{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-d63da3583b14afc0", "name": "Dockerfile runs as root: Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e066691601852931", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.11-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.11-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6372cebde0220094", "name": "No auth library detected", "shortDescription": {"text": "No auth library detected"}, "fullDescription": {"text": "The scanner did not find any standard auth library (JWT, OAuth, NextAuth, Auth0, etc.). The repo has auth/admin/session surface indicators, so auth may live in custom code, in a separate service, or be missing."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c0d2a4f9c00c6246", "name": "Very large file: main.py (2191 lines)", "shortDescription": {"text": "Very large file: main.py (2191 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-141b30a41e03817b", "name": "No license file detected", "shortDescription": {"text": "No license file detected"}, "fullDescription": {"text": "No LICENSE/COPYING/NOTICE file was found. Generated repositories often omit licensing, which blocks reuse and automated intake."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-faccb9061e9b52a0", "name": "No README detected", "shortDescription": {"text": "No README detected"}, "fullDescription": {"text": "No README file was found. Generated repos without README context are hard to operate, validate, or safely hand off."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3ab5d313dda8e5f9", "name": "Debug logging residue appears in source files", "shortDescription": {"text": "Debug logging residue appears in source files"}, "fullDescription": {"text": "Found 7 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b9088664ace7f748", "name": "Composite production-readiness gap", "shortDescription": {"text": "Composite production-readiness gap"}, "fullDescription": {"text": "Multiple low-cost hardening controls are missing together: license, ci, operator-readme. Opus verification showed these co-occurring gaps are a better readiness signal than reading each flag in isolation."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b4705ac927341c0f", "name": "FastAPI POST `ai_query` without auth dependency \u2014 main.py:236", "shortDescription": {"text": "FastAPI POST `ai_query` without auth dependency \u2014 main.py:236"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8fde1fbf7f078184", "name": "FastAPI POST `scm_advisor` without auth dependency \u2014 main.py:260", "shortDescription": {"text": "FastAPI POST `scm_advisor` without auth dependency \u2014 main.py:260"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-749c9429a993f430", "name": "FastAPI POST `haccp_advisor` without auth dependency \u2014 main.py:266", "shortDescription": {"text": "FastAPI POST `haccp_advisor` without auth dependency \u2014 main.py:266"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-69a3b253a69c0041", "name": "FastAPI POST `esg_advisor` without auth dependency \u2014 main.py:272", "shortDescription": {"text": "FastAPI POST `esg_advisor` without auth dependency \u2014 main.py:272"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-492608e51cdf7241", "name": "FastAPI POST `fb_advisor` without auth dependency \u2014 main.py:278", "shortDescription": {"text": "FastAPI POST `fb_advisor` without auth dependency \u2014 main.py:278"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f2f978268837ce7f", "name": "FastAPI POST `search_bandi` without auth dependency \u2014 main.py:290", "shortDescription": {"text": "FastAPI POST `search_bandi` without auth dependency \u2014 main.py:290"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-9937b801cb8343e3", "name": "FastAPI POST `evaluate_supplier` without auth dependency \u2014 main.py:330", "shortDescription": {"text": "FastAPI POST `evaluate_supplier` without auth dependency \u2014 main.py:330"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d327528c50a458b0", "name": "FastAPI POST `log_temperature` without auth dependency \u2014 main.py:393", "shortDescription": {"text": "FastAPI POST `log_temperature` without auth dependency \u2014 main.py:393"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e1966aeb6cdbd0b5", "name": "FastAPI POST `generate_esg_report` without auth dependency \u2014 main.py:455", "shortDescription": {"text": "FastAPI POST `generate_esg_report` without auth dependency \u2014 main.py:455"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-19ea2e0d17463ede", "name": "FastAPI POST `calcola_vendor_rating_endpoint` without auth dependency \u2014 main.py:541", "shortDescription": {"text": "FastAPI POST `calcola_vendor_rating_endpoint` without auth dependency \u2014 main.py:541"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-87c37c37d7cf5836", "name": "FastAPI POST `registra_kpi_event` without auth dependency \u2014 main.py:769", "shortDescription": {"text": "FastAPI POST `registra_kpi_event` without auth dependency \u2014 main.py:769"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-2b2e5cbec6121b9c", "name": "FastAPI POST `create_sla_contract` without auth dependency \u2014 main.py:809", "shortDescription": {"text": "FastAPI POST `create_sla_contract` without auth dependency \u2014 main.py:809"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-64e99b18891c3864", "name": "FastAPI POST `record_sla_measurement` without auth dependency \u2014 main.py:864", "shortDescription": {"text": "FastAPI POST `record_sla_measurement` without auth dependency \u2014 main.py:864"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b8f367bc02fde217", "name": "FastAPI POST `create_partnership` without auth dependency \u2014 main.py:1019", "shortDescription": {"text": "FastAPI POST `create_partnership` without auth dependency \u2014 main.py:1019"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-dedd703fed191ae0", "name": "FastAPI POST `create_meeting` without auth dependency \u2014 main.py:1083", "shortDescription": {"text": "FastAPI POST `create_meeting` without auth dependency \u2014 main.py:1083"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3640a3eb3ae1319b", "name": "FastAPI PATCH `complete_meeting` without auth dependency \u2014 main.py:1125", "shortDescription": {"text": "FastAPI PATCH `complete_meeting` without auth dependency \u2014 main.py:1125"}, "fullDescription": {"text": "`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3cc2a3d6dabc6633", "name": "FastAPI POST `compila_scorecard` without auth dependency \u2014 main.py:1157", "shortDescription": {"text": "FastAPI POST `compila_scorecard` without auth dependency \u2014 main.py:1157"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-9ae90437834cc489", "name": "FastAPI POST `suggerisci_upgrade` without auth dependency \u2014 main.py:1252", "shortDescription": {"text": "FastAPI POST `suggerisci_upgrade` without auth dependency \u2014 main.py:1252"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-1f39ff974dade237", "name": "FastAPI PATCH `update_room_status` without auth dependency \u2014 main.py:1343", "shortDescription": {"text": "FastAPI PATCH `update_room_status` without auth dependency \u2014 main.py:1343"}, "fullDescription": {"text": "`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-2f04a40633f4d234", "name": "FastAPI POST `create_hk_task` without auth dependency \u2014 main.py:1375", "shortDescription": {"text": "FastAPI POST `create_hk_task` without auth dependency \u2014 main.py:1375"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d39b41605d9f6e3f", "name": "FastAPI POST `complete_hk_task` without auth dependency \u2014 main.py:1431", "shortDescription": {"text": "FastAPI POST `complete_hk_task` without auth dependency \u2014 main.py:1431"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-0bd7065f15647f03", "name": "FastAPI POST `hk_supply_movement` without auth dependency \u2014 main.py:1646", "shortDescription": {"text": "FastAPI POST `hk_supply_movement` without auth dependency \u2014 main.py:1646"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-db88dec19895b9bb", "name": "FastAPI POST `create_laundry_cycle` without auth dependency \u2014 main.py:1704", "shortDescription": {"text": "FastAPI POST `create_laundry_cycle` without auth dependency \u2014 main.py:1704"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8a9a76aa640fccb5", "name": "FastAPI PATCH `deliver_laundry_cycle` without auth dependency \u2014 main.py:1744", "shortDescription": {"text": "FastAPI PATCH `deliver_laundry_cycle` without auth dependency \u2014 main.py:1744"}, "fullDescription": {"text": "`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-1c97c11f8cf1453a", "name": "FastAPI POST `linen_par_level` without auth dependency \u2014 main.py:1866", "shortDescription": {"text": "FastAPI POST `linen_par_level` without auth dependency \u2014 main.py:1866"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/29500"}, "properties": {"repository": "simoneserra230-ctrl/BAD360_SAAS_B2C", "repoUrl": "https://github.com/simoneserra230-ctrl/BAD360_SAAS_B2C", "branch": "main"}, "results": [{"ruleId": "scanner-d63da3583b14afc0", "level": "warning", "message": {"text": "Dockerfile runs as root: Dockerfile"}, "properties": {"repobilityId": "a2ed1bd120e507db", "scanner": "scanner-primary", "fingerprint": "d63da3583b14afc0", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-e066691601852931", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.11-slim"}, "properties": {"repobilityId": "f391052c9bfd7e8b", "scanner": "scanner-primary", "fingerprint": "e066691601852931", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6372cebde0220094", "level": "warning", "message": {"text": "No auth library detected"}, "properties": {"repobilityId": "a5b6035a5bbf8054", "scanner": "scanner-primary", "fingerprint": "6372cebde0220094", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["coverage", "auth"]}}, {"ruleId": "scanner-c0d2a4f9c00c6246", "level": "note", "message": {"text": "Very large file: main.py (2191 lines)"}, "properties": {"repobilityId": "d28330f452f23706", "scanner": "scanner-primary", "fingerprint": "c0d2a4f9c00c6246", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-141b30a41e03817b", "level": "note", "message": {"text": "No license file detected"}, "properties": {"repobilityId": "370a40159e7f9593", "scanner": "scanner-primary", "fingerprint": "141b30a41e03817b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["license", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-faccb9061e9b52a0", "level": "note", "message": {"text": "No README detected"}, "properties": {"repobilityId": "9bedf1f1b870c43c", "scanner": "scanner-primary", "fingerprint": "faccb9061e9b52a0", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["docs", "readme", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "9a91a4e33c7995ed", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-b9088664ace7f748", "level": "warning", "message": {"text": "Composite production-readiness gap"}, "properties": {"repobilityId": "d9a93810d36e6ab3", "scanner": "scanner-primary", "fingerprint": "b9088664ace7f748", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["production-readiness", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-b4705ac927341c0f", "level": "error", "message": {"text": "FastAPI POST `ai_query` without auth dependency \u2014 main.py:236"}, "properties": {"repobilityId": "46718e4fc4ec5b7e", "scanner": "scanner-primary", "fingerprint": "b4705ac927341c0f", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "main.py"}, "region": {"startLine": 236}}}]}, {"ruleId": "scanner-8fde1fbf7f078184", "level": "error", "message": {"text": "FastAPI POST `scm_advisor` without auth dependency \u2014 main.py:260"}, "properties": {"repobilityId": "5bee1a11ad801f4a", "scanner": "scanner-primary", "fingerprint": "8fde1fbf7f078184", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "main.py"}, "region": {"startLine": 260}}}]}, {"ruleId": "scanner-749c9429a993f430", "level": "error", "message": {"text": "FastAPI POST `haccp_advisor` without auth dependency \u2014 main.py:266"}, "properties": {"repobilityId": "c0e244d49228ed0d", "scanner": "scanner-primary", "fingerprint": "749c9429a993f430", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "main.py"}, "region": {"startLine": 266}}}]}, {"ruleId": "scanner-69a3b253a69c0041", "level": "error", "message": {"text": "FastAPI POST `esg_advisor` without auth dependency \u2014 main.py:272"}, "properties": {"repobilityId": "8d7e764ce8ccbf78", "scanner": "scanner-primary", "fingerprint": "69a3b253a69c0041", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "main.py"}, "region": {"startLine": 272}}}]}, {"ruleId": "scanner-492608e51cdf7241", "level": "error", "message": {"text": "FastAPI POST `fb_advisor` without auth dependency \u2014 main.py:278"}, "properties": {"repobilityId": "ff51eb890cf9fa97", "scanner": "scanner-primary", "fingerprint": "492608e51cdf7241", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "main.py"}, "region": {"startLine": 278}}}]}, {"ruleId": "scanner-f2f978268837ce7f", "level": "error", "message": {"text": "FastAPI POST `search_bandi` without auth dependency \u2014 main.py:290"}, "properties": {"repobilityId": "9237bee9f76fd1ea", "scanner": "scanner-primary", "fingerprint": "f2f978268837ce7f", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "main.py"}, "region": {"startLine": 290}}}]}, {"ruleId": "scanner-9937b801cb8343e3", "level": "error", "message": {"text": "FastAPI POST `evaluate_supplier` without auth dependency \u2014 main.py:330"}, "properties": {"repobilityId": "77192344747b02fa", "scanner": "scanner-primary", "fingerprint": "9937b801cb8343e3", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "main.py"}, "region": {"startLine": 330}}}]}, {"ruleId": "scanner-d327528c50a458b0", "level": "error", "message": {"text": "FastAPI POST `log_temperature` without auth dependency \u2014 main.py:393"}, "properties": {"repobilityId": "c5fab1371477c3e9", "scanner": "scanner-primary", "fingerprint": "d327528c50a458b0", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "main.py"}, "region": {"startLine": 393}}}]}, {"ruleId": "scanner-e1966aeb6cdbd0b5", "level": "error", "message": {"text": "FastAPI POST `generate_esg_report` without auth dependency \u2014 main.py:455"}, "properties": {"repobilityId": "a3cb98a1460c8fa7", "scanner": "scanner-primary", "fingerprint": "e1966aeb6cdbd0b5", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "main.py"}, "region": {"startLine": 455}}}]}, {"ruleId": "scanner-19ea2e0d17463ede", "level": "error", "message": {"text": "FastAPI POST `calcola_vendor_rating_endpoint` without auth dependency \u2014 main.py:541"}, "properties": {"repobilityId": "4be3b4ff7db439f9", "scanner": "scanner-primary", "fingerprint": "19ea2e0d17463ede", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "main.py"}, "region": {"startLine": 541}}}]}, {"ruleId": "scanner-87c37c37d7cf5836", "level": "error", "message": {"text": "FastAPI POST `registra_kpi_event` without auth dependency \u2014 main.py:769"}, "properties": {"repobilityId": "df29176acf613138", "scanner": "scanner-primary", "fingerprint": "87c37c37d7cf5836", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "main.py"}, "region": {"startLine": 769}}}]}, {"ruleId": "scanner-2b2e5cbec6121b9c", "level": "error", "message": {"text": "FastAPI POST `create_sla_contract` without auth dependency \u2014 main.py:809"}, "properties": {"repobilityId": "16bd7b2a0a60aef8", "scanner": "scanner-primary", "fingerprint": "2b2e5cbec6121b9c", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "main.py"}, "region": {"startLine": 809}}}]}, {"ruleId": "scanner-64e99b18891c3864", "level": "error", "message": {"text": "FastAPI POST `record_sla_measurement` without auth dependency \u2014 main.py:864"}, "properties": {"repobilityId": "029f2fa396d38e4f", "scanner": "scanner-primary", "fingerprint": "64e99b18891c3864", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "main.py"}, "region": {"startLine": 864}}}]}, {"ruleId": "scanner-b8f367bc02fde217", "level": "error", "message": {"text": "FastAPI POST `create_partnership` without auth dependency \u2014 main.py:1019"}, "properties": {"repobilityId": "41e4edcf3590fd6b", "scanner": "scanner-primary", "fingerprint": "b8f367bc02fde217", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "main.py"}, "region": {"startLine": 1019}}}]}, {"ruleId": "scanner-dedd703fed191ae0", "level": "error", "message": {"text": "FastAPI POST `create_meeting` without auth dependency \u2014 main.py:1083"}, "properties": {"repobilityId": "eb0252271b2b5119", "scanner": "scanner-primary", "fingerprint": "dedd703fed191ae0", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "main.py"}, "region": {"startLine": 1083}}}]}, {"ruleId": "scanner-3640a3eb3ae1319b", "level": "error", "message": {"text": "FastAPI PATCH `complete_meeting` without auth dependency \u2014 main.py:1125"}, "properties": {"repobilityId": "bca43b828bd103bc", "scanner": "scanner-primary", "fingerprint": "3640a3eb3ae1319b", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "main.py"}, "region": {"startLine": 1125}}}]}, {"ruleId": "scanner-3cc2a3d6dabc6633", "level": "error", "message": {"text": "FastAPI POST `compila_scorecard` without auth dependency \u2014 main.py:1157"}, "properties": {"repobilityId": "4d5c9be67921566c", "scanner": "scanner-primary", "fingerprint": "3cc2a3d6dabc6633", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "main.py"}, "region": {"startLine": 1157}}}]}, {"ruleId": "scanner-9ae90437834cc489", "level": "error", "message": {"text": "FastAPI POST `suggerisci_upgrade` without auth dependency \u2014 main.py:1252"}, "properties": {"repobilityId": "4895304d040dbae8", "scanner": "scanner-primary", "fingerprint": "9ae90437834cc489", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "main.py"}, "region": {"startLine": 1252}}}]}, {"ruleId": "scanner-1f39ff974dade237", "level": "error", "message": {"text": "FastAPI PATCH `update_room_status` without auth dependency \u2014 main.py:1343"}, "properties": {"repobilityId": "ad98dc871af57563", "scanner": "scanner-primary", "fingerprint": "1f39ff974dade237", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "main.py"}, "region": {"startLine": 1343}}}]}, {"ruleId": "scanner-2f04a40633f4d234", "level": "error", "message": {"text": "FastAPI POST `create_hk_task` without auth dependency \u2014 main.py:1375"}, "properties": {"repobilityId": "f14f64dfef6af619", "scanner": "scanner-primary", "fingerprint": "2f04a40633f4d234", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "main.py"}, "region": {"startLine": 1375}}}]}, {"ruleId": "scanner-d39b41605d9f6e3f", "level": "error", "message": {"text": "FastAPI POST `complete_hk_task` without auth dependency \u2014 main.py:1431"}, "properties": {"repobilityId": "c7d56c10599fe785", "scanner": "scanner-primary", "fingerprint": "d39b41605d9f6e3f", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "main.py"}, "region": {"startLine": 1431}}}]}, {"ruleId": "scanner-0bd7065f15647f03", "level": "error", "message": {"text": "FastAPI POST `hk_supply_movement` without auth dependency \u2014 main.py:1646"}, "properties": {"repobilityId": "536605e33ae53ea4", "scanner": "scanner-primary", "fingerprint": "0bd7065f15647f03", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "main.py"}, "region": {"startLine": 1646}}}]}, {"ruleId": "scanner-db88dec19895b9bb", "level": "error", "message": {"text": "FastAPI POST `create_laundry_cycle` without auth dependency \u2014 main.py:1704"}, "properties": {"repobilityId": "60bee2308786fe62", "scanner": "scanner-primary", "fingerprint": "db88dec19895b9bb", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "main.py"}, "region": {"startLine": 1704}}}]}, {"ruleId": "scanner-8a9a76aa640fccb5", "level": "error", "message": {"text": "FastAPI PATCH `deliver_laundry_cycle` without auth dependency \u2014 main.py:1744"}, "properties": {"repobilityId": "777c66c584f87e75", "scanner": "scanner-primary", "fingerprint": "8a9a76aa640fccb5", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "main.py"}, "region": {"startLine": 1744}}}]}, {"ruleId": "scanner-1c97c11f8cf1453a", "level": "error", "message": {"text": "FastAPI POST `linen_par_level` without auth dependency \u2014 main.py:1866"}, "properties": {"repobilityId": "83c579ad0f71a28f", "scanner": "scanner-primary", "fingerprint": "1c97c11f8cf1453a", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "main.py"}, "region": {"startLine": 1866}}}]}]}]}