{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "COMP001", "name": "[COMP001] High cognitive complexity: Function `_symbols_eq` has cognitive complexity 20 (SonarSource scale). Cognitive c", "shortDescription": {"text": "[COMP001] High cognitive complexity: Function `_symbols_eq` has cognitive complexity 20 (SonarSource scale). Cognitive complexity measures how hard the function is for a human to understand \u2014 nested branches, boolean chains, and recursion a"}, "fullDescription": {"text": "Extract nested branches into named helper functions; flatten early-return / guard clauses; replace long if/elif chains with dispatch dicts or polymorphism. SonarQube's threshold for 'should refactor' is 15 \u2014 yours is 20."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "medium", "confidence": 0.95, "cwe": "", "owasp": ""}}, {"id": "MINED124", "name": "requirements.txt: `sphinx-rtd-theme` has no version pin", "shortDescription": {"text": "requirements.txt: `sphinx-rtd-theme` has no version pin"}, "fullDescription": {"text": "Unpinned pip requirement means every fresh install may resolve a different version. Newer releases can introduce malicious code (typosquats, account compromises). Reproducible installs need exact pins."}, "properties": {"scanner": "repobility-supply-chain", "category": "dependency", "severity": "medium", "confidence": 0.9, "cwe": "", "owasp": ""}}, {"id": "MINED111", "name": "Bare except continues silently", "shortDescription": {"text": "Bare except continues silently"}, "fullDescription": {"text": "Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"scanner": "repobility-ast-engine", "category": "quality", "severity": "medium", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "AIC003", "name": "Duplicated implementation block across source files", "shortDescription": {"text": "Duplicated implementation block across source files"}, "fullDescription": {"text": "Duplicated blocks are a common artifact when generated code is pasted or recreated instead of reused. They increase maintenance cost because every future bug fix must be found in multiple locations."}, "properties": {"scanner": "repobility-ai-code-hygiene", "category": "quality", "severity": "low", "confidence": 0.86, "cwe": "", "owasp": ""}}, {"id": "MINED062", "name": "[MINED062] Python Dataclass No Fields: @dataclass over an empty class \u2014 unfinished model.", "shortDescription": {"text": "[MINED062] Python Dataclass No Fields: @dataclass over an empty class \u2014 unfinished model."}, "fullDescription": {"text": "Review and fix per the pattern semantics."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "MINED072", "name": "[MINED072] Python Pass Only Class: class Foo: pass \u2014 stub waiting to be filled in.", "shortDescription": {"text": "[MINED072] Python Pass Only Class: class Foo: pass \u2014 stub waiting to be filled in."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-1188 /  for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "MINED050", "name": "[MINED050] Stub Only Function (and 2 more): Same pattern found in 2 additional files. Review if needed.", "shortDescription": {"text": "[MINED050] Stub Only Function (and 2 more): Same pattern found in 2 additional files. Review if needed."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-1188 /  for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 0.2, "cwe": "", "owasp": ""}}, {"id": "SEC114", "name": "[SEC114] path.join / Path() on user-controlled segment without containment check: filepath.Clean / path.Join on attacker", "shortDescription": {"text": "[SEC114] path.join / Path() on user-controlled segment without containment check: filepath.Clean / path.Join on attacker-supplied segments does NOT prevent escape from the base directory. `../../../etc/passwd` resolves cleanly."}, "fullDescription": {"text": "After joining, re-check containment: `if !strings.HasPrefix(filepath.Clean(joined), filepath.Clean(baseDir)+string(os.PathSeparator)) { error }`. In Node: `path.resolve(base, x); if (!resolved.startsWith(base + path.sep)) throw`."}, "properties": {"scanner": "repobility-threat-engine", "category": "path_traversal", "severity": "high", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "SEC013", "name": "[SEC013] Path Traversal \u2014 User Input in File Path: User-controlled input used in file path without sanitization. Allows ", "shortDescription": {"text": "[SEC013] Path Traversal \u2014 User Input in File Path: User-controlled input used in file path without sanitization. Allows reading arbitrary files."}, "fullDescription": {"text": "Use os.path.realpath() and verify the path starts with your expected base directory. Use secure_filename() for uploads."}, "properties": {"scanner": "repobility-threat-engine", "category": "path_traversal", "severity": "high", "confidence": 0.8, "cwe": "", "owasp": ""}}, {"id": "MINED115", "name": "Action `actions/download-artifact` pinned to mutable ref `@v4`", "shortDescription": {"text": "Action `actions/download-artifact` pinned to mutable ref `@v4`"}, "fullDescription": {"text": "`uses: actions/download-artifact@v4` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-actions/changed-files compromise (2025) instantly affect ~23K repos. Pin to a 40-char commit SHA + lock with Dependabot or renovate."}, "properties": {"scanner": "repobility-supply-chain", "category": "dependency", "severity": "high", "confidence": 0.9, "cwe": "", "owasp": ""}}, {"id": "MINED108", "name": "`self.default` used but never assigned in __init__", "shortDescription": {"text": "`self.default` used but never assigned in __init__"}, "fullDescription": {"text": "Method `default` of class `IonToJSONEncoder` reads `self.default`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"scanner": "repobility-ast-engine", "category": "quality", "severity": "high", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "MINED106", "name": "Phantom test coverage: test_container", "shortDescription": {"text": "Phantom test coverage: test_container"}, "fullDescription": {"text": "Test function `test_container` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"scanner": "repobility-ast-engine", "category": "quality", "severity": "high", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "MINED107", "name": "Missing import: `queue` used but not imported", "shortDescription": {"text": "Missing import: `queue` used but not imported"}, "fullDescription": {"text": "The file uses `queue.something(...)` but never imports `queue`. This raises NameError at runtime the first time the line executes."}, "properties": {"scanner": "repobility-ast-engine", "category": "quality", "severity": "critical", "confidence": 1.0, "cwe": "", "owasp": ""}}]}}, "automationDetails": {"id": "repobility/1346"}, "properties": {"repository": "amazon-ion/ion-python", "repoUrl": "https://github.com/amazon-ion/ion-python", "branch": "master"}, "results": [{"ruleId": "COMP001", "level": "warning", "message": {"text": "[COMP001] High cognitive complexity: Function `_symbols_eq` has cognitive complexity 20 (SonarSource scale). Cognitive complexity measures how hard the function is for a human to understand \u2014 nested branches, boolean chains, and recursion all weigh in. Breakdown: if=8, nested_bonus=12."}, "properties": {"repobilityId": 137558, "scanner": "repobility-threat-engine", "fingerprint": "afc2e2cafc9a20809c43f4789df5c8e823133dca98aa44221693316d928ec81e", "category": "quality", "severity": "medium", "confidence": 0.95, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "AST-derived cognitive complexity score = 20 (severity threshold for medium: 15+).", "evidence": {"scanner": "repobility-threat-engine", "function": "_symbols_eq", "breakdown": {"if": 8, "nested_bonus": 12}, "complexity": 20, "correlation_key": "fp|afc2e2cafc9a20809c43f4789df5c8e823133dca98aa44221693316d928ec81e"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src-python/amazon/ion/equivalence.py"}, "region": {"startLine": 197}}}]}, {"ruleId": "MINED124", "level": "warning", "message": {"text": "requirements.txt: `sphinx-rtd-theme` has no version pin"}, "properties": {"repobilityId": 137532, "scanner": "repobility-supply-chain", "fingerprint": "8b56d948a7604d884ee74ffeec9a888a63ab2e718b0fcb789208fcdc63253a46", "category": "dependency", "severity": "medium", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "unpinned-pip-requirement", "owasp": null, "cwe_ids": ["CWE-1357"], "languages": ["python"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|8b56d948a7604d884ee74ffeec9a888a63ab2e718b0fcb789208fcdc63253a46"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/requirements.txt"}, "region": {"startLine": 1}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 137530, "scanner": "repobility-ast-engine", "fingerprint": "762c0580176ab2012ff6d87fd9f4e22de282921ab8e8bb1cea1b4562646d9f36", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|762c0580176ab2012ff6d87fd9f4e22de282921ab8e8bb1cea1b4562646d9f36"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src-python/amazon/ion/core.py"}, "region": {"startLine": 25}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 137529, "scanner": "repobility-ast-engine", "fingerprint": "53df51afe5da1c6b5305e6e408ab941ce8314da9dafe04c6ff82faf38c4d2a4b", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|53df51afe5da1c6b5305e6e408ab941ce8314da9dafe04c6ff82faf38c4d2a4b"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src-python/amazon/ion/simple_types.py"}, "region": {"startLine": 28}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 137502, "scanner": "repobility-ast-engine", "fingerprint": "d1493b2ed72e4adb4be4d66f0cd4ba154a61032d5b8bdd3ec0142bb6553f64a5", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|d1493b2ed72e4adb4be4d66f0cd4ba154a61032d5b8bdd3ec0142bb6553f64a5"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_package.py"}, "region": {"startLine": 21}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 137490, "scanner": "repobility-ast-engine", "fingerprint": "123976cb8f39ece7246cf73d75c12df06d170c79f5cd44cd51d9b4652e6d6c91", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|123976cb8f39ece7246cf73d75c12df06d170c79f5cd44cd51d9b4652e6d6c91"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_simpleion.py"}, "region": {"startLine": 878}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 137475, "scanner": "repobility-ai-code-hygiene", "fingerprint": "1c131190876ac4cf68dd9084564543382997b0c5ba6666b7d70d51ae2c588fc2", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "src-python/amazon/ion/writer_binary_raw.py", "duplicate_line": 206, "correlation_key": "fp|1c131190876ac4cf68dd9084564543382997b0c5ba6666b7d70d51ae2c588fc2"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src-python/amazon/ion/writer_text.py"}, "region": {"startLine": 204}}}]}, {"ruleId": "MINED062", "level": "none", "message": {"text": "[MINED062] Python Dataclass No Fields: @dataclass over an empty class \u2014 unfinished model."}, "properties": {"repobilityId": 137568, "scanner": "repobility-threat-engine", "fingerprint": "d8e5e0bdcb9019dbbb9d4bbbbc6a4418a6e9cda7993394c614f8e943f9676714", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "python-dataclass-no-fields", "owasp": null, "cwe_ids": [], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348046+00:00", "triaged_in_corpus": 10, "observations_count": 92448, "ai_coder_pattern_id": 144}, "scanner": "repobility-threat-engine", "correlation_key": "fp|d8e5e0bdcb9019dbbb9d4bbbbc6a4418a6e9cda7993394c614f8e943f9676714"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src-python/amazon/ionbenchmark/report.py"}, "region": {"startLine": 12}}}]}, {"ruleId": "MINED072", "level": "none", "message": {"text": "[MINED072] Python Pass Only Class: class Foo: pass \u2014 stub waiting to be filled in."}, "properties": {"repobilityId": 137564, "scanner": "repobility-threat-engine", "fingerprint": "c15165e660d7315f57bda26d46e5ef9ef71fc90d5d7f14ff49b1b883284db816", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "python-pass-only-class", "owasp": null, "cwe_ids": ["CWE-1188"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348069+00:00", "triaged_in_corpus": 10, "observations_count": 14245, "ai_coder_pattern_id": 143}, "scanner": "repobility-threat-engine", "correlation_key": "fp|c15165e660d7315f57bda26d46e5ef9ef71fc90d5d7f14ff49b1b883284db816"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src-python/amazon/ion/sliceable_buffer.py"}, "region": {"startLine": 164}}}]}, {"ruleId": "MINED050", "level": "none", "message": {"text": "[MINED050] Stub Only Function (and 2 more): Same pattern found in 2 additional files. Review if needed."}, "properties": {"repobilityId": 137563, "scanner": "repobility-threat-engine", "fingerprint": "b39288e529a4ab712a2d60436a688220bb6b374d59b0f4dce7184c9dc7729483", "category": "quality", "severity": "info", "confidence": 0.2, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Deduplicated summary only: 2 additional occurrences found. The top occurrences remain visible as actionable findings.", "evidence": {"mined": true, "mining": {"slug": "stub-only-function", "owasp": null, "cwe_ids": ["CWE-1188"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348017+00:00", "triaged_in_corpus": 12, "observations_count": 633513, "ai_coder_pattern_id": 2}, "scanner": "repobility-threat-engine", "aggregated": true, "correlation_key": "fp|b39288e529a4ab712a2d60436a688220bb6b374d59b0f4dce7184c9dc7729483", "aggregated_count": 2}}}, {"ruleId": "MINED050", "level": "none", "message": {"text": "[MINED050] Stub Only Function: Function declared but body is just pass, return None, raise NotImplementedError, or TODO comment."}, "properties": {"repobilityId": 137562, "scanner": "repobility-threat-engine", "fingerprint": "4c261948eebb5d7e9007eee60f6d8e9ca9252fefa0455f4495e5566dfa768e2b", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "stub-only-function", "owasp": null, "cwe_ids": ["CWE-1188"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348017+00:00", "triaged_in_corpus": 12, "observations_count": 633513, "ai_coder_pattern_id": 2}, "scanner": "repobility-threat-engine", "correlation_key": "fp|4c261948eebb5d7e9007eee60f6d8e9ca9252fefa0455f4495e5566dfa768e2b"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src-python/amazon/ionbenchmark/benchmark_spec.py"}, "region": {"startLine": 176}}}]}, {"ruleId": "MINED050", "level": "none", "message": {"text": "[MINED050] Stub Only Function: Function declared but body is just pass, return None, raise NotImplementedError, or TODO comment."}, "properties": {"repobilityId": 137561, "scanner": "repobility-threat-engine", "fingerprint": "cfec1c9bdc8c9558f501c658006fd901214a77fad16445b294649e22c63358d6", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "stub-only-function", "owasp": null, "cwe_ids": ["CWE-1188"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348017+00:00", "triaged_in_corpus": 12, "observations_count": 633513, "ai_coder_pattern_id": 2}, "scanner": "repobility-threat-engine", "correlation_key": "fp|cfec1c9bdc8c9558f501c658006fd901214a77fad16445b294649e22c63358d6"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src-python/amazon/ionbenchmark/benchmark_runner.py"}, "region": {"startLine": 129}}}]}, {"ruleId": "MINED050", "level": "none", "message": {"text": "[MINED050] Stub Only Function: Function declared but body is just pass, return None, raise NotImplementedError, or TODO comment."}, "properties": {"repobilityId": 137560, "scanner": "repobility-threat-engine", "fingerprint": "406319b57e1857ce154f304272604c9dbbdcc4b390e4fec0f0bf7504bb5c61a0", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "stub-only-function", "owasp": null, "cwe_ids": ["CWE-1188"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348017+00:00", "triaged_in_corpus": 12, "observations_count": 633513, "ai_coder_pattern_id": 2}, "scanner": "repobility-threat-engine", "correlation_key": "fp|406319b57e1857ce154f304272604c9dbbdcc4b390e4fec0f0bf7504bb5c61a0"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src-python/amazon/ion/sliceable_buffer.py"}, "region": {"startLine": 165}}}]}, {"ruleId": "COMP001", "level": "none", "message": {"text": "[COMP001] High cognitive complexity (and 17 more): Same pattern found in 17 additional files. Review if needed."}, "properties": {"repobilityId": 137559, "scanner": "repobility-threat-engine", "fingerprint": "d683dd7f862c53a7d1d54a33e5815dea3a351ae865bc5298119fe512b5061bcb", "category": "quality", "severity": "info", "confidence": 0.2, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Deduplicated summary only: 17 additional occurrences found. The top occurrences remain visible as actionable findings.", "evidence": {"scanner": "repobility-threat-engine", "function": "_ion_equals", "breakdown": {"if": 5, "or": 1, "and": 2, "for": 2, "elif": 11, "else": 2, "nested_bonus": 32}, "aggregated": true, "complexity": 55, "correlation_key": "fp|d683dd7f862c53a7d1d54a33e5815dea3a351ae865bc5298119fe512b5061bcb", "aggregated_count": 17}}}, {"ruleId": "SEC114", "level": "error", "message": {"text": "[SEC114] path.join / Path() on user-controlled segment without containment check: filepath.Clean / path.Join on attacker-supplied segments does NOT prevent escape from the base directory. `../../../etc/passwd` resolves cleanly."}, "properties": {"repobilityId": 137567, "scanner": "repobility-threat-engine", "fingerprint": "d3677c57b82fe6ba248aeb301746b7e92dfc542d76f2cbed2b1f269bef1c4f70", "category": "path_traversal", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "path.join(self._spec_working_directory, input", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC114", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "code|path_traversal|token|111|sec114"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src-python/amazon/ionbenchmark/benchmark_spec.py"}, "region": {"startLine": 111}}}]}, {"ruleId": "SEC013", "level": "error", "message": {"text": "[SEC013] Path Traversal \u2014 User Input in File Path: User-controlled input used in file path without sanitization. Allows reading arbitrary files."}, "properties": {"repobilityId": 137566, "scanner": "repobility-threat-engine", "fingerprint": "0b55fcbd9e6072ae6ae6597157b7fd4e04436a25f32601c8cfe2c12dc494b4fb", "category": "path_traversal", "severity": "high", "confidence": 0.8, "triageState": "open", "verdict": "likely", "isResolved": false, "reason": "User-controlled input detected in file path construction", "evidence": {"match": "open(input", "reason": "User-controlled input detected in file path construction", "rule_id": "SEC013", "scanner": "repobility-threat-engine", "confidence": 0.8, "correlation_key": "code|path_traversal|token|51|sec013"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src-python/amazon/ionbenchmark/proto_tools.py"}, "region": {"startLine": 51}}}]}, {"ruleId": "SEC013", "level": "error", "message": {"text": "[SEC013] Path Traversal \u2014 User Input in File Path: User-controlled input used in file path without sanitization. Allows reading arbitrary files."}, "properties": {"repobilityId": 137565, "scanner": "repobility-threat-engine", "fingerprint": "16534c2d49e86f7f31310f8821f11d0e3b2883893156cd7cb156dee723acf98e", "category": "path_traversal", "severity": "high", "confidence": 0.8, "triageState": "open", "verdict": "likely", "isResolved": false, "reason": "User-controlled input detected in file path construction", "evidence": {"match": "open(benchmark_spec.get_input", "reason": "User-controlled input detected in file path construction", "rule_id": "SEC013", "scanner": "repobility-threat-engine", "confidence": 0.8, "correlation_key": "code|path_traversal|token|105|sec013"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src-python/amazon/ionbenchmark/benchmark_runner.py"}, "region": {"startLine": 105}}}]}, {"ruleId": "COMP001", "level": "error", "message": {"text": "[COMP001] High cognitive complexity: Function `_structs_eq` has cognitive complexity 31 (SonarSource scale). Cognitive complexity measures how hard the function is for a human to understand \u2014 nested branches, boolean chains, and recursion all weigh in. Breakdown: break=1, elif=1, except=1, for=2, if=6, nested_bonus=19, while=1."}, "properties": {"repobilityId": 137557, "scanner": "repobility-threat-engine", "fingerprint": "1855cec4da2025b971df6b0012fd48422578211a4da5ca8729b2de483b4a5a22", "category": "quality", "severity": "high", "confidence": 0.95, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "AST-derived cognitive complexity score = 31 (severity threshold for high: 25+).", "evidence": {"scanner": "repobility-threat-engine", "function": "_structs_eq", "breakdown": {"if": 6, "for": 2, "elif": 1, "break": 1, "while": 1, "except": 1, "nested_bonus": 19}, "complexity": 31, "correlation_key": "fp|1855cec4da2025b971df6b0012fd48422578211a4da5ca8729b2de483b4a5a22"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src-python/amazon/ion/equivalence.py"}, "region": {"startLine": 126}}}]}, {"ruleId": "COMP001", "level": "error", "message": {"text": "[COMP001] High cognitive complexity: Function `_ion_equals` has cognitive complexity 55 (SonarSource scale). Cognitive complexity measures how hard the function is for a human to understand \u2014 nested branches, boolean chains, and recursion all weigh in. Breakdown: and=2, elif=11, else=2, for=2, if=5, nested_bonus=32, or=1."}, "properties": {"repobilityId": 137556, "scanner": "repobility-threat-engine", "fingerprint": "a16d4cff0dff177ac852443a67e0f3cb8fef625aed62e4df1ec3b126583e9bc4", "category": "quality", "severity": "high", "confidence": 0.95, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "AST-derived cognitive complexity score = 55 (severity threshold for high: 25+).", "evidence": {"scanner": "repobility-threat-engine", "function": "_ion_equals", "breakdown": {"if": 5, "or": 1, "and": 2, "for": 2, "elif": 11, "else": 2, "nested_bonus": 32}, "complexity": 55, "correlation_key": "fp|a16d4cff0dff177ac852443a67e0f3cb8fef625aed62e4df1ec3b126583e9bc4"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src-python/amazon/ion/equivalence.py"}, "region": {"startLine": 64}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "Action `actions/download-artifact` pinned to mutable ref `@v4`"}, "properties": {"repobilityId": 137555, "scanner": "repobility-supply-chain", "fingerprint": "e9340c10d4653b8fe0372fb84e5de4b50f09103cf0c77ecf6a04a7c48ec3648f", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|e9340c10d4653b8fe0372fb84e5de4b50f09103cf0c77ecf6a04a7c48ec3648f"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release.yml"}, "region": {"startLine": 141}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "Action `actions/upload-artifact` pinned to mutable ref `@v4`"}, "properties": {"repobilityId": 137554, "scanner": "repobility-supply-chain", "fingerprint": "2e0b0fb21c559be4ca6c359dcc4c2ff408b164c98c1b05a7b259b3b771c5e851", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|2e0b0fb21c559be4ca6c359dcc4c2ff408b164c98c1b05a7b259b3b771c5e851"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release.yml"}, "region": {"startLine": 129}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "Action `pypa/cibuildwheel` pinned to mutable ref `@v3.2.0`"}, "properties": {"repobilityId": 137553, "scanner": "repobility-supply-chain", "fingerprint": "c54cb1e4caf5c09233a79494cc0b60c3300c2ee1695f5f3317e7cb3812c6663d", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|c54cb1e4caf5c09233a79494cc0b60c3300c2ee1695f5f3317e7cb3812c6663d"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release.yml"}, "region": {"startLine": 118}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "Action `actions/checkout` pinned to mutable ref `@v4`"}, "properties": {"repobilityId": 137552, "scanner": "repobility-supply-chain", "fingerprint": "233ce0e3619757cd5fa3ae987b4456a0d2b5ba593748e1fc987cf8d5ee8dbe29", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|233ce0e3619757cd5fa3ae987b4456a0d2b5ba593748e1fc987cf8d5ee8dbe29"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release.yml"}, "region": {"startLine": 109}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "Action `aws-actions/configure-aws-credentials` pinned to mutable ref `@v4`"}, "properties": {"repobilityId": 137551, "scanner": "repobility-supply-chain", "fingerprint": "9b8d71c470eeee2afa827f309018ef08571264f1a0f5af4e6bcc057ed1402cb1", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|9b8d71c470eeee2afa827f309018ef08571264f1a0f5af4e6bcc057ed1402cb1"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release.yml"}, "region": {"startLine": 47}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "Action `actions/upload-artifact` pinned to mutable ref `@v4`"}, "properties": {"repobilityId": 137550, "scanner": "repobility-supply-chain", "fingerprint": "d2004cd5cad7991c211bba162d54e8c0100c6054095ea099708b1bf73e9fe1cd", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|d2004cd5cad7991c211bba162d54e8c0100c6054095ea099708b1bf73e9fe1cd"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release.yml"}, "region": {"startLine": 43}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "Action `actions/checkout` pinned to mutable ref `@v4`"}, "properties": {"repobilityId": 137549, "scanner": "repobility-supply-chain", "fingerprint": "301cc3eae3b22f386b32298245f40ec2feb8d3590089c9d270d7e81a19e84b9c", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|301cc3eae3b22f386b32298245f40ec2feb8d3590089c9d270d7e81a19e84b9c"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release.yml"}, "region": {"startLine": 37}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "Action `actions/setup-python` pinned to mutable ref `@v5`"}, "properties": {"repobilityId": 137548, "scanner": "repobility-supply-chain", "fingerprint": "fb81ebad987135943b8a309947cfaaad1c9752ccffb0a2b43e57073ac56f6398", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|fb81ebad987135943b8a309947cfaaad1c9752ccffb0a2b43e57073ac56f6398"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release.yml"}, "region": {"startLine": 17}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "Action `actions/checkout` pinned to mutable ref `@v4`"}, "properties": {"repobilityId": 137547, "scanner": "repobility-supply-chain", "fingerprint": "25dbd44e62b8f2f0e8cfd99bd0d32fdce88a344a30307d091bfee91e0e850e09", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|25dbd44e62b8f2f0e8cfd99bd0d32fdce88a344a30307d091bfee91e0e850e09"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release.yml"}, "region": {"startLine": 15}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "Action `actions/setup-python` pinned to mutable ref `@v5`"}, "properties": {"repobilityId": 137546, "scanner": "repobility-supply-chain", "fingerprint": "99926ef858bf7661232b6b30560262a69c61f61f816ca7c0c1afbc5550db8454", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|99926ef858bf7661232b6b30560262a69c61f61f816ca7c0c1afbc5550db8454"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/main.yml"}, "region": {"startLine": 19}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "Action `actions/checkout` pinned to mutable ref `@v4`"}, "properties": {"repobilityId": 137545, "scanner": "repobility-supply-chain", "fingerprint": "690ed6c02a5c1a2e36d16d62b71dbd6f693120564c6716d3dd56b7b8211e7bd8", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|690ed6c02a5c1a2e36d16d62b71dbd6f693120564c6716d3dd56b7b8211e7bd8"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/main.yml"}, "region": {"startLine": 17}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "Action `github/codeql-action/analyze` pinned to mutable ref `@v3`"}, "properties": {"repobilityId": 137544, "scanner": "repobility-supply-chain", "fingerprint": "42875d8bbf7a370ed8f4039474a36deaaa9326e79b73f42534491a1758aaabed", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|42875d8bbf7a370ed8f4039474a36deaaa9326e79b73f42534491a1758aaabed"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/codeql-analysis.yml"}, "region": {"startLine": 70}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "Action `github/codeql-action/autobuild` pinned to mutable ref `@v3`"}, "properties": {"repobilityId": 137543, "scanner": "repobility-supply-chain", "fingerprint": "7e286a6341e30013a81fc17d4225ef8153ecfd4d299c8d31d07cc032ad4d1dab", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|7e286a6341e30013a81fc17d4225ef8153ecfd4d299c8d31d07cc032ad4d1dab"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/codeql-analysis.yml"}, "region": {"startLine": 56}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "Action `github/codeql-action/init` pinned to mutable ref `@v3`"}, "properties": {"repobilityId": 137542, "scanner": "repobility-supply-chain", "fingerprint": "3ce8f09353c3da09a126bb3d5e1201d5b5cfd550de6332ed8b46575b872afc85", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|3ce8f09353c3da09a126bb3d5e1201d5b5cfd550de6332ed8b46575b872afc85"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/codeql-analysis.yml"}, "region": {"startLine": 45}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "Action `actions/checkout` pinned to mutable ref `@v4`"}, "properties": {"repobilityId": 137541, "scanner": "repobility-supply-chain", "fingerprint": "0f0ff60bf509c57e05c5a4dd5e94e48f4eadb56d70a411be02c140c7fa0d9688", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|0f0ff60bf509c57e05c5a4dd5e94e48f4eadb56d70a411be02c140c7fa0d9688"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/codeql-analysis.yml"}, "region": {"startLine": 41}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "Action `actions/download-artifact` pinned to mutable ref `@v4`"}, "properties": {"repobilityId": 137540, "scanner": "repobility-supply-chain", "fingerprint": "3ba001d9551f525de2cf2f10341783332ae20d6fbe8181980bf6cc1ec590624e", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|3ba001d9551f525de2cf2f10341783332ae20d6fbe8181980bf6cc1ec590624e"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/performance-regression.yml"}, "region": {"startLine": 99}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "Action `actions/setup-python` pinned to mutable ref `@v5`"}, "properties": {"repobilityId": 137539, "scanner": "repobility-supply-chain", "fingerprint": "302044f96923d1af56b341e93102464dd75968d5dae7fc159d00abfc7cd22b12", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|302044f96923d1af56b341e93102464dd75968d5dae7fc159d00abfc7cd22b12"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/performance-regression.yml"}, "region": {"startLine": 91}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "Action `actions/checkout` pinned to mutable ref `@v4`"}, "properties": {"repobilityId": 137538, "scanner": "repobility-supply-chain", "fingerprint": "6d2183da3bec46627daf9c8fa3e7066dd5fc87bf4e7bfe23be22210bb8a81dc6", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|6d2183da3bec46627daf9c8fa3e7066dd5fc87bf4e7bfe23be22210bb8a81dc6"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/performance-regression.yml"}, "region": {"startLine": 83}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "Action `actions/checkout` pinned to mutable ref `@v4`"}, "properties": {"repobilityId": 137537, "scanner": "repobility-supply-chain", "fingerprint": "c44df70a57ad0f2cb0267eac713d7641ae84ae66cafa4c2995999483904bdc4c", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|c44df70a57ad0f2cb0267eac713d7641ae84ae66cafa4c2995999483904bdc4c"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/performance-regression.yml"}, "region": {"startLine": 76}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "Action `actions/setup-python` pinned to mutable ref `@v5`"}, "properties": {"repobilityId": 137536, "scanner": "repobility-supply-chain", "fingerprint": "56944147893421e986621dabf8ae778475d2a54e915b626ab13d4b1ffd3ae418", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|56944147893421e986621dabf8ae778475d2a54e915b626ab13d4b1ffd3ae418"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/performance-regression.yml"}, "region": {"startLine": 56}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "Action `actions/checkout` pinned to mutable ref `@v4`"}, "properties": {"repobilityId": 137535, "scanner": "repobility-supply-chain", "fingerprint": "68e0932964163e42778cde85a26bcefe7c1b6ee8a70dff44a1941aa60dd921df", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|68e0932964163e42778cde85a26bcefe7c1b6ee8a70dff44a1941aa60dd921df"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/performance-regression.yml"}, "region": {"startLine": 55}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "Action `actions/upload-artifact` pinned to mutable ref `@v4`"}, "properties": {"repobilityId": 137534, "scanner": "repobility-supply-chain", "fingerprint": "f70b00d63c6bde719cc8db9818d48bda2170051f9463dde30f24458cdf3c4a08", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|f70b00d63c6bde719cc8db9818d48bda2170051f9463dde30f24458cdf3c4a08"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/performance-regression.yml"}, "region": {"startLine": 44}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "Action `actions/checkout` pinned to mutable ref `@v4`"}, "properties": {"repobilityId": 137533, "scanner": "repobility-supply-chain", "fingerprint": "ff4cfeb7271374375d1e4c12fa70be6a5a8338238e29b8f88f3c7c54e02563cc", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|ff4cfeb7271374375d1e4c12fa70be6a5a8338238e29b8f88f3c7c54e02563cc"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/performance-regression.yml"}, "region": {"startLine": 27}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self.default` used but never assigned in __init__"}, "properties": {"repobilityId": 137528, "scanner": "repobility-ast-engine", "fingerprint": "a0011c40cdbc051d2cb2d06afcbc7601c46cf71e64049de9ce2d066c103c1ec4", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|a0011c40cdbc051d2cb2d06afcbc7601c46cf71e64049de9ce2d066c103c1ec4"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src-python/amazon/ion/json_encoder.py"}, "region": {"startLine": 46}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self._enum_members` used but never assigned in __init__"}, "properties": {"repobilityId": 137527, "scanner": "repobility-ast-engine", "fingerprint": "b501d0c3023b1a09124f5c293b9922b04a024b8e971fc4a8928fa21d616f72fd", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|b501d0c3023b1a09124f5c293b9922b04a024b8e971fc4a8928fa21d616f72fd"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src-python/amazon/ion/util.py"}, "region": {"startLine": 280}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self.__reset` used but never assigned in __init__"}, "properties": {"repobilityId": 137526, "scanner": "repobility-ast-engine", "fingerprint": "cdc3a1e804769844b295f553f8463eced24215cf295a1b31d81e25d437d19300", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|cdc3a1e804769844b295f553f8463eced24215cf295a1b31d81e25d437d19300"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src-python/amazon/ion/writer_buffer.py"}, "region": {"startLine": 137}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self.__depth_traverse` used but never assigned in __init__"}, "properties": {"repobilityId": 137525, "scanner": "repobility-ast-engine", "fingerprint": "fe619f40711d0b8ff230e84999055812037ea9e924222e6d031d3d133831de5a", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|fe619f40711d0b8ff230e84999055812037ea9e924222e6d031d3d133831de5a"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src-python/amazon/ion/writer_buffer.py"}, "region": {"startLine": 134}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self.__depth_traverse` used but never assigned in __init__"}, "properties": {"repobilityId": 137524, "scanner": "repobility-ast-engine", "fingerprint": "0f322479a1efb94d0f779108fc6ee67bb1fdb64ee00ad3b2751df7fc1ff496da", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|0f322479a1efb94d0f779108fc6ee67bb1fdb64ee00ad3b2751df7fc1ff496da"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src-python/amazon/ion/writer_buffer.py"}, "region": {"startLine": 82}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self.add_child` used but never assigned in __init__"}, "properties": {"repobilityId": 137523, "scanner": "repobility-ast-engine", "fingerprint": "0ec33f3be4966ad59da01dbcd2eecc4c4f327a584b5b307a2b2b3be1e4d727b3", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|0ec33f3be4966ad59da01dbcd2eecc4c4f327a584b5b307a2b2b3be1e4d727b3"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src-python/amazon/ion/writer_buffer.py"}, "region": {"startLine": 32}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self.loads` used but never assigned in __init__"}, "properties": {"repobilityId": 137522, "scanner": "repobility-ast-engine", "fingerprint": "74a382c8f785d69f9276e426cc438d574dbdb4bc33f92d8c056f98660b02e180", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|74a382c8f785d69f9276e426cc438d574dbdb4bc33f92d8c056f98660b02e180"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src-python/amazon/ionbenchmark/proto.py"}, "region": {"startLine": 53}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self.stdev` used but never assigned in __init__"}, "properties": {"repobilityId": 137521, "scanner": "repobility-ast-engine", "fingerprint": "84d362dfabd4109385c6d4537f2cff3ca6c722c3cf5e52e9b8b0dc5ec5f04c93", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|84d362dfabd4109385c6d4537f2cff3ca6c722c3cf5e52e9b8b0dc5ec5f04c93"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src-python/amazon/ionbenchmark/sample_dist.py"}, "region": {"startLine": 60}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self.get_attribute_as_path` used but never assigned in __init__"}, "properties": {"repobilityId": 137520, "scanner": "repobility-ast-engine", "fingerprint": "3b91f81a029e3732cd269e6476afa3a9bd05fe6ab6c074efd68f92252b9f2659", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|3b91f81a029e3732cd269e6476afa3a9bd05fe6ab6c074efd68f92252b9f2659"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src-python/amazon/ionbenchmark/benchmark_spec.py"}, "region": {"startLine": 249}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self.get_attribute_as_path` used but never assigned in __init__"}, "properties": {"repobilityId": 137519, "scanner": "repobility-ast-engine", "fingerprint": "f934e7e83098f18c9aa602451aabe50bf83b62197e7730dbf4a0348688afa75c", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|f934e7e83098f18c9aa602451aabe50bf83b62197e7730dbf4a0348688afa75c"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src-python/amazon/ionbenchmark/benchmark_spec.py"}, "region": {"startLine": 247}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self._get_model_flags` used but never assigned in __init__"}, "properties": {"repobilityId": 137518, "scanner": "repobility-ast-engine", "fingerprint": "f679d665e2885330dba859713af2a9169374d68c2eaef92695daf77653ab2df4", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|f679d665e2885330dba859713af2a9169374d68c2eaef92695daf77653ab2df4"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src-python/amazon/ionbenchmark/benchmark_spec.py"}, "region": {"startLine": 217}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self._get_model_flags` used but never assigned in __init__"}, "properties": {"repobilityId": 137517, "scanner": "repobility-ast-engine", "fingerprint": "a7cbcbc62378b6faec0ee9f08b3dcc894082f8f1b93f87515c233fadc1a738d5", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|a7cbcbc62378b6faec0ee9f08b3dcc894082f8f1b93f87515c233fadc1a738d5"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src-python/amazon/ionbenchmark/benchmark_spec.py"}, "region": {"startLine": 215}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self.get_format` used but never assigned in __init__"}, "properties": {"repobilityId": 137516, "scanner": "repobility-ast-engine", "fingerprint": "88002781d30d08c837493c0c4b2df621cce71ce7e50182b8612559ba0da27dc0", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|88002781d30d08c837493c0c4b2df621cce71ce7e50182b8612559ba0da27dc0"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src-python/amazon/ionbenchmark/benchmark_spec.py"}, "region": {"startLine": 213}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self.get` used but never assigned in __init__"}, "properties": {"repobilityId": 137515, "scanner": "repobility-ast-engine", "fingerprint": "534a45dd7ca259141dbf7807d1bea1bb13244d18ec1dc9becf4c7dbdef2f66ef", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|534a45dd7ca259141dbf7807d1bea1bb13244d18ec1dc9becf4c7dbdef2f66ef"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src-python/amazon/ionbenchmark/benchmark_spec.py"}, "region": {"startLine": 209}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self._get_loader_dumper` used but never assigned in __init__"}, "properties": {"repobilityId": 137514, "scanner": "repobility-ast-engine", "fingerprint": "7415262bdc1fee519fe38be5b511b00ac27c6ba0ad1b0da9dddbadb02befc940", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|7415262bdc1fee519fe38be5b511b00ac27c6ba0ad1b0da9dddbadb02befc940"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src-python/amazon/ionbenchmark/benchmark_spec.py"}, "region": {"startLine": 204}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self.get_input_file` used but never assigned in __init__"}, "properties": {"repobilityId": 137513, "scanner": "repobility-ast-engine", "fingerprint": "14d75cd3d0e620d0f0cfe1e10b4adb9dfdda9f585443c6a1bdadbbba50f8f14d", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|14d75cd3d0e620d0f0cfe1e10b4adb9dfdda9f585443c6a1bdadbbba50f8f14d"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src-python/amazon/ionbenchmark/benchmark_spec.py"}, "region": {"startLine": 188}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self.get_format` used but never assigned in __init__"}, "properties": {"repobilityId": 137512, "scanner": "repobility-ast-engine", "fingerprint": "e9beaa4269fbdbdb2f8837ba030a646297984fb8e5a2473fadf758c67d037eb6", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|e9beaa4269fbdbdb2f8837ba030a646297984fb8e5a2473fadf758c67d037eb6"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src-python/amazon/ionbenchmark/benchmark_spec.py"}, "region": {"startLine": 187}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self.get_loader_dumper` used but never assigned in __init__"}, "properties": {"repobilityId": 137511, "scanner": "repobility-ast-engine", "fingerprint": "f58bf3578ffcc719e2ab3634ce3489d272eb1a962d0b3718ca5e715692ac7580", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|f58bf3578ffcc719e2ab3634ce3489d272eb1a962d0b3718ca5e715692ac7580"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src-python/amazon/ionbenchmark/benchmark_spec.py"}, "region": {"startLine": 186}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self.get_input_file` used but never assigned in __init__"}, "properties": {"repobilityId": 137510, "scanner": "repobility-ast-engine", "fingerprint": "023daf09c510312d03fba56ba1ffe7602bde1e92d368069ec84e4dc84233213f", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|023daf09c510312d03fba56ba1ffe7602bde1e92d368069ec84e4dc84233213f"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src-python/amazon/ionbenchmark/benchmark_spec.py"}, "region": {"startLine": 179}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self.get_api` used but never assigned in __init__"}, "properties": {"repobilityId": 137509, "scanner": "repobility-ast-engine", "fingerprint": "24141433e1718619016532a269274a47cef24a08f272df2cbbda64c0bbe0690b", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|24141433e1718619016532a269274a47cef24a08f272df2cbbda64c0bbe0690b"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src-python/amazon/ionbenchmark/benchmark_spec.py"}, "region": {"startLine": 166}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self.get_command` used but never assigned in __init__"}, "properties": {"repobilityId": 137508, "scanner": "repobility-ast-engine", "fingerprint": "ee7d9ee9e36a68a2cc532f8adf48380af4987e1544de61a28fed143d84168c4f", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|ee7d9ee9e36a68a2cc532f8adf48380af4987e1544de61a28fed143d84168c4f"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src-python/amazon/ionbenchmark/benchmark_spec.py"}, "region": {"startLine": 166}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self.get_io_type` used but never assigned in __init__"}, "properties": {"repobilityId": 137507, "scanner": "repobility-ast-engine", "fingerprint": "0aedfe8106fa89e2d53b4e8d310b388f8ebaaabf69ae97f911fbeaad35ce41e7", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|0aedfe8106fa89e2d53b4e8d310b388f8ebaaabf69ae97f911fbeaad35ce41e7"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src-python/amazon/ionbenchmark/benchmark_spec.py"}, "region": {"startLine": 166}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self.dumps` used but never assigned in __init__"}, "properties": {"repobilityId": 137506, "scanner": "repobility-ast-engine", "fingerprint": "929f52c1f1aa964d9747fd5c3311e9ebca4c758a90fb0a48be28ba50deaa83c5", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|929f52c1f1aa964d9747fd5c3311e9ebca4c758a90fb0a48be28ba50deaa83c5"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src-python/amazon/ionbenchmark/self_describing_proto.py"}, "region": {"startLine": 118}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self.loads` used but never assigned in __init__"}, "properties": {"repobilityId": 137505, "scanner": "repobility-ast-engine", "fingerprint": "c65ccdc44411cd91b5978ea833591a10b5f4ecdec5ea027f00a26290c94b3b92", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|c65ccdc44411cd91b5978ea833591a10b5f4ecdec5ea027f00a26290c94b3b92"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src-python/amazon/ionbenchmark/self_describing_proto.py"}, "region": {"startLine": 99}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self._get_inner_object_instance` used but never assigned in __init__"}, "properties": {"repobilityId": 137504, "scanner": "repobility-ast-engine", "fingerprint": "60e96b522280e33568c283e68071be19bd787f1aa7ae4b141064881e17ddecee", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|60e96b522280e33568c283e68071be19bd787f1aa7ae4b141064881e17ddecee"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src-python/amazon/ionbenchmark/self_describing_proto.py"}, "region": {"startLine": 91}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_container"}, "properties": {"repobilityId": 137501, "scanner": "repobility-ast-engine", "fingerprint": "e34bc1d2372196d40705df8153cca93354becc7001c0127731c17460f6c4ac4e", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|e34bc1d2372196d40705df8153cca93354becc7001c0127731c17460f6c4ac4e"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_writer_buffer.py"}, "region": {"startLine": 37}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_scalars"}, "properties": {"repobilityId": 137500, "scanner": "repobility-ast-engine", "fingerprint": "d23afc21471ef28c61000df74d7139a0ec76e3c6e0d427c04ae54d3d7120a469", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|d23afc21471ef28c61000df74d7139a0ec76e3c6e0d427c04ae54d3d7120a469"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_writer_buffer.py"}, "region": {"startLine": 29}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_bad_parameter"}, "properties": {"repobilityId": 137499, "scanner": "repobility-ast-engine", "fingerprint": "d36a68b5638970b0a9f3724c4e1e35b020822a32c2a655003d8824617ecc5c84", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|d36a68b5638970b0a9f3724c4e1e35b020822a32c2a655003d8824617ecc5c84"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_util_record.py"}, "region": {"startLine": 36}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_missing_default"}, "properties": {"repobilityId": 137498, "scanner": "repobility-ast-engine", "fingerprint": "dea857e1a89520aa5caeb9837a49adef611d7759202f325c3990744b48381feb", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|dea857e1a89520aa5caeb9837a49adef611d7759202f325c3990744b48381feb"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_util_record.py"}, "region": {"startLine": 30}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_trampoline"}, "properties": {"repobilityId": 137497, "scanner": "repobility-ast-engine", "fingerprint": "df4586c80f30b606027c16a7f1212038320d4e6fc92ffa4c2e362f762e377a1b", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|df4586c80f30b606027c16a7f1212038320d4e6fc92ffa4c2e362f762e377a1b"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_writer_base.py"}, "region": {"startLine": 106}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_local_symbols_malformed"}, "properties": {"repobilityId": 137496, "scanner": "repobility-ast-engine", "fingerprint": "f831ef9bd7db18d3892431ccdcea5926f897bc669a036f726bc84c8f5aa9e89b", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|f831ef9bd7db18d3892431ccdcea5926f897bc669a036f726bc84c8f5aa9e89b"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_symbols_table.py"}, "region": {"startLine": 226}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_shared_symbols_intern"}, "properties": {"repobilityId": 137495, "scanner": "repobility-ast-engine", "fingerprint": "47ad3dd7578077bbc6930cbe17c4ce93888a242a22b7220fae0b7f29967a0ca1", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|47ad3dd7578077bbc6930cbe17c4ce93888a242a22b7220fae0b7f29967a0ca1"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_symbols_table.py"}, "region": {"startLine": 208}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_shared_symbols_malformed"}, "properties": {"repobilityId": 137494, "scanner": "repobility-ast-engine", "fingerprint": "1b91045cfd3fb3cb1dd1c4a400b5e2dd262630620ad46f1791f063a2d9b8ddc0", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|1b91045cfd3fb3cb1dd1c4a400b5e2dd262630620ad46f1791f063a2d9b8ddc0"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_symbols_table.py"}, "region": {"startLine": 73}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_import_lst_fails"}, "properties": {"repobilityId": 137493, "scanner": "repobility-ast-engine", "fingerprint": "f5307550448b602121963b6acc2754a3456994dd04c9abaf34bb18eca2e67662", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|f5307550448b602121963b6acc2754a3456994dd04c9abaf34bb18eca2e67662"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_writer_binary.py"}, "region": {"startLine": 80}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_one_ivm_per_stream"}, "properties": {"repobilityId": 137492, "scanner": "repobility-ast-engine", "fingerprint": "af0162de9762fb6eee5ab07a42e857c7f22122ab34a2d1017da4d2719116e77c", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|af0162de9762fb6eee5ab07a42e857c7f22122ab34a2d1017da4d2719116e77c"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_writer_binary.py"}, "region": {"startLine": 57}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_implicit_ivm"}, "properties": {"repobilityId": 137491, "scanner": "repobility-ast-engine", "fingerprint": "c490c4516f9fdb2f9a2ebc7fe2407d45832835b5395108d88db2235d5b610bf3", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|c490c4516f9fdb2f9a2ebc7fe2407d45832835b5395108d88db2235d5b610bf3"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_writer_binary.py"}, "region": {"startLine": 49}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_setting_c_ext_flag"}, "properties": {"repobilityId": 137489, "scanner": "repobility-ast-engine", "fingerprint": "deff0c3a5460379333ae11f9075826f43fb9881985fc5898e037dbd26daa9cb1", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|deff0c3a5460379333ae11f9075826f43fb9881985fc5898e037dbd26daa9cb1"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_simpleion.py"}, "region": {"startLine": 883}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_undefined_symbol_text_as_text"}, "properties": {"repobilityId": 137488, "scanner": "repobility-ast-engine", "fingerprint": "294e7c95839758cdba4b69295c6f769202b696c7e2bd72bd0c8c10eca39eb0d9", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|294e7c95839758cdba4b69295c6f769202b696c7e2bd72bd0c8c10eca39eb0d9"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_simpleion.py"}, "region": {"startLine": 846}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_loads_unicode_utf8_conversion"}, "properties": {"repobilityId": 137487, "scanner": "repobility-ast-engine", "fingerprint": "781cba81c08e66662fa3e8c378d0384f466cbb324a1a87358e1f306bf02df7ac", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|781cba81c08e66662fa3e8c378d0384f466cbb324a1a87358e1f306bf02df7ac"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_simpleion.py"}, "region": {"startLine": 726}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_unknown_object_type_fails"}, "properties": {"repobilityId": 137486, "scanner": "repobility-ast-engine", "fingerprint": "0ebe820bdd760b49b73fd80094fe029087c58a9e6d4557e41d033b92d0efe605", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|0ebe820bdd760b49b73fd80094fe029087c58a9e6d4557e41d033b92d0efe605"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_simpleion.py"}, "region": {"startLine": 634}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_single_value_with_stream_fails"}, "properties": {"repobilityId": 137485, "scanner": "repobility-ast-engine", "fingerprint": "95e1e6ff398ea17d0f029fac9df5bafa8a9ec864e2fd3fc67eba2b0bc920f2a8", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|95e1e6ff398ea17d0f029fac9df5bafa8a9ec864e2fd3fc67eba2b0bc920f2a8"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_simpleion.py"}, "region": {"startLine": 625}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_roundtrip_ion_stream"}, "properties": {"repobilityId": 137484, "scanner": "repobility-ast-engine", "fingerprint": "b868bd32453dbdbd5d4d51c086c89e37d8cbbbd399f8bfa9b508451faae77c05", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|b868bd32453dbdbd5d4d51c086c89e37d8cbbbd399f8bfa9b508451faae77c05"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_simpleion.py"}, "region": {"startLine": 609}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_roundtrip"}, "properties": {"repobilityId": 137483, "scanner": "repobility-ast-engine", "fingerprint": "475b12babeb840afdccf8856f3482836dfc22809475715c9d34eb90d2c993c7c", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|475b12babeb840afdccf8856f3482836dfc22809475715c9d34eb90d2c993c7c"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_simpleion.py"}, "region": {"startLine": 597}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_dumps_loads_text"}, "properties": {"repobilityId": 137482, "scanner": "repobility-ast-engine", "fingerprint": "280e58b64ba454443fc249ca5461214998bfe6ab2b7d932ab79c3108b3411c52", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|280e58b64ba454443fc249ca5461214998bfe6ab2b7d932ab79c3108b3411c52"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_simpleion.py"}, "region": {"startLine": 481}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_dump_load_text"}, "properties": {"repobilityId": 137481, "scanner": "repobility-ast-engine", "fingerprint": "d8108d73563d176362a3588d0285706fbf2ccd9740b2b0d5c748bb375a161250", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|d8108d73563d176362a3588d0285706fbf2ccd9740b2b0d5c748bb375a161250"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_simpleion.py"}, "region": {"startLine": 470}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_dumps_loads_binary"}, "properties": {"repobilityId": 137480, "scanner": "repobility-ast-engine", "fingerprint": "c583b12851bb22fec858acd124eaa5d4fcbde5391d4211fc69078200027ec154", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|c583b12851bb22fec858acd124eaa5d4fcbde5391d4211fc69078200027ec154"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_simpleion.py"}, "region": {"startLine": 394}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_dump_load_binary"}, "properties": {"repobilityId": 137479, "scanner": "repobility-ast-engine", "fingerprint": "f1ba205885d148256ac30384ed379a8e58c56453be2928e7278fbd840ec89899", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|f1ba205885d148256ac30384ed379a8e58c56453be2928e7278fbd840ec89899"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_simpleion.py"}, "region": {"startLine": 383}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_raw_writer"}, "properties": {"repobilityId": 137478, "scanner": "repobility-ast-engine", "fingerprint": "54dfa1ddce5c881eec5bfaae44dd27c2358515f92fbee017f41ef7e4c2e9c52f", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|54dfa1ddce5c881eec5bfaae44dd27c2358515f92fbee017f41ef7e4c2e9c52f"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_writer_text.py"}, "region": {"startLine": 217}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_catalog_bad_register"}, "properties": {"repobilityId": 137477, "scanner": "repobility-ast-engine", "fingerprint": "7bf410b6197742aa929409749af6d4ca6197dc1737ccfcf112e48bfc7fca9996", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|7bf410b6197742aa929409749af6d4ca6197dc1737ccfcf112e48bfc7fca9996"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_symbols_catalog.py"}, "region": {"startLine": 170}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_equivalence"}, "properties": {"repobilityId": 137476, "scanner": "repobility-ast-engine", "fingerprint": "7f5844dc9d0b897d361cc414a3716704fb80355318d99f7782a911f823a5bca0", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|7f5844dc9d0b897d361cc414a3716704fb80355318d99f7782a911f823a5bca0"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_equivalence.py"}, "region": {"startLine": 388}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "Missing import: `queue` used but not imported"}, "properties": {"repobilityId": 137531, "scanner": "repobility-ast-engine", "fingerprint": "a4041ccf15721cfa2ec4230ab05712669add5d88983b442996b2b391fa583587", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|a4041ccf15721cfa2ec4230ab05712669add5d88983b442996b2b391fa583587"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src-python/amazon/ion/reader_text.py"}, "region": {"startLine": 2121}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "Missing import: `queue` used but not imported"}, "properties": {"repobilityId": 137503, "scanner": "repobility-ast-engine", "fingerprint": "bfefea4a4b0099f852310e86e5ba747e5109123868b048c24fd72de1025642d0", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|bfefea4a4b0099f852310e86e5ba747e5109123868b048c24fd72de1025642d0"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_reader_buffer.py"}, "region": {"startLine": 375}}}]}]}]}