]}, {"ruleId": "scanner-46c644c6227e4d4a", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "f0c3d4499b6cd885", "scanner": "scanner-primary", "fingerprint": "46c644c6227e4d4a", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release.yml"}, "region": {"startLine": 92}}}]}, {"ruleId": "scanner-46c644c6227e4d4a", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "111ded8435b78771", "scanner": "scanner-primary", "fingerprint": "46c644c6227e4d4a", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release.yml"}, "region": {"startLine": 104}}}]}, {"ruleId": "scanner-46c644c6227e4d4a", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "f0c3d4499b6cd885", "scanner": "scanner-primary", "fingerprint": "46c644c6227e4d4a", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release.yml"}, "region": {"startLine": 138}}}]}, {"ruleId": "scanner-1838a141491ce38c", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "b8fd4f5048f96576", "scanner": "scanner-primary", "fingerprint": "1838a141491ce38c", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6ba9bfab5f283202", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "e435dbf05ef2027b", "scanner": "scanner-primary", "fingerprint": "6ba9bfab5f283202", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/build.yml"}, "region": {"startLine": 20}}}]}, {"ruleId": "scanner-6ba9bfab5f283202", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "b7d0896f775b62a6", "scanner": "scanner-primary", "fingerprint": "6ba9bfab5f283202", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/build.yml"}, "region": {"startLine": 89}}}]}, {"ruleId": "scanner-74f8af34a339f700", "level": "note", "message": {"text": "Very large file: core/vu_trep_decoders.py (1352 lines)"}, "properties": {"repobilityId": "d72625f41620b939", "scanner": "scanner-primary", "fingerprint": "74f8af34a339f700", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "02d921c15783fc01", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-ea8f3013f588db25", "level": "note", "message": {"text": "Shallow git history limits provenance confidence"}, "properties": {"repobilityId": "e73179e4af6a8444", "scanner": "scanner-primary", "fingerprint": "ea8f3013f588db25", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-8424db9c75e04ba4", "level": "none", "message": {"text": "Very short observed git history"}, "properties": {"repobilityId": "2a7ff134cdae23b3", "scanner": "scanner-primary", "fingerprint": "8424db9c75e04ba4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-57d5526a33857de9", "level": "none", "message": {"text": "Commented-code block (5 lines) in signature_validator.py:73"}, "properties": {"repobilityId": "62e5205bd1907a61", "scanner": "scanner-primary", "fingerprint": "57d5526a33857de9", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-f52833c04de8a79d", "level": "none", "message": {"text": "Commented-code block (5 lines) in gui_tree.py:904"}, "properties": {"repobilityId": "e9db0383b3c7b150", "scanner": "scanner-primary", "fingerprint": "f52833c04de8a79d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b09678dc76c588a5", "level": "note", "message": {"text": "Legacy-named symbol `ts_old` in tests/test_gen22.py:311"}, "properties": {"repobilityId": "55da7767aa5d3b8c", "scanner": "scanner-primary", "fingerprint": "b09678dc76c588a5", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-897c99f1f0ac99f3", "level": "none", "message": {"text": "Commented-code block (7 lines) in core/event_fault_codes.py:89"}, "properties": {"repobilityId": "e0f2dc4458477dd6", "scanner": "scanner-primary", "fingerprint": "897c99f1f0ac99f3", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-7f0c3699c7dab6c9", "level": "none", "message": {"text": "Commented-code block (8 lines) in core/vu_record_dispatcher.py:34"}, "properties": {"repobilityId": "712d82620a8be06f", "scanner": "scanner-primary", "fingerprint": "7f0c3699c7dab6c9", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-5cb609a7f1012e44", "level": "none", "message": {"text": "Commented-code block (5 lines) in core/vu_trep_decoders.py:215"}, "properties": {"repobilityId": "30d7c834abf1b654", "scanner": "scanner-primary", "fingerprint": "5cb609a7f1012e44", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "01fe8012897cb7dd", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "53f12936df99aab3", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}]}]}