{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-885c5ffbda9648b6", "name": "Possibly dead Python function: remove_doc", "shortDescription": {"text": "Possibly dead Python function: remove_doc"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-235aada37c3abd94", "name": "Possibly dead Python function: extract_headings", "shortDescription": {"text": "Possibly dead Python function: extract_headings"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f83fd13ba367273b", "name": "Possibly dead Python function: execute", "shortDescription": {"text": "Possibly dead Python function: execute"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-381df4d76b04ff1e", "name": "Possibly dead Python function: execute", "shortDescription": {"text": "Possibly dead Python function: execute"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7b189aa13611222e", "name": "Possibly dead Python function: execute", "shortDescription": {"text": "Possibly dead Python function: execute"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-df474172a6b4140b", "name": "Possibly dead Python function: execute", "shortDescription": {"text": "Possibly dead Python function: execute"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cd4481da7a856beb", "name": "Possibly dead Python function: execute", "shortDescription": {"text": "Possibly dead Python function: execute"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fc042d5fbe904ae4", "name": "Possibly dead Python function: execute", "shortDescription": {"text": "Possibly dead Python function: execute"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-24947aac2a69021d", "name": "Possibly dead Python function: execute", "shortDescription": {"text": "Possibly dead Python function: execute"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-62c059a24a846b14", "name": "Possibly dead Python function: execute", "shortDescription": {"text": "Possibly dead Python function: execute"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-846913be3b4cddfa", "name": "Possibly dead Python function: execute", "shortDescription": {"text": "Possibly dead Python function: execute"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f732ba3ba8dba101", "name": "Possibly dead Python function: execute", "shortDescription": {"text": "Possibly dead Python function: execute"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a531b0b1a0d8a272", "name": "Possibly dead Python function: execute", "shortDescription": {"text": "Possibly dead Python function: execute"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b7b4324b5c2c47c4", "name": "Possibly dead Python function: execute", "shortDescription": {"text": "Possibly dead Python function: execute"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a6c59f6f94b45233", "name": "Possibly dead Python function: execute", "shortDescription": {"text": "Possibly dead Python function: execute"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5ade91a34f17513b", "name": "Possibly dead Python function: execute", "shortDescription": {"text": "Possibly dead Python function: execute"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bead75b0f9233e05", "name": "No API endpoints detected", "shortDescription": {"text": "No API endpoints detected"}, "fullDescription": {"text": "The scanner did not find FastAPI/Flask/Express/NestJS/GraphQL/gRPC routes. If this repo exposes APIs, the framework may be unsupported."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7f658622bcdfc808", "name": "Stray `console.log` in TS/JS \u2014 desk/src/composables/formCustomisation.ts:132", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 desk/src/composables/formCustomisation.ts:132"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6a5d2dec08ef5c63", "name": "Stray `console.log` in TS/JS \u2014 desk/src/composables/useView.ts:97", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 desk/src/composables/useView.ts:97"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7572e5a172b29407", "name": "Stray `console.log` in TS/JS \u2014 desk/src/components/TypingIndicator.vue:36", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 desk/src/components/TypingIndicator.vue:36"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-dc4cab8838922360", "name": "TODO/FIXME marker in shipping code \u2014 desk/src/components/CommentBox.vue:340", "shortDescription": {"text": "TODO/FIXME marker in shipping code \u2014 desk/src/components/CommentBox.vue:340"}, "fullDescription": {"text": "Track in /reviews or /issues, not as a code comment that rots.\n\nWhy: Drift control \u2014 shouldn't be the same as Quality TODO scanner.\nRule id: fq.todo-marker"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-6543c6e403fa763a", "name": "TODO/FIXME marker in shipping code \u2014 desk/src/components/EmailArea.vue:251", "shortDescription": {"text": "TODO/FIXME marker in shipping code \u2014 desk/src/components/EmailArea.vue:251"}, "fullDescription": {"text": "Track in /reviews or /issues, not as a code comment that rots.\n\nWhy: Drift control \u2014 shouldn't be the same as Quality TODO scanner.\nRule id: fq.todo-marker"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-140b9a0df37cde52", "name": "Stray `console.log` in TS/JS \u2014 desk/src/components/EmailArea.vue:261", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 desk/src/components/EmailArea.vue:261"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8e72cf56d46680b1", "name": "Stray `console.log` in TS/JS \u2014 desk/src/components/TicketField.vue:128", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 desk/src/components/TicketField.vue:128"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6c930393dfeaaac5", "name": "Stray `console.log` in TS/JS \u2014 desk/src/components/ticket/TicketAgentContact.vue:36", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 desk/src/components/ticket/TicketAgentContact.vue:36"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3dea33dc9ac62f14", "name": "Stray `console.log` in TS/JS \u2014 desk/src/components/telephony/TwilioCallUI.vue:453", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 desk/src/components/telephony/TwilioCallUI.vue:453"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f81b5fb63bf251e0", "name": "TODO/FIXME marker in shipping code \u2014 desk/src/components/ticket-agent/TicketActivityPanel.vue:115", "shortDescription": {"text": "TODO/FIXME marker in shipping code \u2014 desk/src/components/ticket-agent/TicketActivityPanel.vue:115"}, "fullDescription": {"text": "Track in /reviews or /issues, not as a code comment that rots.\n\nWhy: Drift control \u2014 shouldn't be the same as Quality TODO scanner.\nRule id: fq.todo-marker"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-5c94139284d6a619", "name": "TODO/FIXME marker in shipping code \u2014 desk/src/components/ticket-agent/TicketDetailsTab.vue:182", "shortDescription": {"text": "TODO/FIXME marker in shipping code \u2014 desk/src/components/ticket-agent/TicketDetailsTab.vue:182"}, "fullDescription": {"text": "Track in /reviews or /issues, not as a code comment that rots.\n\nWhy: Drift control \u2014 shouldn't be the same as Quality TODO scanner.\nRule id: fq.todo-marker"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-974827f46705a3ef", "name": "TODO/FIXME marker in shipping code \u2014 desk/src/components/view-controls/Filter.vue:252", "shortDescription": {"text": "TODO/FIXME marker in shipping code \u2014 desk/src/components/view-controls/Filter.vue:252"}, "fullDescription": {"text": "Track in /reviews or /issues, not as a code comment that rots.\n\nWhy: Drift control \u2014 shouldn't be the same as Quality TODO scanner.\nRule id: fq.todo-marker"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-9df8376dc5682698", "name": "TODO/FIXME marker in shipping code \u2014 desk/src/pages/ticket/TicketCustomerTemplateFields.vue:64", "shortDescription": {"text": "TODO/FIXME marker in shipping code \u2014 desk/src/pages/ticket/TicketCustomerTemplateFields.vue:64"}, "fullDescription": {"text": "Track in /reviews or /issues, not as a code comment that rots.\n\nWhy: Drift control \u2014 shouldn't be the same as Quality TODO scanner.\nRule id: fq.todo-marker"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-aa5acaa49eb8315b", "name": "Containers defined but no K8s/orchestration manifest found", "shortDescription": {"text": "Containers defined but no K8s/orchestration manifest found"}, "fullDescription": {"text": "Repo has Dockerfiles/compose but no Kubernetes/Nomad manifests. If the target deployment is K8s, the manifests may live in a separate ops repo."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0358f81387ad599f", "name": "Insecure pattern 'direct_innerhtml_assignment' in desk/src/utils.ts:801", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in desk/src/utils.ts:801"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-104c3d87426dd98a", "name": "Insecure pattern 'domparser_html_parse' in desk/src/utils.ts:347", "shortDescription": {"text": "Insecure pattern 'domparser_html_parse' in desk/src/utils.ts:347"}, "fullDescription": {"text": "Found a known-risky pattern (domparser_html_parse). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f3a5f32af739d4e5", "name": "Insecure pattern 'domparser_html_parse' in desk/src/tiptap-extensions.ts:628", "shortDescription": {"text": "Insecure pattern 'domparser_html_parse' in desk/src/tiptap-extensions.ts:628"}, "fullDescription": {"text": "Found a known-risky pattern (domparser_html_parse). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c29bafa602ef514a", "name": "Insecure pattern 'new_function_used' in desk/src/composables/formCustomisation.ts:41", "shortDescription": {"text": "Insecure pattern 'new_function_used' in desk/src/composables/formCustomisation.ts:41"}, "fullDescription": {"text": "Found a known-risky pattern (new_function_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d12e61b8b3f36730", "name": "Insecure pattern 'vue_v_html' in desk/src/components/dialogs.jsx:25", "shortDescription": {"text": "Insecure pattern 'vue_v_html' in desk/src/components/dialogs.jsx:25"}, "fullDescription": {"text": "Found a known-risky pattern (vue_v_html). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0949f26beb95762a", "name": "Insecure pattern 'direct_innerhtml_assignment' in desk/src/components/EmailEditor.vue:339", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in desk/src/components/EmailEditor.vue:339"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-22a62b54dae36ae4", "name": "Insecure pattern 'vue_v_html' in desk/src/components/SearchArticles.vue:39", "shortDescription": {"text": "Insecure pattern 'vue_v_html' in desk/src/components/SearchArticles.vue:39"}, "fullDescription": {"text": "Found a known-risky pattern (vue_v_html). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7b41eaf1501163dd", "name": "Insecure pattern 'vue_v_html' in desk/src/components/ConfirmDialog.vue:8", "shortDescription": {"text": "Insecure pattern 'vue_v_html' in desk/src/components/ConfirmDialog.vue:8"}, "fullDescription": {"text": "Found a known-risky pattern (vue_v_html). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-30b9608c6aeefb9d", "name": "Insecure pattern 'direct_innerhtml_assignment' in desk/src/components/EmailContent.vue:84", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in desk/src/components/EmailContent.vue:84"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4e802a818b0dd843", "name": "Insecure pattern 'domparser_html_parse' in desk/src/components/EmailContent.vue:41", "shortDescription": {"text": "Insecure pattern 'domparser_html_parse' in desk/src/components/EmailContent.vue:41"}, "fullDescription": {"text": "Found a known-risky pattern (domparser_html_parse). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-683de24b8e50754e", "name": "Insecure pattern 'vue_v_html' in desk/src/pages/SearchAgent.vue:175", "shortDescription": {"text": "Insecure pattern 'vue_v_html' in desk/src/pages/SearchAgent.vue:175"}, "fullDescription": {"text": "Found a known-risky pattern (vue_v_html). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bb5441e1d0179672", "name": "Insecure pattern 'vue_v_html' in desk/src/pages/ticket/TicketNew.vue:66", "shortDescription": {"text": "Insecure pattern 'vue_v_html' in desk/src/pages/ticket/TicketNew.vue:66"}, "fullDescription": {"text": "Found a known-risky pattern (vue_v_html). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-dc67d576123d8887", "name": "Insecure pattern 'domparser_html_parse' in desk/src/pages/knowledge-base/Article.vue:539", "shortDescription": {"text": "Insecure pattern 'domparser_html_parse' in desk/src/pages/knowledge-base/Article.vue:539"}, "fullDescription": {"text": "Found a known-risky pattern (domparser_html_parse). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-697bc5f93a712e2c", "name": "Insecure pattern 'domparser_html_parse' in desk/src/pages/desk/contact/ContactDialog.vue:306", "shortDescription": {"text": "Insecure pattern 'domparser_html_parse' in desk/src/pages/desk/contact/ContactDialog.vue:306"}, "fullDescription": {"text": "Found a known-risky pattern (domparser_html_parse). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1572be6877258f2a", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v2 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-266162aa2c525a31", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/setup-python@v2 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a8cc45ff48eaf8c5", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0969710c536c9a0c", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d9f3fd5593eea151", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6ba9bfab5f283202", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cb639d9a10a47b23", "name": "package.json defines install-time lifecycle scripts", "shortDescription": {"text": "package.json defines install-time lifecycle scripts"}, "fullDescription": {"text": "preinstall/install/postinstall/prepare scripts execute during dependency installation. Review them carefully for network calls, obfuscation, shell execution, or credential access."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ea3b5e389d8c9c0f", "name": "Low test-to-source ratio", "shortDescription": {"text": "Low test-to-source ratio"}, "fullDescription": {"text": "38 tests / 342 src (ratio 0.11)."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3ab5d313dda8e5f9", "name": "Debug logging residue appears in source files", "shortDescription": {"text": "Debug logging residue appears in source files"}, "fullDescription": {"text": "Found 14 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-72b2a6250083a784", "name": "Placeholder or mock-heavy implementation detected", "shortDescription": {"text": "Placeholder or mock-heavy implementation detected"}, "fullDescription": {"text": "Found 22 placeholder/mock markers across 5 source files. This often means the repo looks complete while core flows still use generated scaffolding or fake data."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2d0c7b7ab8f8aacf", "name": "Critical user flow still appears backed by mock or placeholder data", "shortDescription": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "fullDescription": {"text": "A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ea8f3013f588db25", "name": "Shallow git history limits provenance confidence", "shortDescription": {"text": "Shallow git history limits provenance confidence"}, "fullDescription": {"text": "The repository is a shallow clone. Origin/evolution analysis cannot distinguish fresh generation, imported legacy code, or long-lived human code with high confidence."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8424db9c75e04ba4", "name": "Very short observed git history", "shortDescription": {"text": "Very short observed git history"}, "fullDescription": {"text": "The repo has multiple source files but two or fewer visible commits. This is not a failure by itself, but it lowers confidence in evolution-based diagnosis."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c8b1e5bccd79bbd8", "name": "`fetch()` without try/.catch or AbortSignal \u2014 desk/src/router/index.ts:339", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 desk/src/router/index.ts:339"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-da8f6b5a55753f54", "name": "`fetch()` without try/.catch or AbortSignal \u2014 desk/src/stores/auth.ts:21", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 desk/src/stores/auth.ts:21"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7aba5781c88e2d19", "name": "`fetch()` without try/.catch or AbortSignal \u2014 desk/src/stores/meta.ts:26", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 desk/src/stores/meta.ts:26"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2ee5f3c9b9b84659", "name": "`fetch()` without try/.catch or AbortSignal \u2014 desk/src/composables/fc.ts:18", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 desk/src/composables/fc.ts:18"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2ae33f3685447565", "name": "`fetch()` without try/.catch or AbortSignal \u2014 desk/src/composables/useView.ts:59", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 desk/src/composables/useView.ts:59"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4c5120d2f93d643f", "name": "Commented-code block (9 lines) in helpdesk/integrations/erpnext/mirror_sync.py:16", "shortDescription": {"text": "Commented-code block (9 lines) in helpdesk/integrations/erpnext/mirror_sync.py:16"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-5fe7dd9f46b21e4c", "name": "Commented-code block (6 lines) in helpdesk/api/subtask.py:4", "shortDescription": {"text": "Commented-code block (6 lines) in helpdesk/api/subtask.py:4"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a5abee0377f8d87f", "name": "Legacy-named symbol `doc_old` in helpdesk/helpdesk/doctype/hd_service_level_agreement/hd_service_level_agreement.py:243", "shortDescription": {"text": "Legacy-named symbol `doc_old` in helpdesk/helpdesk/doctype/hd_service_level_agreement/hd_service_level_agreement.py:243"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-faa8b0c94e481bab", "name": "Commented-code block (5 lines) in helpdesk/helpdesk/doctype/hd_ticket/test_hd_ticket.py:842", "shortDescription": {"text": "Commented-code block (5 lines) in helpdesk/helpdesk/doctype/hd_ticket/test_hd_ticket.py:842"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2a4fe19fec0cdbff", "name": "Commented-code block (5 lines) in helpdesk/helpdesk/report/ticket_search_analysis/ticket_search_analysis.js:7", "shortDescription": {"text": "Commented-code block (5 lines) in helpdesk/helpdesk/report/ticket_search_analysis/ticket_search_analysis.js:7"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2c04133e54348533", "name": "Near-duplicate function bodies in 2 places", "shortDescription": {"text": "Near-duplicate function bodies in 2 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nhelpdesk/search.py:remove_document, helpdesk/search.py:remove_doc\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/18184"}, "properties": {"repository": "rionatty/helpdesk", "repoUrl": "https://github.com/rionatty/helpdesk", "branch": "main"}, "results": [{"ruleId": "scanner-885c5ffbda9648b6", "level": "note", "message": {"text": "Possibly dead Python function: remove_doc"}, "properties": {"repobilityId": "0941836dbd3e009c", "scanner": "scanner-primary", "fingerprint": "885c5ffbda9648b6", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "helpdesk/search.py:262"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-235aada37c3abd94", "level": "note", "message": {"text": "Possibly dead Python function: extract_headings"}, "properties": {"repobilityId": "4241a7b2c1a08227", "scanner": "scanner-primary", "fingerprint": "235aada37c3abd94", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "helpdesk/search.py:266"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f83fd13ba367273b", "level": "note", "message": {"text": "Possibly dead Python function: execute"}, "properties": {"repobilityId": "a0497c418f1db27e", "scanner": "scanner-primary", "fingerprint": "f83fd13ba367273b", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "helpdesk/patches/set_project_type_customer.py:4"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-381df4d76b04ff1e", "level": "note", "message": {"text": "Possibly dead Python function: execute"}, "properties": {"repobilityId": "a0497c418f1db27e", "scanner": "scanner-primary", "fingerprint": "381df4d76b04ff1e", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "helpdesk/patches/naming_autoincrement.py:17"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7b189aa13611222e", "level": "note", "message": {"text": "Possibly dead Python function: execute"}, "properties": {"repobilityId": "a0497c418f1db27e", "scanner": "scanner-primary", "fingerprint": "7b189aa13611222e", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "helpdesk/patches/default_article_category.py:6"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-df474172a6b4140b", "level": "note", "message": {"text": "Possibly dead Python function: execute"}, "properties": {"repobilityId": "a0497c418f1db27e", "scanner": "scanner-primary", "fingerprint": "df474172a6b4140b", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "helpdesk/patches/communication_read_perm_agent.py:5"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cd4481da7a856beb", "level": "note", "message": {"text": "Possibly dead Python function: execute"}, "properties": {"repobilityId": "a0497c418f1db27e", "scanner": "scanner-primary", "fingerprint": "cd4481da7a856beb", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "helpdesk/patches/remove_agents_teams_default_views.py:4"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fc042d5fbe904ae4", "level": "note", "message": {"text": "Possibly dead Python function: execute"}, "properties": {"repobilityId": "a0497c418f1db27e", "scanner": "scanner-primary", "fingerprint": "fc042d5fbe904ae4", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "helpdesk/patches/rename_canned_response_to_saved_reply.py:4"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-24947aac2a69021d", "level": "note", "message": {"text": "Possibly dead Python function: execute"}, "properties": {"repobilityId": "a0497c418f1db27e", "scanner": "scanner-primary", "fingerprint": "24947aac2a69021d", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "helpdesk/patches/add_fulltext_index.py:4"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-62c059a24a846b14", "level": "note", "message": {"text": "Possibly dead Python function: execute"}, "properties": {"repobilityId": "a0497c418f1db27e", "scanner": "scanner-primary", "fingerprint": "62c059a24a846b14", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "helpdesk/patches/add_status_category_to_tickets.py:4"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-846913be3b4cddfa", "level": "note", "message": {"text": "Possibly dead Python function: execute"}, "properties": {"repobilityId": "a0497c418f1db27e", "scanner": "scanner-primary", "fingerprint": "846913be3b4cddfa", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "helpdesk/patches/template_remove_default_fields.py:5"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f732ba3ba8dba101", "level": "note", "message": {"text": "Possibly dead Python function: execute"}, "properties": {"repobilityId": "a0497c418f1db27e", "scanner": "scanner-primary", "fingerprint": "f732ba3ba8dba101", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "helpdesk/patches/agent_manager_perms.py:4"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a531b0b1a0d8a272", "level": "note", "message": {"text": "Possibly dead Python function: execute"}, "properties": {"repobilityId": "a0497c418f1db27e", "scanner": "scanner-primary", "fingerprint": "a531b0b1a0d8a272", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "helpdesk/patches/change_app_name_to_helpdesk.py:5"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b7b4324b5c2c47c4", "level": "note", "message": {"text": "Possibly dead Python function: execute"}, "properties": {"repobilityId": "a0497c418f1db27e", "scanner": "scanner-primary", "fingerprint": "b7b4324b5c2c47c4", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "helpdesk/patches/add_website_settings_permission.py:4"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a6c59f6f94b45233", "level": "note", "message": {"text": "Possibly dead Python function: execute"}, "properties": {"repobilityId": "a0497c418f1db27e", "scanner": "scanner-primary", "fingerprint": "a6c59f6f94b45233", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "helpdesk/patches/rename_frappedesk_module_references.py:12"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5ade91a34f17513b", "level": "note", "message": {"text": "Possibly dead Python function: execute"}, "properties": {"repobilityId": "a0497c418f1db27e", "scanner": "scanner-primary", "fingerprint": "5ade91a34f17513b", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "helpdesk/patches/set_hd_ticket_naming_series.py:5"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bead75b0f9233e05", "level": "none", "message": {"text": "No API endpoints detected"}, "properties": {"repobilityId": "0f8bb852027c38f8", "scanner": "scanner-primary", "fingerprint": "bead75b0f9233e05", "layer": "api", "severity": "info", "confidence": 1.0, "tags": ["coverage"]}}, {"ruleId": "scanner-7f658622bcdfc808", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 desk/src/composables/formCustomisation.ts:132"}, "properties": {"repobilityId": "b118b78668605279", "scanner": "scanner-primary", "fingerprint": "7f658622bcdfc808", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-6a5d2dec08ef5c63", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 desk/src/composables/useView.ts:97"}, "properties": {"repobilityId": "5f5c818fa20e9d50", "scanner": "scanner-primary", "fingerprint": "6a5d2dec08ef5c63", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-7572e5a172b29407", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 desk/src/components/TypingIndicator.vue:36"}, "properties": {"repobilityId": "45b7d096487a47bc", "scanner": "scanner-primary", "fingerprint": "7572e5a172b29407", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-dc4cab8838922360", "level": "none", "message": {"text": "TODO/FIXME marker in shipping code \u2014 desk/src/components/CommentBox.vue:340"}, "properties": {"repobilityId": "5345b04398bad550", "scanner": "scanner-primary", "fingerprint": "dc4cab8838922360", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.todo-marker"]}}, {"ruleId": "scanner-6543c6e403fa763a", "level": "none", "message": {"text": "TODO/FIXME marker in shipping code \u2014 desk/src/components/EmailArea.vue:251"}, "properties": {"repobilityId": "ca0da6e09de521f7", "scanner": "scanner-primary", "fingerprint": "6543c6e403fa763a", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.todo-marker"]}}, {"ruleId": "scanner-140b9a0df37cde52", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 desk/src/components/EmailArea.vue:261"}, "properties": {"repobilityId": "c7298e33ad5fc05c", "scanner": "scanner-primary", "fingerprint": "140b9a0df37cde52", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-8e72cf56d46680b1", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 desk/src/components/TicketField.vue:128"}, "properties": {"repobilityId": "87b3c4592986bbef", "scanner": "scanner-primary", "fingerprint": "8e72cf56d46680b1", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-6c930393dfeaaac5", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 desk/src/components/ticket/TicketAgentContact.vue:36"}, "properties": {"repobilityId": "12aeb4d8ff004830", "scanner": "scanner-primary", "fingerprint": "6c930393dfeaaac5", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-3dea33dc9ac62f14", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 desk/src/components/telephony/TwilioCallUI.vue:453"}, "properties": {"repobilityId": "7c7d3395017e6289", "scanner": "scanner-primary", "fingerprint": "3dea33dc9ac62f14", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-f81b5fb63bf251e0", "level": "none", "message": {"text": "TODO/FIXME marker in shipping code \u2014 desk/src/components/ticket-agent/TicketActivityPanel.vue:115"}, "properties": {"repobilityId": "2caf1dd10445acdf", "scanner": "scanner-primary", "fingerprint": "f81b5fb63bf251e0", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.todo-marker"]}}, {"ruleId": "scanner-5c94139284d6a619", "level": "none", "message": {"text": "TODO/FIXME marker in shipping code \u2014 desk/src/components/ticket-agent/TicketDetailsTab.vue:182"}, "properties": {"repobilityId": "6600236e6fb5068d", "scanner": "scanner-primary", "fingerprint": "5c94139284d6a619", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.todo-marker"]}}, {"ruleId": "scanner-974827f46705a3ef", "level": "none", "message": {"text": "TODO/FIXME marker in shipping code \u2014 desk/src/components/view-controls/Filter.vue:252"}, "properties": {"repobilityId": "97843e4674c42026", "scanner": "scanner-primary", "fingerprint": "974827f46705a3ef", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.todo-marker"]}}, {"ruleId": "scanner-9df8376dc5682698", "level": "none", "message": {"text": "TODO/FIXME marker in shipping code \u2014 desk/src/pages/ticket/TicketCustomerTemplateFields.vue:64"}, "properties": {"repobilityId": "89545a9c52a05bb7", "scanner": "scanner-primary", "fingerprint": "9df8376dc5682698", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.todo-marker"]}}, {"ruleId": "scanner-aa5acaa49eb8315b", "level": "note", "message": {"text": "Containers defined but no K8s/orchestration manifest found"}, "properties": {"repobilityId": "b230ea9b68736081", "scanner": "scanner-primary", "fingerprint": "aa5acaa49eb8315b", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["coverage", "deployment"]}}, {"ruleId": "scanner-0358f81387ad599f", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in desk/src/utils.ts:801"}, "properties": {"repobilityId": "9887a77128c5637f", "scanner": "scanner-primary", "fingerprint": "0358f81387ad599f", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "desk/src/utils.ts"}, "region": {"startLine": 801}}}]}, {"ruleId": "scanner-104c3d87426dd98a", "level": "warning", "message": {"text": "Insecure pattern 'domparser_html_parse' in desk/src/utils.ts:347"}, "properties": {"repobilityId": "534cd42c9a9a909a", "scanner": "scanner-primary", "fingerprint": "104c3d87426dd98a", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "domparser_html_parse"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "desk/src/utils.ts"}, "region": {"startLine": 347}}}]}, {"ruleId": "scanner-f3a5f32af739d4e5", "level": "warning", "message": {"text": "Insecure pattern 'domparser_html_parse' in desk/src/tiptap-extensions.ts:628"}, "properties": {"repobilityId": "57417a1f46118ec3", "scanner": "scanner-primary", "fingerprint": "f3a5f32af739d4e5", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "domparser_html_parse"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "desk/src/tiptap-extensions.ts"}, "region": {"startLine": 628}}}]}, {"ruleId": "scanner-c29bafa602ef514a", "level": "error", "message": {"text": "Insecure pattern 'new_function_used' in desk/src/composables/formCustomisation.ts:41"}, "properties": {"repobilityId": "983641b6210fc939", "scanner": "scanner-primary", "fingerprint": "c29bafa602ef514a", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "new_function_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "desk/src/composables/formCustomisation.ts"}, "region": {"startLine": 41}}}]}, {"ruleId": "scanner-d12e61b8b3f36730", "level": "warning", "message": {"text": "Insecure pattern 'vue_v_html' in desk/src/components/dialogs.jsx:25"}, "properties": {"repobilityId": "d1f76b805602a283", "scanner": "scanner-primary", "fingerprint": "d12e61b8b3f36730", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "vue_v_html"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "desk/src/components/dialogs.jsx"}, "region": {"startLine": 25}}}]}, {"ruleId": "scanner-0949f26beb95762a", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in desk/src/components/EmailEditor.vue:339"}, "properties": {"repobilityId": "e4a89a562b45932b", "scanner": "scanner-primary", "fingerprint": "0949f26beb95762a", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "desk/src/components/EmailEditor.vue"}, "region": {"startLine": 339}}}]}, {"ruleId": "scanner-22a62b54dae36ae4", "level": "warning", "message": {"text": "Insecure pattern 'vue_v_html' in desk/src/components/SearchArticles.vue:39"}, "properties": {"repobilityId": "e7b0e7f6a89e335c", "scanner": "scanner-primary", "fingerprint": "22a62b54dae36ae4", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "vue_v_html"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "desk/src/components/SearchArticles.vue"}, "region": {"startLine": 39}}}]}, {"ruleId": "scanner-7b41eaf1501163dd", "level": "warning", "message": {"text": "Insecure pattern 'vue_v_html' in desk/src/components/ConfirmDialog.vue:8"}, "properties": {"repobilityId": "ba4a4a791f35b075", "scanner": "scanner-primary", "fingerprint": "7b41eaf1501163dd", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "vue_v_html"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "desk/src/components/ConfirmDialog.vue"}, "region": {"startLine": 8}}}]}, {"ruleId": "scanner-30b9608c6aeefb9d", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in desk/src/components/EmailContent.vue:84"}, "properties": {"repobilityId": "63f5d756570b4745", "scanner": "scanner-primary", "fingerprint": "30b9608c6aeefb9d", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "desk/src/components/EmailContent.vue"}, "region": {"startLine": 84}}}]}, {"ruleId": "scanner-4e802a818b0dd843", "level": "warning", "message": {"text": "Insecure pattern 'domparser_html_parse' in desk/src/components/EmailContent.vue:41"}, "properties": {"repobilityId": "4abfa1d2bd7df4de", "scanner": "scanner-primary", "fingerprint": "4e802a818b0dd843", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "domparser_html_parse"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "desk/src/components/EmailContent.vue"}, "region": {"startLine": 41}}}]}, {"ruleId": "scanner-683de24b8e50754e", "level": "warning", "message": {"text": "Insecure pattern 'vue_v_html' in desk/src/pages/SearchAgent.vue:175"}, "properties": {"repobilityId": "8278c212d2cf10eb", "scanner": "scanner-primary", "fingerprint": "683de24b8e50754e", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "vue_v_html"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "desk/src/pages/SearchAgent.vue"}, "region": {"startLine": 175}}}]}, {"ruleId": "scanner-bb5441e1d0179672", "level": "warning", "message": {"text": "Insecure pattern 'vue_v_html' in desk/src/pages/ticket/TicketNew.vue:66"}, "properties": {"repobilityId": "94ba01215512de5f", "scanner": "scanner-primary", "fingerprint": "bb5441e1d0179672", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "vue_v_html"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "desk/src/pages/ticket/TicketNew.vue"}, "region": {"startLine": 66}}}]}, {"ruleId": "scanner-dc67d576123d8887", "level": "warning", "message": {"text": "Insecure pattern 'domparser_html_parse' in desk/src/pages/knowledge-base/Article.vue:539"}, "properties": {"repobilityId": "97d595e474e992a2", "scanner": "scanner-primary", "fingerprint": "dc67d576123d8887", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "domparser_html_parse"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "desk/src/pages/knowledge-base/Article.vue"}, "region": {"startLine": 539}}}]}, {"ruleId": "scanner-697bc5f93a712e2c", "level": "warning", "message": {"text": "Insecure pattern 'domparser_html_parse' in desk/src/pages/desk/contact/ContactDialog.vue:306"}, "properties": {"repobilityId": "05794275ffaaf6f8", "scanner": "scanner-primary", "fingerprint": "697bc5f93a712e2c", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "domparser_html_parse"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "desk/src/pages/desk/contact/ContactDialog.vue"}, "region": {"startLine": 306}}}]}, {"ruleId": "scanner-1572be6877258f2a", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "4948b14b67c067b3", "scanner": "scanner-primary", "fingerprint": "1572be6877258f2a", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/server-tests.yml"}, "region": {"startLine": 38}}}]}, {"ruleId": "scanner-1572be6877258f2a", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "e69a7ca3d2dd488f", "scanner": "scanner-primary", "fingerprint": "1572be6877258f2a", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/server-tests.yml"}, "region": {"startLine": 41}}}]}, {"ruleId": "scanner-1572be6877258f2a", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "981c9c29aa620b32", "scanner": "scanner-primary", "fingerprint": "1572be6877258f2a", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/server-tests.yml"}, "region": {"startLine": 55}}}]}, {"ruleId": "scanner-1572be6877258f2a", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "3a635c3a6090b126", "scanner": "scanner-primary", "fingerprint": "1572be6877258f2a", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/server-tests.yml"}, "region": {"startLine": 67}}}]}, {"ruleId": "scanner-1572be6877258f2a", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "3a635c3a6090b126", "scanner": "scanner-primary", "fingerprint": "1572be6877258f2a", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/server-tests.yml"}, "region": {"startLine": 76}}}]}, {"ruleId": "scanner-1572be6877258f2a", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "ae289a878c4ce7c0", "scanner": "scanner-primary", "fingerprint": "1572be6877258f2a", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/server-tests.yml"}, "region": {"startLine": 113}}}]}, {"ruleId": "scanner-1572be6877258f2a", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "2968594023151886", "scanner": "scanner-primary", "fingerprint": "1572be6877258f2a", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/server-tests.yml"}, "region": {"startLine": 124}}}]}, {"ruleId": "scanner-1572be6877258f2a", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "bab8e90daa2bff37", "scanner": "scanner-primary", "fingerprint": "1572be6877258f2a", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/server-tests.yml"}, "region": {"startLine": 127}}}]}, {"ruleId": "scanner-1572be6877258f2a", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "e3f0463efc87571b", "scanner": "scanner-primary", "fingerprint": "1572be6877258f2a", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/server-tests.yml"}, "region": {"startLine": 130}}}]}, {"ruleId": "scanner-266162aa2c525a31", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "dc8a64d71ea6b973", "scanner": "scanner-primary", "fingerprint": "266162aa2c525a31", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/lint.yml"}, "region": {"startLine": 36}}}]}, {"ruleId": "scanner-266162aa2c525a31", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "2e57e35097bddada", "scanner": "scanner-primary", "fingerprint": "266162aa2c525a31", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/lint.yml"}, "region": {"startLine": 41}}}]}, {"ruleId": "scanner-a8cc45ff48eaf8c5", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "3f82fb6f6bc0c825", "scanner": "scanner-primary", "fingerprint": "a8cc45ff48eaf8c5", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/generate-pot-file.yml"}, "region": {"startLine": 21}}}]}, {"ruleId": "scanner-a8cc45ff48eaf8c5", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "0a63876c977f7a93", "scanner": "scanner-primary", "fingerprint": "a8cc45ff48eaf8c5", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/generate-pot-file.yml"}, "region": {"startLine": 26}}}]}, {"ruleId": "scanner-a8cc45ff48eaf8c5", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "84dd5d3127469f21", "scanner": "scanner-primary", "fingerprint": "a8cc45ff48eaf8c5", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/generate-pot-file.yml"}, "region": {"startLine": 31}}}]}, {"ruleId": "scanner-0969710c536c9a0c", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "10246dd1e1f001a2", "scanner": "scanner-primary", "fingerprint": "0969710c536c9a0c", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/generate-pot-file.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d9f3fd5593eea151", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "2254630b115977f7", "scanner": "scanner-primary", "fingerprint": "d9f3fd5593eea151", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/on_release.yml"}, "region": {"startLine": 13}}}]}, {"ruleId": "scanner-d9f3fd5593eea151", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "f47640f844755248", "scanner": "scanner-primary", "fingerprint": "d9f3fd5593eea151", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/on_release.yml"}, "region": {"startLine": 18}}}]}, {"ruleId": "scanner-6ba9bfab5f283202", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "1bf0fd1430c42e23", "scanner": "scanner-primary", "fingerprint": "6ba9bfab5f283202", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/build.yml"}, "region": {"startLine": 22}}}]}, {"ruleId": "scanner-6ba9bfab5f283202", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "74426512dcdd6034", "scanner": "scanner-primary", "fingerprint": "6ba9bfab5f283202", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/build.yml"}, "region": {"startLine": 25}}}]}, {"ruleId": "scanner-6ba9bfab5f283202", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "4ec74db6e1e49776", "scanner": "scanner-primary", "fingerprint": "6ba9bfab5f283202", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/build.yml"}, "region": {"startLine": 28}}}]}, {"ruleId": "scanner-6ba9bfab5f283202", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "9cf0fd6011d3e413", "scanner": "scanner-primary", "fingerprint": "6ba9bfab5f283202", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/build.yml"}, "region": {"startLine": 33}}}]}, {"ruleId": "scanner-6ba9bfab5f283202", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "3a255e942786f887", "scanner": "scanner-primary", "fingerprint": "6ba9bfab5f283202", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/build.yml"}, "region": {"startLine": 55}}}]}, {"ruleId": "scanner-cb639d9a10a47b23", "level": "note", "message": {"text": "package.json defines install-time lifecycle scripts"}, "properties": {"repobilityId": "edeab51902066991", "scanner": "scanner-primary", "fingerprint": "cb639d9a10a47b23", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "npm", "install-scripts"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ea3b5e389d8c9c0f", "level": "note", "message": {"text": "Low test-to-source ratio"}, "properties": {"repobilityId": "ef7b2552cc00a375", "scanner": "scanner-primary", "fingerprint": "ea3b5e389d8c9c0f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["tests"]}}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "6688d535866fb244", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-72b2a6250083a784", "level": "warning", "message": {"text": "Placeholder or mock-heavy implementation detected"}, "properties": {"repobilityId": "3a3996fa18160c09", "scanner": "scanner-primary", "fingerprint": "72b2a6250083a784", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "incomplete", "generated-repo-pattern"]}}, {"ruleId": "scanner-2d0c7b7ab8f8aacf", "level": "warning", "message": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "properties": {"repobilityId": "6667086fc2338772", "scanner": "scanner-primary", "fingerprint": "2d0c7b7ab8f8aacf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "critical-flow", "generated-repo-pattern"]}}, {"ruleId": "scanner-ea8f3013f588db25", "level": "note", "message": {"text": "Shallow git history limits provenance confidence"}, "properties": {"repobilityId": "a14a3ab0918a3c72", "scanner": "scanner-primary", "fingerprint": "ea8f3013f588db25", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-8424db9c75e04ba4", "level": "none", "message": {"text": "Very short observed git history"}, "properties": {"repobilityId": "2520d3f692938f44", "scanner": "scanner-primary", "fingerprint": "8424db9c75e04ba4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-c8b1e5bccd79bbd8", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 desk/src/router/index.ts:339"}, "properties": {"repobilityId": "fd31ec4e153db166", "scanner": "scanner-primary", "fingerprint": "c8b1e5bccd79bbd8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-da8f6b5a55753f54", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 desk/src/stores/auth.ts:21"}, "properties": {"repobilityId": "0ed36d48a04c2d51", "scanner": "scanner-primary", "fingerprint": "da8f6b5a55753f54", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-7aba5781c88e2d19", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 desk/src/stores/meta.ts:26"}, "properties": {"repobilityId": "a850c3cff89b137c", "scanner": "scanner-primary", "fingerprint": "7aba5781c88e2d19", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-2ee5f3c9b9b84659", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 desk/src/composables/fc.ts:18"}, "properties": {"repobilityId": "8ac1ff309e20d373", "scanner": "scanner-primary", "fingerprint": "2ee5f3c9b9b84659", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-2ae33f3685447565", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 desk/src/composables/useView.ts:59"}, "properties": {"repobilityId": "806094e4435e9baf", "scanner": "scanner-primary", "fingerprint": "2ae33f3685447565", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-4c5120d2f93d643f", "level": "none", "message": {"text": "Commented-code block (9 lines) in helpdesk/integrations/erpnext/mirror_sync.py:16"}, "properties": {"repobilityId": "ca3a405aedbc02cc", "scanner": "scanner-primary", "fingerprint": "4c5120d2f93d643f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-5fe7dd9f46b21e4c", "level": "none", "message": {"text": "Commented-code block (6 lines) in helpdesk/api/subtask.py:4"}, "properties": {"repobilityId": "21b1ca0128fe6aaa", "scanner": "scanner-primary", "fingerprint": "5fe7dd9f46b21e4c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a5abee0377f8d87f", "level": "note", "message": {"text": "Legacy-named symbol `doc_old` in helpdesk/helpdesk/doctype/hd_service_level_agreement/hd_service_level_agreement.py:243"}, "properties": {"repobilityId": "e71afec74bba3e53", "scanner": "scanner-primary", "fingerprint": "a5abee0377f8d87f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-faa8b0c94e481bab", "level": "none", "message": {"text": "Commented-code block (5 lines) in helpdesk/helpdesk/doctype/hd_ticket/test_hd_ticket.py:842"}, "properties": {"repobilityId": "1b61694f114926f6", "scanner": "scanner-primary", "fingerprint": "faa8b0c94e481bab", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2a4fe19fec0cdbff", "level": "none", "message": {"text": "Commented-code block (5 lines) in helpdesk/helpdesk/report/ticket_search_analysis/ticket_search_analysis.js:7"}, "properties": {"repobilityId": "14050821e59b9102", "scanner": "scanner-primary", "fingerprint": "2a4fe19fec0cdbff", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "a4b521ada534bac9", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "f3f3e45a83b8631e", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "fb71e521c9c31937", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "0d76199f4ac358c1", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "771fc9d44617a7d7", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "a6fb00a115f83c5f", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "3bc018c2b4a31341", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "d29588a40cbad513", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "d14015fbab0d3206", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "59c74953a001b95c", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "9f1c28adad2ebc03", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "bfae684625ed57e6", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "81e685c2c8c7c14e", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "5b6dd65cdfd7bab1", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "5d3decd9a4da413e", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "da4f8946205cfbe1", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "a888245ae316f216", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "c61b196ff346497c", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "c6b676c334d7e3ba", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "5080b2fea4fefec7", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}]}]}