{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-383c8538530cada4", "name": "Insecure pattern 'direct_innerhtml_assignment' in index.html:930", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in index.html:930"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e115ceec73cf37a8", "name": "Possible secret in admin/bamboo/index.html", "shortDescription": {"text": "Possible secret in admin/bamboo/index.html"}, "fullDescription": {"text": "Detected pattern matching generic_api_key. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-6501ecdff778e921", "name": "Insecure pattern 'direct_innerhtml_assignment' in admin/bamboo/index.html:583", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in admin/bamboo/index.html:583"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2d0496a4a9d6f0ae", "name": "Insecure pattern 'direct_innerhtml_assignment' in admin/ipsomun/index.html:599", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in admin/ipsomun/index.html:599"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-87e92ed4b8987e16", "name": "Insecure pattern 'direct_innerhtml_assignment' in admin/push/index.html:1091", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in admin/push/index.html:1091"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7b46a46d63014ed5", "name": "Insecure pattern 'direct_innerhtml_assignment' in dustler/invite.html:33", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in dustler/invite.html:33"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4c4be17e7102214c", "name": "Insecure pattern 'direct_innerhtml_assignment' in ipsomun/share.html:268", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in ipsomun/share.html:268"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/25004"}, "properties": {"repository": "Claypark/dev-page", "repoUrl": "https://github.com/Claypark/dev-page", "branch": "main"}, "results": [{"ruleId": "scanner-383c8538530cada4", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in index.html:930"}, "properties": {"repobilityId": "f91708437a3a5445", "scanner": "scanner-primary", "fingerprint": "383c8538530cada4", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "index.html"}, "region": {"startLine": 930}}}]}, {"ruleId": "scanner-e115ceec73cf37a8", "level": "error", "message": {"text": "Possible secret in admin/bamboo/index.html"}, "properties": {"repobilityId": "65df2ece7dc171cd", "scanner": "scanner-primary", "fingerprint": "e115ceec73cf37a8", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "admin/bamboo/index.html"}, "region": {"startLine": 369}}}]}, {"ruleId": "scanner-6501ecdff778e921", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in admin/bamboo/index.html:583"}, "properties": {"repobilityId": "3c7bc5e747c7f549", "scanner": "scanner-primary", "fingerprint": "6501ecdff778e921", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "admin/bamboo/index.html"}, "region": {"startLine": 583}}}]}, {"ruleId": "scanner-2d0496a4a9d6f0ae", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in admin/ipsomun/index.html:599"}, "properties": {"repobilityId": "9132f4d118e2e461", "scanner": "scanner-primary", "fingerprint": "2d0496a4a9d6f0ae", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "admin/ipsomun/index.html"}, "region": {"startLine": 599}}}]}, {"ruleId": "scanner-87e92ed4b8987e16", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in admin/push/index.html:1091"}, "properties": {"repobilityId": "f162d86e9cbf6489", "scanner": "scanner-primary", "fingerprint": "87e92ed4b8987e16", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "admin/push/index.html"}, "region": {"startLine": 1091}}}]}, {"ruleId": "scanner-7b46a46d63014ed5", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in dustler/invite.html:33"}, "properties": {"repobilityId": "e2837ccfe1724747", "scanner": "scanner-primary", "fingerprint": "7b46a46d63014ed5", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "dustler/invite.html"}, "region": {"startLine": 33}}}]}, {"ruleId": "scanner-4c4be17e7102214c", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in ipsomun/share.html:268"}, "properties": {"repobilityId": "4545e9e4271c689d", "scanner": "scanner-primary", "fingerprint": "4c4be17e7102214c", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "ipsomun/share.html"}, "region": {"startLine": 268}}}]}]}]}