{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "GHSA-xv59-967r-8726", "name": "openssl: GHSA-xv59-967r-8726", "shortDescription": {"text": "openssl: GHSA-xv59-967r-8726"}, "fullDescription": {"text": "rust-openssl vulnerable to heap buffer overflow when encrypting with AES key-wrap-with-padding"}, "properties": {"scanner": "osv-scanner", "category": "dependency", "severity": "medium", "confidence": 0.88, "cwe": "", "owasp": ""}}, {"id": "GHSA-phqj-4mhp-q6mq", "name": "openssl: GHSA-phqj-4mhp-q6mq", "shortDescription": {"text": "openssl: GHSA-phqj-4mhp-q6mq"}, "fullDescription": {"text": "rust-openssl: Potential out-of-bounds write in `CipherCtxRef::cipher_update_inplace` for AES-KW-PAD ciphers"}, "properties": {"scanner": "osv-scanner", "category": "dependency", "severity": "medium", "confidence": 0.88, "cwe": "", "owasp": ""}}, {"id": "DKR007", "name": "Docker build context has no .dockerignore", "shortDescription": {"text": "Docker build context has no .dockerignore"}, "fullDescription": {"text": "Without .dockerignore, build context can include source history, local env files, dependencies, and generated artifacts."}, "properties": {"scanner": "repobility-docker", "category": "docker", "severity": "medium", "confidence": 0.9, "cwe": "", "owasp": ""}}, {"id": "COMP001", "name": "[COMP001] High cognitive complexity: Function `main` has cognitive complexity 18 (SonarSource scale). Cognitive complexi", "shortDescription": {"text": "[COMP001] High cognitive complexity: Function `main` has cognitive complexity 18 (SonarSource scale). Cognitive complexity measures how hard the function is for a human to understand \u2014 nested branches, boolean chains, and recursion all weig"}, "fullDescription": {"text": "Extract nested branches into named helper functions; flatten early-return / guard clauses; replace long if/elif chains with dispatch dicts or polymorphism. SonarQube's threshold for 'should refactor' is 15 \u2014 yours is 18."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "medium", "confidence": 0.95, "cwe": "", "owasp": ""}}, {"id": "ERR001", "name": "[ERR001] Silent Exception Swallowing: Silently swallowing all exceptions hides bugs. Even in cleanup code, log at DEBUG ", "shortDescription": {"text": "[ERR001] Silent Exception Swallowing: Silently swallowing all exceptions hides bugs. Even in cleanup code, log at DEBUG level."}, "fullDescription": {"text": "Log the error: `except Exception: logger.debug('cleanup failed', exc_info=True)`. Or handle specific exception types."}, "properties": {"scanner": "repobility-threat-engine", "category": "error_handling", "severity": "medium", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "AGT015", "name": "Remote install command pipes network code directly to a shell", "shortDescription": {"text": "Remote install command pipes network code directly to a shell"}, "fullDescription": {"text": "Agent helper projects often publish one-line installers. `curl | sh` style commands are convenient, but they bypass review unless the script is pinned, signed, or checksum-verified."}, "properties": {"scanner": "repobility-agent-runtime", "category": "dependency", "severity": "medium", "confidence": 0.7, "cwe": "", "owasp": ""}}, {"id": "MINED124", "name": "requirements.txt: `brotli` has no version pin", "shortDescription": {"text": "requirements.txt: `brotli` has no version pin"}, "fullDescription": {"text": "Unpinned pip requirement means every fresh install may resolve a different version. Newer releases can introduce malicious code (typosquats, account compromises). Reproducible installs need exact pins."}, "properties": {"scanner": "repobility-supply-chain", "category": "dependency", "severity": "medium", "confidence": 0.9, "cwe": "", "owasp": ""}}, {"id": "MINED111", "name": "Bare except continues silently", "shortDescription": {"text": "Bare except continues silently"}, "fullDescription": {"text": "Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"scanner": "repobility-ast-engine", "category": "quality", "severity": "medium", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "CORE_LARGE_FILES", "name": "Average file size is 516 lines (recommend <300)", "shortDescription": {"text": "Average file size is 516 lines (recommend <300)"}, "fullDescription": {"text": "Refactor large files by extracting related functions into separate modules. Target files with 300+ lines first. Use the Single Responsibility Principle \u2014 each module should have one clear purpose."}, "properties": {"scanner": "repobility-core", "category": "quality", "severity": "medium", "confidence": null, "cwe": "", "owasp": ""}}, {"id": "GHSA-2p6r-x3vv-xqm2", "name": "rpassword: GHSA-2p6r-x3vv-xqm2", "shortDescription": {"text": "rpassword: GHSA-2p6r-x3vv-xqm2"}, "fullDescription": {"text": "rpassword affected by partial password reveal when input is interrupted "}, "properties": {"scanner": "osv-scanner", "category": "dependency", "severity": "low", "confidence": 0.88, "cwe": "", "owasp": ""}}, {"id": "GHSA-xmgf-hq76-4vx2", "name": "openssl: GHSA-xmgf-hq76-4vx2", "shortDescription": {"text": "openssl: GHSA-xmgf-hq76-4vx2"}, "fullDescription": {"text": "rust-opennssl has an Out-of-bounds read in PEM password callback when returning an oversized length"}, "properties": {"scanner": "osv-scanner", "category": "dependency", "severity": "low", "confidence": 0.88, "cwe": "", "owasp": ""}}, {"id": "AIC003", "name": "Duplicated implementation block across source files", "shortDescription": {"text": "Duplicated implementation block across source files"}, "fullDescription": {"text": "Duplicated blocks are a common artifact when generated code is pasted or recreated instead of reused. They increase maintenance cost because every future bug fix must be found in multiple locations."}, "properties": {"scanner": "repobility-ai-code-hygiene", "category": "quality", "severity": "low", "confidence": 0.86, "cwe": "", "owasp": ""}}, {"id": "AIC009", "name": "Multiple AI-agent scaffold marker files are present", "shortDescription": {"text": "Multiple AI-agent scaffold marker files are present"}, "fullDescription": {"text": "Repositories with several agent instruction, progress, or completion marker files are often generated scaffolds. They are not automatically wrong, but they deserve a reachability and ownership review before users treat the code as production-ready."}, "properties": {"scanner": "repobility-ai-code-hygiene", "category": "quality", "severity": "low", "confidence": 0.68, "cwe": "", "owasp": ""}}, {"id": "CORE_NO_LICENSE", "name": "No LICENSE file", "shortDescription": {"text": "No LICENSE file"}, "fullDescription": {"text": "Add a LICENSE file to your repository. Use choosealicense.com to pick the right license (MIT for permissive, Apache 2.0 for patent protection, GPL for copyleft)."}, "properties": {"scanner": "repobility-core", "category": "documentation", "severity": "low", "confidence": null, "cwe": "", "owasp": ""}}, {"id": "MINED068", "name": "[MINED068] Rust Unsafe Block (and 9 more): Same pattern found in 9 additional files. Review if needed.", "shortDescription": {"text": "[MINED068] Rust Unsafe Block (and 9 more): Same pattern found in 9 additional files. Review if needed."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-119 /  for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 0.2, "cwe": "", "owasp": ""}}, {"id": "MINED047", "name": "[MINED047] Emoji In Source: Emoji \u2705 \u274c \ud83d\ude80 in code/comments \u2014 common AI output unless explicitly requested.", "shortDescription": {"text": "[MINED047] Emoji In Source: Emoji \u2705 \u274c \ud83d\ude80 in code/comments \u2014 common AI output unless explicitly requested."}, "fullDescription": {"text": "Review and fix per the pattern semantics."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "MINED043", "name": "[MINED043] Http Not Https: Hardcoded http:// (not localhost) for endpoints that handle credentials or data.", "shortDescription": {"text": "[MINED043] Http Not Https: Hardcoded http:// (not localhost) for endpoints that handle credentials or data."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-319 / A02:2021 for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "MINED077", "name": "[MINED077] Python Open No Context: fp = open(path) outside with-block leaks file handles.", "shortDescription": {"text": "[MINED077] Python Open No Context: fp = open(path) outside with-block leaks file handles."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-772 /  for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "SEC029", "name": "[SEC029] Server-Side Request Forgery (SSRF) \u2014 outbound HTTP from user input (and 1 more): Same pattern found in 1 additi", "shortDescription": {"text": "[SEC029] Server-Side Request Forgery (SSRF) \u2014 outbound HTTP from user input (and 1 more): Same pattern found in 1 additional files. Review if needed."}, "fullDescription": {"text": "Validate the URL against an allowlist BEFORE fetching:\n  ALLOWED = {'images.example.com', 'cdn.example.com'}\n  host = urlparse(url).hostname\n  if host not in ALLOWED: abort(400)\nOr use a server-side proxy (Imgproxy / serve-files-only-from-S3) that isolates outbound network access from the request handler.\nBlock private CIDRs explicitly: 10/8, 172.16/12, 192.168/16, 169.254/16."}, "properties": {"scanner": "repobility-threat-engine", "category": "ssrf", "severity": "info", "confidence": 0.2, "cwe": "", "owasp": ""}}, {"id": "MINED064", "name": "[MINED064] Python Input Call: input() blocks for stdin. Inappropriate in services.", "shortDescription": {"text": "[MINED064] Python Input Call: input() blocks for stdin. Inappropriate in services."}, "fullDescription": {"text": "Review and fix per the pattern semantics."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "MINED067", "name": "[MINED067] Python Requests No Timeout (and 3 more): Same pattern found in 3 additional files. Review if needed.", "shortDescription": {"text": "[MINED067] Python Requests No Timeout (and 3 more): Same pattern found in 3 additional files. Review if needed."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-400 /  for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 0.2, "cwe": "", "owasp": ""}}, {"id": "MINED050", "name": "[MINED050] Stub Only Function: Function declared but body is just pass, return None, raise NotImplementedError, or TODO ", "shortDescription": {"text": "[MINED050] Stub Only Function: Function declared but body is just pass, return None, raise NotImplementedError, or TODO comment."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-1188 /  for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "MINED049", "name": "[MINED049] Print Pii (and 1 more): Same pattern found in 1 additional files. Review if needed.", "shortDescription": {"text": "[MINED049] Print Pii (and 1 more): Same pattern found in 1 additional files. Review if needed."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-532 / A09:2021 for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 0.2, "cwe": "", "owasp": ""}}, {"id": "SEC078", "name": "[SEC078] Python: requests without timeout (and 3 more): Same pattern found in 3 additional files. Review if needed.", "shortDescription": {"text": "[SEC078] Python: requests without timeout (and 3 more): Same pattern found in 3 additional files. Review if needed."}, "fullDescription": {"text": "Add `timeout=10` (or appropriate value) to every requests call."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 0.2, "cwe": "", "owasp": ""}}, {"id": "SEC020", "name": "[SEC020] Secret Printed to Logs (and 1 more): Same pattern found in 1 additional files. Review if needed.", "shortDescription": {"text": "[SEC020] Secret Printed to Logs (and 1 more): Same pattern found in 1 additional files. Review if needed."}, "fullDescription": {"text": "Log only redacted, hashed, or last-four-style metadata. Rotate any secret that may have reached logs."}, "properties": {"scanner": "repobility-threat-engine", "category": "credential_exposure", "severity": "info", "confidence": 0.2, "cwe": "", "owasp": ""}}, {"id": "MINED042", "name": "[MINED042] Cpp New Without Delete: C++ raw new without RAII / unique_ptr \u2014 memory leak risk.", "shortDescription": {"text": "[MINED042] Cpp New Without Delete: C++ raw new without RAII / unique_ptr \u2014 memory leak risk."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-401 /  for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "MINED003", "name": "[MINED003] Rust Unwrap In Prod (and 21 more): Same pattern found in 21 additional files. Review if needed.", "shortDescription": {"text": "[MINED003] Rust Unwrap In Prod (and 21 more): Same pattern found in 21 additional files. Review if needed."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-755 /  for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 0.2, "cwe": "", "owasp": ""}}, {"id": "RUSTSEC-2025-0023", "name": "tokio: RUSTSEC-2025-0023", "shortDescription": {"text": "tokio: RUSTSEC-2025-0023"}, "fullDescription": {"text": "Broadcast channel calls clone in parallel, but does not require `Sync`"}, "properties": {"scanner": "osv-scanner", "category": "dependency", "severity": "high", "confidence": 0.88, "cwe": "", "owasp": ""}}, {"id": "RUSTSEC-2023-0005", "name": "tokio: RUSTSEC-2023-0005", "shortDescription": {"text": "tokio: RUSTSEC-2023-0005"}, "fullDescription": {"text": "`tokio::io::ReadHalf<T>::unsplit` is Unsound"}, "properties": {"scanner": "osv-scanner", "category": "dependency", "severity": "high", "confidence": 0.88, "cwe": "", "owasp": ""}}, {"id": "RUSTSEC-2023-0001", "name": "tokio: RUSTSEC-2023-0001", "shortDescription": {"text": "tokio: RUSTSEC-2023-0001"}, "fullDescription": {"text": "reject_remote_clients Configuration corruption"}, "properties": {"scanner": "osv-scanner", "category": "dependency", "severity": "high", "confidence": 0.88, "cwe": "", "owasp": ""}}, {"id": "RUSTSEC-2020-0071", "name": "time: RUSTSEC-2020-0071", "shortDescription": {"text": "time: RUSTSEC-2020-0071"}, "fullDescription": {"text": "Potential segfault in the time crate"}, "properties": {"scanner": "osv-scanner", "category": "dependency", "severity": "high", "confidence": 0.88, "cwe": "", "owasp": ""}}, {"id": "RUSTSEC-2021-0137", "name": "sodiumoxide: RUSTSEC-2021-0137", "shortDescription": {"text": "sodiumoxide: RUSTSEC-2021-0137"}, "fullDescription": {"text": "sodiumoxide is deprecated"}, "properties": {"scanner": "osv-scanner", "category": "dependency", "severity": "high", "confidence": 0.88, "cwe": "", "owasp": ""}}, {"id": "RUSTSEC-2023-0018", "name": "remove_dir_all: RUSTSEC-2023-0018", "shortDescription": {"text": "remove_dir_all: RUSTSEC-2023-0018"}, "fullDescription": {"text": "Race Condition Enabling Link Following and Time-of-check Time-of-use (TOCTOU)"}, "properties": {"scanner": "osv-scanner", "category": "dependency", "severity": "high", "confidence": 0.88, "cwe": "", "owasp": ""}}, {"id": "RUSTSEC-2026-0097", "name": "rand: RUSTSEC-2026-0097", "shortDescription": {"text": "rand: RUSTSEC-2026-0097"}, "fullDescription": {"text": "Rand is unsound with a custom logger using `rand::rng()`"}, "properties": {"scanner": "osv-scanner", "category": "dependency", "severity": "high", "confidence": 0.88, "cwe": "", "owasp": ""}}, {"id": "RUSTSEC-2024-0437", "name": "protobuf: RUSTSEC-2024-0437", "shortDescription": {"text": "protobuf: RUSTSEC-2024-0437"}, "fullDescription": {"text": "Crash due to uncontrolled recursion in protobuf crate"}, "properties": {"scanner": "osv-scanner", "category": "dependency", "severity": "high", "confidence": 0.88, "cwe": "", "owasp": ""}}, {"id": "RUSTSEC-2024-0019", "name": "mio: RUSTSEC-2024-0019", "shortDescription": {"text": "mio: RUSTSEC-2024-0019"}, "fullDescription": {"text": "Tokens for named pipes may be delivered after deregistration"}, "properties": {"scanner": "osv-scanner", "category": "dependency", "severity": "high", "confidence": 0.88, "cwe": "", "owasp": ""}}, {"id": "RUSTSEC-2024-0384", "name": "instant: RUSTSEC-2024-0384", "shortDescription": {"text": "instant: RUSTSEC-2024-0384"}, "fullDescription": {"text": "`instant` is unmaintained"}, "properties": {"scanner": "osv-scanner", "category": "dependency", "severity": "high", "confidence": 0.88, "cwe": "", "owasp": ""}}, {"id": "RUSTSEC-2026-0007", "name": "bytes: RUSTSEC-2026-0007", "shortDescription": {"text": "bytes: RUSTSEC-2026-0007"}, "fullDescription": {"text": "Integer overflow in `BytesMut::reserve`"}, "properties": {"scanner": "osv-scanner", "category": "dependency", "severity": "high", "confidence": 0.88, "cwe": "", "owasp": ""}}, {"id": "RUSTSEC-2024-0375", "name": "atty: RUSTSEC-2024-0375", "shortDescription": {"text": "atty: RUSTSEC-2024-0375"}, "fullDescription": {"text": "`atty` is unmaintained"}, "properties": {"scanner": "osv-scanner", "category": "dependency", "severity": "high", "confidence": 0.88, "cwe": "", "owasp": ""}}, {"id": "RUSTSEC-2021-0145", "name": "atty: RUSTSEC-2021-0145", "shortDescription": {"text": "atty: RUSTSEC-2021-0145"}, "fullDescription": {"text": "Potential unaligned read"}, "properties": {"scanner": "osv-scanner", "category": "dependency", "severity": "high", "confidence": 0.88, "cwe": "", "owasp": ""}}, {"id": "RUSTSEC-2025-0040", "name": "users: RUSTSEC-2025-0040", "shortDescription": {"text": "users: RUSTSEC-2025-0040"}, "fullDescription": {"text": "`root` appended to group listings"}, "properties": {"scanner": "osv-scanner", "category": "dependency", "severity": "high", "confidence": 0.88, "cwe": "", "owasp": ""}}, {"id": "RUSTSEC-2023-0059", "name": "users: RUSTSEC-2023-0059", "shortDescription": {"text": "users: RUSTSEC-2023-0059"}, "fullDescription": {"text": "Unaligned read of `*const *const c_char` pointer"}, "properties": {"scanner": "osv-scanner", "category": "dependency", "severity": "high", "confidence": 0.88, "cwe": "", "owasp": ""}}, {"id": "RUSTSEC-2023-0040", "name": "users: RUSTSEC-2023-0040", "shortDescription": {"text": "users: RUSTSEC-2023-0040"}, "fullDescription": {"text": "`users` crate is unmaintained"}, "properties": {"scanner": "osv-scanner", "category": "dependency", "severity": "high", "confidence": 0.88, "cwe": "", "owasp": ""}}, {"id": "RUSTSEC-2025-0098", "name": "unic-ucd-version: RUSTSEC-2025-0098", "shortDescription": {"text": "unic-ucd-version: RUSTSEC-2025-0098"}, "fullDescription": {"text": "`unic-ucd-version` is unmaintained"}, "properties": {"scanner": "osv-scanner", "category": "dependency", "severity": "high", "confidence": 0.88, "cwe": "", "owasp": ""}}, {"id": "RUSTSEC-2025-0083", "name": "unic-ucd-bidi: RUSTSEC-2025-0083", "shortDescription": {"text": "unic-ucd-bidi: RUSTSEC-2025-0083"}, "fullDescription": {"text": "`unic-ucd-bidi` is unmaintained"}, "properties": {"scanner": "osv-scanner", "category": "dependency", "severity": "high", "confidence": 0.88, "cwe": "", "owasp": ""}}, {"id": "RUSTSEC-2025-0080", "name": "unic-common: RUSTSEC-2025-0080", "shortDescription": {"text": "unic-common: RUSTSEC-2025-0080"}, "fullDescription": {"text": "`unic-common` is unmaintained"}, "properties": {"scanner": "osv-scanner", "category": "dependency", "severity": "high", "confidence": 0.88, "cwe": "", "owasp": ""}}, {"id": "RUSTSEC-2025-0075", "name": "unic-char-range: RUSTSEC-2025-0075", "shortDescription": {"text": "unic-char-range: RUSTSEC-2025-0075"}, "fullDescription": {"text": "`unic-char-range` is unmaintained"}, "properties": {"scanner": "osv-scanner", "category": "dependency", "severity": "high", "confidence": 0.88, "cwe": "", "owasp": ""}}, {"id": "RUSTSEC-2025-0081", "name": "unic-char-property: RUSTSEC-2025-0081", "shortDescription": {"text": "unic-char-property: RUSTSEC-2025-0081"}, "fullDescription": {"text": "`unic-char-property` is unmaintained"}, "properties": {"scanner": "osv-scanner", "category": "dependency", "severity": "high", "confidence": 0.88, "cwe": "", "owasp": ""}}, {"id": "RUSTSEC-2025-0096", "name": "unic-bidi: RUSTSEC-2025-0096", "shortDescription": {"text": "unic-bidi: RUSTSEC-2025-0096"}, "fullDescription": {"text": "`unic-bidi` is unmaintained"}, "properties": {"scanner": "osv-scanner", "category": "dependency", "severity": "high", "confidence": 0.88, "cwe": "", "owasp": ""}}, {"id": "RUSTSEC-2025-0055", "name": "tracing-subscriber: RUSTSEC-2025-0055", "shortDescription": {"text": "tracing-subscriber: RUSTSEC-2025-0055"}, "fullDescription": {"text": "Logging user input may result in poisoning logs with ANSI escape sequences"}, "properties": {"scanner": "osv-scanner", "category": "dependency", "severity": "high", "confidence": 0.88, "cwe": "", "owasp": ""}}, {"id": "RUSTSEC-2026-0009", "name": "time: RUSTSEC-2026-0009", "shortDescription": {"text": "time: RUSTSEC-2026-0009"}, "fullDescription": {"text": "Denial of Service via Stack Exhaustion"}, "properties": {"scanner": "osv-scanner", "category": "dependency", "severity": "high", "confidence": 0.88, "cwe": "", "owasp": ""}}, {"id": "RUSTSEC-2017-0008", "name": "serial: RUSTSEC-2017-0008", "shortDescription": {"text": "serial: RUSTSEC-2017-0008"}, "fullDescription": {"text": "`serial` crate is unmaintained"}, "properties": {"scanner": "osv-scanner", "category": "dependency", "severity": "high", "confidence": 0.88, "cwe": "", "owasp": ""}}, {"id": "RUSTSEC-2026-0104", "name": "rustls-webpki: RUSTSEC-2026-0104", "shortDescription": {"text": "rustls-webpki: RUSTSEC-2026-0104"}, "fullDescription": {"text": "Reachable panic in certificate revocation list parsing"}, "properties": {"scanner": "osv-scanner", "category": "dependency", "severity": "high", "confidence": 0.88, "cwe": "", "owasp": ""}}, {"id": "RUSTSEC-2026-0099", "name": "rustls-webpki: RUSTSEC-2026-0099", "shortDescription": {"text": "rustls-webpki: RUSTSEC-2026-0099"}, "fullDescription": {"text": "Name constraints were accepted for certificates asserting a wildcard name"}, "properties": {"scanner": "osv-scanner", "category": "dependency", "severity": "high", "confidence": 0.88, "cwe": "", "owasp": ""}}, {"id": "RUSTSEC-2026-0098", "name": "rustls-webpki: RUSTSEC-2026-0098", "shortDescription": {"text": "rustls-webpki: RUSTSEC-2026-0098"}, "fullDescription": {"text": "Name constraints for URI names were incorrectly accepted"}, "properties": {"scanner": "osv-scanner", "category": "dependency", "severity": "high", "confidence": 0.88, "cwe": "", "owasp": ""}}, {"id": "RUSTSEC-2026-0049", "name": "rustls-webpki: RUSTSEC-2026-0049", "shortDescription": {"text": "rustls-webpki: RUSTSEC-2026-0049"}, "fullDescription": {"text": "CRLs not considered authoritative by Distribution Point due to faulty matching logic"}, "properties": {"scanner": "osv-scanner", "category": "dependency", "severity": "high", "confidence": 0.88, "cwe": "", "owasp": ""}}, {"id": "RUSTSEC-2025-0124", "name": "rand_os: RUSTSEC-2025-0124", "shortDescription": {"text": "rand_os: RUSTSEC-2025-0124"}, "fullDescription": {"text": "rand_os crate is unmaintained"}, "properties": {"scanner": "osv-scanner", "category": "dependency", "severity": "high", "confidence": 0.88, "cwe": "", "owasp": ""}}, {"id": "RUSTSEC-2026-0037", "name": "quinn-proto: RUSTSEC-2026-0037", "shortDescription": {"text": "quinn-proto: RUSTSEC-2026-0037"}, "fullDescription": {"text": "Denial of service in Quinn endpoints"}, "properties": {"scanner": "osv-scanner", "category": "dependency", "severity": "high", "confidence": 0.88, "cwe": "", "owasp": ""}}, {"id": "RUSTSEC-2024-0370", "name": "proc-macro-error: RUSTSEC-2024-0370", "shortDescription": {"text": "proc-macro-error: RUSTSEC-2024-0370"}, "fullDescription": {"text": "proc-macro-error is unmaintained"}, "properties": {"scanner": "osv-scanner", "category": "dependency", "severity": "high", "confidence": 0.88, "cwe": "", "owasp": ""}}, {"id": "RUSTSEC-2024-0436", "name": "paste: RUSTSEC-2024-0436", "shortDescription": {"text": "paste: RUSTSEC-2024-0436"}, "fullDescription": {"text": "paste - no longer maintained"}, "properties": {"scanner": "osv-scanner", "category": "dependency", "severity": "high", "confidence": 0.88, "cwe": "", "owasp": ""}}, {"id": "GHSA-xp3w-r5p5-63rr", "name": "openssl: GHSA-xp3w-r5p5-63rr", "shortDescription": {"text": "openssl: GHSA-xp3w-r5p5-63rr"}, "fullDescription": {"text": "rust-openssl has undefined behavior in X509Ref::ocsp_responders for certificates with non-UTF-8 OCSP URLs"}, "properties": {"scanner": "osv-scanner", "category": "dependency", "severity": "high", "confidence": 0.88, "cwe": "", "owasp": ""}}, {"id": "GHSA-pqf5-4pqq-29f5", "name": "openssl: GHSA-pqf5-4pqq-29f5", "shortDescription": {"text": "openssl: GHSA-pqf5-4pqq-29f5"}, "fullDescription": {"text": "rust-openssl: Deriver::derive and PkeyCtxRef::derive can overflow short buffers on OpenSSL 1.1.1"}, "properties": {"scanner": "osv-scanner", "category": "dependency", "severity": "high", "confidence": 0.88, "cwe": "", "owasp": ""}}, {"id": "GHSA-hppc-g8h3-xhp3", "name": "openssl: GHSA-hppc-g8h3-xhp3", "shortDescription": {"text": "openssl: GHSA-hppc-g8h3-xhp3"}, "fullDescription": {"text": "rust-openssl: Unchecked callback length in PSK/cookie trampolines leaks adjacent memory to peer"}, "properties": {"scanner": "osv-scanner", "category": "dependency", "severity": "high", "confidence": 0.88, "cwe": "", "owasp": ""}}, {"id": "GHSA-ghm9-cr32-g9qj", "name": "openssl: GHSA-ghm9-cr32-g9qj", "shortDescription": {"text": "openssl: GHSA-ghm9-cr32-g9qj"}, "fullDescription": {"text": "rust-openssl: rustMdCtxRef::digest_final() writes past caller buffer with no length check"}, "properties": {"scanner": "osv-scanner", "category": "dependency", "severity": "high", "confidence": 0.88, "cwe": "", "owasp": ""}}, {"id": "GHSA-8c75-8mhr-p7r9", "name": "openssl: GHSA-8c75-8mhr-p7r9", "shortDescription": {"text": "openssl: GHSA-8c75-8mhr-p7r9"}, "fullDescription": {"text": "rust-openssl has incorrect bounds assertion in aes key wrap"}, "properties": {"scanner": "osv-scanner", "category": "dependency", "severity": "high", "confidence": 0.88, "cwe": "", "owasp": ""}}, {"id": "RUSTSEC-2025-0022", "name": "openssl: RUSTSEC-2025-0022", "shortDescription": {"text": "openssl: RUSTSEC-2025-0022"}, "fullDescription": {"text": "Use-After-Free in `Md::fetch` and `Cipher::fetch`"}, "properties": {"scanner": "osv-scanner", "category": "dependency", "severity": "high", "confidence": 0.88, "cwe": "", "owasp": ""}}, {"id": "RUSTSEC-2025-0004", "name": "openssl: RUSTSEC-2025-0004", "shortDescription": {"text": "openssl: RUSTSEC-2025-0004"}, "fullDescription": {"text": "ssl::select_next_proto use after free"}, "properties": {"scanner": "osv-scanner", "category": "dependency", "severity": "high", "confidence": 0.88, "cwe": "", "owasp": ""}}, {"id": "RUSTSEC-2024-0013", "name": "libgit2-sys: RUSTSEC-2024-0013", "shortDescription": {"text": "libgit2-sys: RUSTSEC-2024-0013"}, "fullDescription": {"text": "Memory corruption, denial of service, and arbitrary code execution in libgit2"}, "properties": {"scanner": "osv-scanner", "category": "dependency", "severity": "high", "confidence": 0.88, "cwe": "", "owasp": ""}}, {"id": "RUSTSEC-2024-0421", "name": "idna: RUSTSEC-2024-0421", "shortDescription": {"text": "idna: RUSTSEC-2024-0421"}, "fullDescription": {"text": "`idna` accepts Punycode labels that do not produce any non-ASCII when decoded"}, "properties": {"scanner": "osv-scanner", "category": "dependency", "severity": "high", "confidence": 0.88, "cwe": "", "owasp": ""}}, {"id": "RUSTSEC-2024-0419", "name": "gtk3-macros: RUSTSEC-2024-0419", "shortDescription": {"text": "gtk3-macros: RUSTSEC-2024-0419"}, "fullDescription": {"text": "gtk-rs GTK3 bindings - no longer maintained"}, "properties": {"scanner": "osv-scanner", "category": "dependency", "severity": "high", "confidence": 0.88, "cwe": "", "owasp": ""}}, {"id": "RUSTSEC-2024-0420", "name": "gtk-sys: RUSTSEC-2024-0420", "shortDescription": {"text": "gtk-sys: RUSTSEC-2024-0420"}, "fullDescription": {"text": "gtk-rs GTK3 bindings - no longer maintained"}, "properties": {"scanner": "osv-scanner", "category": "dependency", "severity": "high", "confidence": 0.88, "cwe": "", "owasp": ""}}, {"id": "RUSTSEC-2024-0415", "name": "gtk: RUSTSEC-2024-0415", "shortDescription": {"text": "gtk: RUSTSEC-2024-0415"}, "fullDescription": {"text": "gtk-rs GTK3 bindings - no longer maintained"}, "properties": {"scanner": "osv-scanner", "category": "dependency", "severity": "high", "confidence": 0.88, "cwe": "", "owasp": ""}}, {"id": "RUSTSEC-2024-0429", "name": "glib: RUSTSEC-2024-0429", "shortDescription": {"text": "glib: RUSTSEC-2024-0429"}, "fullDescription": {"text": "Unsoundness in `Iterator` and `DoubleEndedIterator` impls for `glib::VariantStrIter`"}, "properties": {"scanner": "osv-scanner", "category": "dependency", "severity": "high", "confidence": 0.88, "cwe": "", "owasp": ""}}, {"id": "RUSTSEC-2026-0008", "name": "git2: RUSTSEC-2026-0008", "shortDescription": {"text": "git2: RUSTSEC-2026-0008"}, "fullDescription": {"text": "Potential undefined behavior when dereferencing Buf struct"}, "properties": {"scanner": "osv-scanner", "category": "dependency", "severity": "high", "confidence": 0.88, "cwe": "", "owasp": ""}}, {"id": "RUSTSEC-2024-0414", "name": "gdkx11-sys: RUSTSEC-2024-0414", "shortDescription": {"text": "gdkx11-sys: RUSTSEC-2024-0414"}, "fullDescription": {"text": "gtk-rs GTK3 bindings - no longer maintained"}, "properties": {"scanner": "osv-scanner", "category": "dependency", "severity": "high", "confidence": 0.88, "cwe": "", "owasp": ""}}, {"id": "RUSTSEC-2024-0411", "name": "gdkwayland-sys: RUSTSEC-2024-0411", "shortDescription": {"text": "gdkwayland-sys: RUSTSEC-2024-0411"}, "fullDescription": {"text": "gtk-rs GTK3 bindings - no longer maintained"}, "properties": {"scanner": "osv-scanner", "category": "dependency", "severity": "high", "confidence": 0.88, "cwe": "", "owasp": ""}}, {"id": "RUSTSEC-2024-0418", "name": "gdk-sys: RUSTSEC-2024-0418", "shortDescription": {"text": "gdk-sys: RUSTSEC-2024-0418"}, "fullDescription": {"text": "gtk-rs GTK3 bindings - no longer maintained"}, "properties": {"scanner": "osv-scanner", "category": "dependency", "severity": "high", "confidence": 0.88, "cwe": "", "owasp": ""}}, {"id": "RUSTSEC-2024-0412", "name": "gdk: RUSTSEC-2024-0412", "shortDescription": {"text": "gdk: RUSTSEC-2024-0412"}, "fullDescription": {"text": "gtk-rs GTK3 bindings - no longer maintained"}, "properties": {"scanner": "osv-scanner", "category": "dependency", "severity": "high", "confidence": 0.88, "cwe": "", "owasp": ""}}, {"id": "RUSTSEC-2021-0154", "name": "fuser: RUSTSEC-2021-0154", "shortDescription": {"text": "fuser: RUSTSEC-2021-0154"}, "fullDescription": {"text": "Uninitalized memory read & leak caused by fuser crate"}, "properties": {"scanner": "osv-scanner", "category": "dependency", "severity": "high", "confidence": 0.88, "cwe": "", "owasp": ""}}, {"id": "RUSTSEC-2023-0051", "name": "dlopen_derive: RUSTSEC-2023-0051", "shortDescription": {"text": "dlopen_derive: RUSTSEC-2023-0051"}, "fullDescription": {"text": "`dlopen_derive` is unmaintained"}, "properties": {"scanner": "osv-scanner", "category": "dependency", "severity": "high", "confidence": 0.88, "cwe": "", "owasp": ""}}, {"id": "RUSTSEC-2024-0388", "name": "derivative: RUSTSEC-2024-0388", "shortDescription": {"text": "derivative: RUSTSEC-2024-0388"}, "fullDescription": {"text": "`derivative` is unmaintained; consider using an alternative"}, "properties": {"scanner": "osv-scanner", "category": "dependency", "severity": "high", "confidence": 0.88, "cwe": "", "owasp": ""}}, {"id": "RUSTSEC-2025-0024", "name": "crossbeam-channel: RUSTSEC-2025-0024", "shortDescription": {"text": "crossbeam-channel: RUSTSEC-2025-0024"}, "fullDescription": {"text": "crossbeam-channel: double free on Drop"}, "properties": {"scanner": "osv-scanner", "category": "dependency", "severity": "high", "confidence": 0.88, "cwe": "", "owasp": ""}}, {"id": "RUSTSEC-2022-0056", "name": "clipboard: RUSTSEC-2022-0056", "shortDescription": {"text": "clipboard: RUSTSEC-2022-0056"}, "fullDescription": {"text": "clipboard is Unmaintained"}, "properties": {"scanner": "osv-scanner", "category": "dependency", "severity": "high", "confidence": 0.88, "cwe": "", "owasp": ""}}, {"id": "RUSTSEC-2025-0141", "name": "bincode: RUSTSEC-2025-0141", "shortDescription": {"text": "bincode: RUSTSEC-2025-0141"}, "fullDescription": {"text": "Bincode is unmaintained"}, "properties": {"scanner": "osv-scanner", "category": "dependency", "severity": "high", "confidence": 0.88, "cwe": "", "owasp": ""}}, {"id": "RUSTSEC-2024-0416", "name": "atk-sys: RUSTSEC-2024-0416", "shortDescription": {"text": "atk-sys: RUSTSEC-2024-0416"}, "fullDescription": {"text": "gtk-rs GTK3 bindings - no longer maintained"}, "properties": {"scanner": "osv-scanner", "category": "dependency", "severity": "high", "confidence": 0.88, "cwe": "", "owasp": ""}}, {"id": "RUSTSEC-2024-0413", "name": "atk: RUSTSEC-2024-0413", "shortDescription": {"text": "atk: RUSTSEC-2024-0413"}, "fullDescription": {"text": "gtk-rs GTK3 bindings - no longer maintained"}, "properties": {"scanner": "osv-scanner", "category": "dependency", "severity": "high", "confidence": 0.88, "cwe": "", "owasp": ""}}, {"id": "RUSTSEC-2021-0139", "name": "ansi_term: RUSTSEC-2021-0139", "shortDescription": {"text": "ansi_term: RUSTSEC-2021-0139"}, "fullDescription": {"text": "ansi_term is Unmaintained"}, "properties": {"scanner": "osv-scanner", "category": "dependency", "severity": "high", "confidence": 0.88, "cwe": "", "owasp": ""}}, {"id": "RUSTSEC-2025-0056", "name": "adler: RUSTSEC-2025-0056", "shortDescription": {"text": "adler: RUSTSEC-2025-0056"}, "fullDescription": {"text": "adler crate is unmaintained, use adler2 instead"}, "properties": {"scanner": "osv-scanner", "category": "dependency", "severity": "high", "confidence": 0.88, "cwe": "", "owasp": ""}}, {"id": "DKR001", "name": "Docker final stage runs as root", "shortDescription": {"text": "Docker final stage runs as root"}, "fullDescription": {"text": "The final runtime stage explicitly uses root. A compromised app process would have root inside the container."}, "properties": {"scanner": "repobility-docker", "category": "docker", "severity": "high", "confidence": 0.95, "cwe": "", "owasp": ""}}, {"id": "MINED004", "name": "[MINED004] Weak Crypto: MD5/SHA1/DES/RC4 used for security context (not just checksums).", "shortDescription": {"text": "[MINED004] Weak Crypto: MD5/SHA1/DES/RC4 used for security context (not just checksums)."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-327 / A02:2021 for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "high", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "MINED001", "name": "[MINED001] Bare Except Pass: except: pass or except Exception: pass \u2014 silently swallows everything including KeyboardInt", "shortDescription": {"text": "[MINED001] Bare Except Pass: except: pass or except Exception: pass \u2014 silently swallows everything including KeyboardInterrupt and bugs."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-755 /  for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "high", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "MINED029", "name": "[MINED029] Kotlin Null Bang: x!! throws NullPointerException if x is null. Bypasses Kotlins null safety.", "shortDescription": {"text": "[MINED029] Kotlin Null Bang: x!! throws NullPointerException if x is null. Bypasses Kotlins null safety."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-476 /  for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "high", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "MINED118", "name": "Dockerfile FROM `debian:bullseye-slim` not pinned by digest", "shortDescription": {"text": "Dockerfile FROM `debian:bullseye-slim` not pinned by digest"}, "fullDescription": {"text": "`FROM debian:bullseye-slim` resolves the tag at build time. The registry CAN re-push a different image for the same tag, so every build is potentially different. Production images should pin to `image@sha256:...` for reproducibility + supply-chain integrity."}, "properties": {"scanner": "repobility-supply-chain", "category": "dependency", "severity": "high", "confidence": 0.9, "cwe": "", "owasp": ""}}, {"id": "generic-api-key", "name": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations.", "shortDescription": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "fullDescription": {"text": "Gitleaks detected a committed secret or credential pattern."}, "properties": {"scanner": "gitleaks", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "cwe": "", "owasp": ""}}, {"id": "MINED133", "name": "Hardcoded Telegram bot webhook URL in source", "shortDescription": {"text": "Hardcoded Telegram bot webhook URL in source"}, "fullDescription": {"text": "File contains a hardcoded `Telegram bot` webhook URL: `https://api.telegram.org/bot123/sendMessage...`. Webhook URLs are unauthenticated POST endpoints \u2014 anyone with the URL can send messages. They are also a common data-exfiltration channel for compromised packages (malicious post-install collects env vars + POSTs them)."}, "properties": {"scanner": "repobility-supply-chain", "category": "dependency", "severity": "critical", "confidence": 0.9, "cwe": "", "owasp": ""}}]}}, "automationDetails": {"id": "repobility/746"}, "properties": {"repository": "rustdesk/rustdesk", "repoUrl": "https://github.com/rustdesk/rustdesk", "branch": "master"}, "results": [{"ruleId": "GHSA-xv59-967r-8726", "level": "warning", "message": {"text": "openssl: GHSA-xv59-967r-8726"}, "properties": {"repobilityId": 61508, "scanner": "osv-scanner", "fingerprint": "40f7a69afef8f05b62f850cc1a053fe6e15a2035daedd2be3c02e1fc04ce060b", "category": "dependency", "severity": "medium", "confidence": 0.88, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "", "aliases": ["CVE-2026-44662"], "package": "openssl", "rule_id": "GHSA-xv59-967r-8726", "scanner": "osv-scanner", "correlation_key": "vuln|openssl|CVE-2026-44662|cargo.lock"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Cargo.lock"}, "region": {"startLine": 1}}}]}, {"ruleId": "GHSA-phqj-4mhp-q6mq", "level": "warning", "message": {"text": "openssl: GHSA-phqj-4mhp-q6mq"}, "properties": {"repobilityId": 61504, "scanner": "osv-scanner", "fingerprint": "e7d9444dd05c6f7db70b4bbdd19e857b94c64c61212cc0633fa15cbc0de69929", "category": "dependency", "severity": "medium", "confidence": 0.88, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "", "aliases": ["CVE-2026-45784"], "package": "openssl", "rule_id": "GHSA-phqj-4mhp-q6mq", "scanner": "osv-scanner", "correlation_key": "vuln|openssl|CVE-2026-45784|cargo.lock"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Cargo.lock"}, "region": {"startLine": 1}}}]}, {"ruleId": "DKR007", "level": "warning", "message": {"text": "Docker build context has no .dockerignore"}, "properties": {"repobilityId": 61389, "scanner": "repobility-docker", "fingerprint": "c98378cf8c37e4866e89d6ca06a24b7e8c44654aa34e6e4bf1367c4a4c0c5b44", "category": "docker", "severity": "medium", "confidence": 0.9, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Dockerfile exists but repository root has no .dockerignore.", "evidence": {"rule_id": "DKR007", "scanner": "repobility-docker", "references": ["https://docs.docker.com/develop/develop-images/dockerfile_best-practices/"], "correlation_key": "fp|c98378cf8c37e4866e89d6ca06a24b7e8c44654aa34e6e4bf1367c4a4c0c5b44"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".dockerignore"}, "region": {"startLine": 1}}}]}, {"ruleId": "COMP001", "level": "warning", "message": {"text": "[COMP001] High cognitive complexity: Function `main` has cognitive complexity 18 (SonarSource scale). Cognitive complexity measures how hard the function is for a human to understand \u2014 nested branches, boolean chains, and recursion all weigh in. Breakdown: elif=5, else=1, if=6, nested_bonus=5, while=1."}, "properties": {"repobilityId": 61369, "scanner": "repobility-threat-engine", "fingerprint": "c64e272fa28b0cd497184f7e67f013a44cf13f0eea355619a3bf8459c74b4379", "category": "quality", "severity": "medium", "confidence": 0.95, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "AST-derived cognitive complexity score = 18 (severity threshold for medium: 15+).", "evidence": {"scanner": "repobility-threat-engine", "function": "main", "breakdown": {"if": 6, "elif": 5, "else": 1, "while": 1, "nested_bonus": 5}, "complexity": 18, "correlation_key": "fp|c64e272fa28b0cd497184f7e67f013a44cf13f0eea355619a3bf8459c74b4379"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "res/device-groups.py"}, "region": {"startLine": 196}}}]}, {"ruleId": "ERR001", "level": "warning", "message": {"text": "[ERR001] Silent Exception Swallowing: Silently swallowing all exceptions hides bugs. Even in cleanup code, log at DEBUG level."}, "properties": {"repobilityId": 61368, "scanner": "repobility-threat-engine", "fingerprint": "2b2c39acd09d0f9d5206350d6195d8a72687a25dd6dc4cb725d94b519ea7b460", "category": "error_handling", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "except Exception:\n        pass", "reason": "Pattern matched with no mitigating context found", "rule_id": "ERR001", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|2b2c39acd09d0f9d5206350d6195d8a72687a25dd6dc4cb725d94b519ea7b460"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "res/user-groups.py"}, "region": {"startLine": 225}}}]}, {"ruleId": "ERR001", "level": "warning", "message": {"text": "[ERR001] Silent Exception Swallowing: Silently swallowing all exceptions hides bugs. Even in cleanup code, log at DEBUG level."}, "properties": {"repobilityId": 61367, "scanner": "repobility-threat-engine", "fingerprint": "7264c85b9c61bf73778c391f7b8ffd9108689d3b0e0783438fa76f4c088701a3", "category": "error_handling", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "except Exception:\n        pass", "reason": "Pattern matched with no mitigating context found", "rule_id": "ERR001", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|7264c85b9c61bf73778c391f7b8ffd9108689d3b0e0783438fa76f4c088701a3"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "res/device-groups.py"}, "region": {"startLine": 191}}}]}, {"ruleId": "AGT015", "level": "warning", "message": {"text": "Remote install command pipes network code directly to a shell"}, "properties": {"repobilityId": 61340, "scanner": "repobility-agent-runtime", "fingerprint": "e769f75c8450495bee52996f2b958e44bfcaf0fb58a146b35f30c973201419f1", "category": "dependency", "severity": "medium", "confidence": 0.7, "triageState": "open", "verdict": "likely", "isResolved": false, "reason": "File contains a remote download piped directly to a shell without visible checksum or signature verification.", "evidence": {"rule_id": "AGT015", "scanner": "repobility-agent-runtime", "references": [], "correlation_key": "fp|e769f75c8450495bee52996f2b958e44bfcaf0fb58a146b35f30c973201419f1"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/README-HU.md"}, "region": {"startLine": 101}}}]}, {"ruleId": "AGT015", "level": "warning", "message": {"text": "Remote install command pipes network code directly to a shell"}, "properties": {"repobilityId": 61339, "scanner": "repobility-agent-runtime", "fingerprint": "dddb17e70c797447d433a1f72a0b35d571b3a3a88d9fdcadb617ab3f8af898d2", "category": "dependency", "severity": "medium", "confidence": 0.7, "triageState": "open", "verdict": "likely", "isResolved": false, "reason": "File contains a remote download piped directly to a shell without visible checksum or signature verification.", "evidence": {"rule_id": "AGT015", "scanner": "repobility-agent-runtime", "references": [], "correlation_key": "fp|dddb17e70c797447d433a1f72a0b35d571b3a3a88d9fdcadb617ab3f8af898d2"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/README-GR.md"}, "region": {"startLine": 110}}}]}, {"ruleId": "AGT015", "level": "warning", "message": {"text": "Remote install command pipes network code directly to a shell"}, "properties": {"repobilityId": 61338, "scanner": "repobility-agent-runtime", "fingerprint": "060d9c31b9a27cc2493e831c36d8fe89d0187d4db74ebc9fea7b173e3a60cd86", "category": "dependency", "severity": "medium", "confidence": 0.7, "triageState": "open", "verdict": "likely", "isResolved": false, "reason": "File contains a remote download piped directly to a shell without visible checksum or signature verification.", "evidence": {"rule_id": "AGT015", "scanner": "repobility-agent-runtime", "references": [], "correlation_key": "fp|060d9c31b9a27cc2493e831c36d8fe89d0187d4db74ebc9fea7b173e3a60cd86"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/README-FR.md"}, "region": {"startLine": 89}}}]}, {"ruleId": "AGT015", "level": "warning", "message": {"text": "Remote install command pipes network code directly to a shell"}, "properties": {"repobilityId": 61337, "scanner": "repobility-agent-runtime", "fingerprint": "f8990f0e3ce0a31aa0b4ddc88b9f591521753cc222f7cd223785353606231827", "category": "dependency", "severity": "medium", "confidence": 0.7, "triageState": "open", "verdict": "likely", "isResolved": false, "reason": "File contains a remote download piped directly to a shell without visible checksum or signature verification.", "evidence": {"rule_id": "AGT015", "scanner": "repobility-agent-runtime", "references": [], "correlation_key": "fp|f8990f0e3ce0a31aa0b4ddc88b9f591521753cc222f7cd223785353606231827"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/README-FI.md"}, "region": {"startLine": 89}}}]}, {"ruleId": "AGT015", "level": "warning", "message": {"text": "Remote install command pipes network code directly to a shell"}, "properties": {"repobilityId": 61336, "scanner": "repobility-agent-runtime", "fingerprint": "f8e462f1f10c9158b6add55321881658be5f368f2ee5f3f9da4aed28c4750386", "category": "dependency", "severity": "medium", "confidence": 0.7, "triageState": "open", "verdict": "likely", "isResolved": false, "reason": "File contains a remote download piped directly to a shell without visible checksum or signature verification.", "evidence": {"rule_id": "AGT015", "scanner": "repobility-agent-runtime", "references": [], "correlation_key": "fp|f8e462f1f10c9158b6add55321881658be5f368f2ee5f3f9da4aed28c4750386"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/README-FA.md"}, "region": {"startLine": 98}}}]}, {"ruleId": "AGT015", "level": "warning", "message": {"text": "Remote install command pipes network code directly to a shell"}, "properties": {"repobilityId": 61335, "scanner": "repobility-agent-runtime", "fingerprint": "4537ed1e57bbe9b2f0cf0c66e59c2a2213f3f6ae6a11f70671187960c512340b", "category": "dependency", "severity": "medium", "confidence": 0.7, "triageState": "open", "verdict": "likely", "isResolved": false, "reason": "File contains a remote download piped directly to a shell without visible checksum or signature verification.", "evidence": {"rule_id": "AGT015", "scanner": "repobility-agent-runtime", "references": [], "correlation_key": "fp|4537ed1e57bbe9b2f0cf0c66e59c2a2213f3f6ae6a11f70671187960c512340b"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/README-ES.md"}, "region": {"startLine": 114}}}]}, {"ruleId": "AGT015", "level": "warning", "message": {"text": "Remote install command pipes network code directly to a shell"}, "properties": {"repobilityId": 61334, "scanner": "repobility-agent-runtime", "fingerprint": "746f79cfa4311a8b4a3fea6cef191ed53e1c16a5fc11acddb4744ee22f065c2b", "category": "dependency", "severity": "medium", "confidence": 0.7, "triageState": "open", "verdict": "likely", "isResolved": false, "reason": "File contains a remote download piped directly to a shell without visible checksum or signature verification.", "evidence": {"rule_id": "AGT015", "scanner": "repobility-agent-runtime", "references": [], "correlation_key": "fp|746f79cfa4311a8b4a3fea6cef191ed53e1c16a5fc11acddb4744ee22f065c2b"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/README-EO.md"}, "region": {"startLine": 89}}}]}, {"ruleId": "AGT015", "level": "warning", "message": {"text": "Remote install command pipes network code directly to a shell"}, "properties": {"repobilityId": 61333, "scanner": "repobility-agent-runtime", "fingerprint": "acd1f9334fad17806e5db1f4db50f774f8e03b43a8263e5a014b0ca878d9d874", "category": "dependency", "severity": "medium", "confidence": 0.7, "triageState": "open", "verdict": "likely", "isResolved": false, "reason": "File contains a remote download piped directly to a shell without visible checksum or signature verification.", "evidence": {"rule_id": "AGT015", "scanner": "repobility-agent-runtime", "references": [], "correlation_key": "fp|acd1f9334fad17806e5db1f4db50f774f8e03b43a8263e5a014b0ca878d9d874"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/README-DE.md"}, "region": {"startLine": 118}}}]}, {"ruleId": "AGT015", "level": "warning", "message": {"text": "Remote install command pipes network code directly to a shell"}, "properties": {"repobilityId": 61332, "scanner": "repobility-agent-runtime", "fingerprint": "f4deb91a381f4122230d1ca681200cb7540bf83f9a5baa05652f84f111dc3035", "category": "dependency", "severity": "medium", "confidence": 0.7, "triageState": "open", "verdict": "likely", "isResolved": false, "reason": "File contains a remote download piped directly to a shell without visible checksum or signature verification.", "evidence": {"rule_id": "AGT015", "scanner": "repobility-agent-runtime", "references": [], "correlation_key": "fp|f4deb91a381f4122230d1ca681200cb7540bf83f9a5baa05652f84f111dc3035"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/README-DA.md"}, "region": {"startLine": 93}}}]}, {"ruleId": "AGT015", "level": "warning", "message": {"text": "Remote install command pipes network code directly to a shell"}, "properties": {"repobilityId": 61331, "scanner": "repobility-agent-runtime", "fingerprint": "31bd00ec9717fc30fa157d2d14b8c0bd4f530be70b3f74232bbdb4482974a543", "category": "dependency", "severity": "medium", "confidence": 0.7, "triageState": "open", "verdict": "likely", "isResolved": false, "reason": "File contains a remote download piped directly to a shell without visible checksum or signature verification.", "evidence": {"rule_id": "AGT015", "scanner": "repobility-agent-runtime", "references": [], "correlation_key": "fp|31bd00ec9717fc30fa157d2d14b8c0bd4f530be70b3f74232bbdb4482974a543"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/README-CS.md"}, "region": {"startLine": 96}}}]}, {"ruleId": "AGT015", "level": "warning", "message": {"text": "Remote install command pipes network code directly to a shell"}, "properties": {"repobilityId": 61330, "scanner": "repobility-agent-runtime", "fingerprint": "b7402d00afe379b7cac2af67aa1293e8874c611ae8f4ce359c3d81e9573f6f00", "category": "dependency", "severity": "medium", "confidence": 0.7, "triageState": "open", "verdict": "likely", "isResolved": false, "reason": "File contains a remote download piped directly to a shell without visible checksum or signature verification.", "evidence": {"rule_id": "AGT015", "scanner": "repobility-agent-runtime", "references": [], "correlation_key": "fp|b7402d00afe379b7cac2af67aa1293e8874c611ae8f4ce359c3d81e9573f6f00"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/README-AR.md"}, "region": {"startLine": 104}}}]}, {"ruleId": "AGT015", "level": "warning", "message": {"text": "Remote install command pipes network code directly to a shell"}, "properties": {"repobilityId": 61329, "scanner": "repobility-agent-runtime", "fingerprint": "781d4abe7997114f1086788c5c2bf0b615f71684efba37a51bb95b0fb27c8abf", "category": "dependency", "severity": "medium", "confidence": 0.7, "triageState": "open", "verdict": "likely", "isResolved": false, "reason": "File contains a remote download piped directly to a shell without visible checksum or signature verification.", "evidence": {"rule_id": "AGT015", "scanner": "repobility-agent-runtime", "references": [], "correlation_key": "fp|781d4abe7997114f1086788c5c2bf0b615f71684efba37a51bb95b0fb27c8abf"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "README.md"}, "region": {"startLine": 118}}}]}, {"ruleId": "MINED124", "level": "warning", "message": {"text": "requirements.txt: `brotli` has no version pin"}, "properties": {"repobilityId": 61327, "scanner": "repobility-supply-chain", "fingerprint": "82136de053340a7b62f4bf5cf300859c8f906fb6776d2a6231cabfec2e04ada0", "category": "dependency", "severity": "medium", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "unpinned-pip-requirement", "owasp": null, "cwe_ids": ["CWE-1357"], "languages": ["python"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|82136de053340a7b62f4bf5cf300859c8f906fb6776d2a6231cabfec2e04ada0"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/portable/requirements.txt"}, "region": {"startLine": 1}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 61325, "scanner": "repobility-ast-engine", "fingerprint": "02a8de2aac95ebc6de617c13b2f78f4d844d43fd24839465cdae9178b45c892c", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|02a8de2aac95ebc6de617c13b2f78f4d844d43fd24839465cdae9178b45c892c"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "res/ab.py"}, "region": {"startLine": 278}}}]}, {"ruleId": "CORE_LARGE_FILES", "level": "warning", "message": {"text": "Average file size is 516 lines (recommend <300)"}, "properties": {"repobilityId": 61303, "scanner": "repobility-core", "fingerprint": "018f3a3c21a34c69dbf30b9f625857179fc728823731f2b9ba9b568031607e4f", "category": "quality", "severity": "medium", "confidence": null, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"rule_id": "CORE_LARGE_FILES", "scanner": "repobility-core", "correlation_key": "fp|018f3a3c21a34c69dbf30b9f625857179fc728823731f2b9ba9b568031607e4f"}}}, {"ruleId": "GHSA-2p6r-x3vv-xqm2", "level": "note", "message": {"text": "rpassword: GHSA-2p6r-x3vv-xqm2"}, "properties": {"repobilityId": 61514, "scanner": "osv-scanner", "fingerprint": "498021af278eecdcaee3b0fc4dde9c4ec480ea38206bda772f7a847f679954e2", "category": "dependency", "severity": "low", "confidence": 0.88, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "", "package": "rpassword", "rule_id": "GHSA-2p6r-x3vv-xqm2", "scanner": "osv-scanner", "correlation_key": "vuln|rpassword|GHSA-2P6R-X3VV-XQM2|cargo.lock"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Cargo.lock"}, "region": {"startLine": 1}}}]}, {"ruleId": "GHSA-xmgf-hq76-4vx2", "level": "note", "message": {"text": "openssl: GHSA-xmgf-hq76-4vx2"}, "properties": {"repobilityId": 61506, "scanner": "osv-scanner", "fingerprint": "0bc60beacdb75611689692a159e78cd7d749ffffcaa137ffd32c2c53a7f6a2a7", "category": "dependency", "severity": "low", "confidence": 0.88, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "", "aliases": ["CVE-2026-41677"], "package": "openssl", "rule_id": "GHSA-xmgf-hq76-4vx2", "scanner": "osv-scanner", "correlation_key": "vuln|openssl|CVE-2026-41677|cargo.lock"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Cargo.lock"}, "region": {"startLine": 1}}}]}, {"ruleId": "COMP001", "level": "note", "message": {"text": "[COMP001] High cognitive complexity: Function `list_groups` has cognitive complexity 9 (SonarSource scale). Cognitive complexity measures how hard the function is for a human to understand \u2014 nested branches, boolean chains, and recursion all weigh in. Breakdown: break=1, if=4, nested_bonus=3, while=1."}, "properties": {"repobilityId": 61371, "scanner": "repobility-threat-engine", "fingerprint": "2b624b9cfa7a791a2a52c97ef318462681fb55e9161b26faaf60618c38e47caf", "category": "quality", "severity": "low", "confidence": 0.95, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "AST-derived cognitive complexity score = 9 (severity threshold for low: 8+).", "evidence": {"scanner": "repobility-threat-engine", "function": "list_groups", "breakdown": {"if": 4, "break": 1, "while": 1, "nested_bonus": 3}, "complexity": 9, "correlation_key": "fp|2b624b9cfa7a791a2a52c97ef318462681fb55e9161b26faaf60618c38e47caf"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "res/device-groups.py"}, "region": {"startLine": 40}}}]}, {"ruleId": "COMP001", "level": "note", "message": {"text": "[COMP001] High cognitive complexity: Function `view_devices` has cognitive complexity 14 (SonarSource scale). Cognitive complexity measures how hard the function is for a human to understand \u2014 nested branches, boolean chains, and recursion all weigh in. Breakdown: and=1, break=1, for=1, if=4, nested_bonus=5, ternary=1, while=1."}, "properties": {"repobilityId": 61370, "scanner": "repobility-threat-engine", "fingerprint": "e1303bd64e7e069c766ea5d1a4a603b63d39d238aab38f4a7d7d2a77439a1db4", "category": "quality", "severity": "low", "confidence": 0.95, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "AST-derived cognitive complexity score = 14 (severity threshold for low: 8+).", "evidence": {"scanner": "repobility-threat-engine", "function": "view_devices", "breakdown": {"if": 4, "and": 1, "for": 1, "break": 1, "while": 1, "ternary": 1, "nested_bonus": 5}, "complexity": 14, "correlation_key": "fp|e1303bd64e7e069c766ea5d1a4a603b63d39d238aab38f4a7d7d2a77439a1db4"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "res/device-groups.py"}, "region": {"startLine": 120}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 61324, "scanner": "repobility-ai-code-hygiene", "fingerprint": "848d1f97d0cba154871b21bbe745951daa5806a8a3fccc54de07d943fa354c97", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "src/whiteboard/linux.rs", "duplicate_line": 328, "correlation_key": "fp|848d1f97d0cba154871b21bbe745951daa5806a8a3fccc54de07d943fa354c97"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/whiteboard/windows.rs"}, "region": {"startLine": 113}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 61323, "scanner": "repobility-ai-code-hygiene", "fingerprint": "67f531fb414ec9aeace09ce7b6d797a335483a0dba5d5a1464c74e3744df38c6", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "libs/virtual_display/src/lib.rs", "duplicate_line": 37, "correlation_key": "fp|67f531fb414ec9aeace09ce7b6d797a335483a0dba5d5a1464c74e3744df38c6"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/server/printer_service.rs"}, "region": {"startLine": 36}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 61322, "scanner": "repobility-ai-code-hygiene", "fingerprint": "5b7c0f151dc04b7f57dba7aac95b84ff60c82d17ed7bb5373e47e6c967071c84", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "src/privacy_mode/win_topmost_window.rs", "duplicate_line": 122, "correlation_key": "fp|5b7c0f151dc04b7f57dba7aac95b84ff60c82d17ed7bb5373e47e6c967071c84"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/privacy_mode/win_virtual_display.rs"}, "region": {"startLine": 419}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 61321, "scanner": "repobility-ai-code-hygiene", "fingerprint": "628d8deedd1cd0ba65f98e8ed4464cf41e1c6b33147621dda574bc2b45253085", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "src/plugin/native_handlers/session.rs", "duplicate_line": 73, "correlation_key": "fp|628d8deedd1cd0ba65f98e8ed4464cf41e1c6b33147621dda574bc2b45253085"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/plugin/native_handlers/ui.rs"}, "region": {"startLine": 59}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 61320, "scanner": "repobility-ai-code-hygiene", "fingerprint": "74919f690e5203fb18491549912756e9e4502e0afb49e8d7fca4fa73c8ce247d", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "res/device-groups.py", "duplicate_line": 10, "correlation_key": "fp|74919f690e5203fb18491549912756e9e4502e0afb49e8d7fca4fa73c8ce247d"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "res/users.py"}, "region": {"startLine": 8}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 61319, "scanner": "repobility-ai-code-hygiene", "fingerprint": "12f63283f20d168a7cc205c7c6d92bbc23efdc8d1c40a1a6d1350bdb186085a5", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "res/device-groups.py", "duplicate_line": 1, "correlation_key": "fp|12f63283f20d168a7cc205c7c6d92bbc23efdc8d1c40a1a6d1350bdb186085a5"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "res/user-groups.py"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 61318, "scanner": "repobility-ai-code-hygiene", "fingerprint": "57e2c2700c52fb9b9f4bbb3f04d6601a7fe489bbc61c9413b314a685c37d26af", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "res/device-groups.py", "duplicate_line": 1, "correlation_key": "fp|57e2c2700c52fb9b9f4bbb3f04d6601a7fe489bbc61c9413b314a685c37d26af"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "res/strategies.py"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 61317, "scanner": "repobility-ai-code-hygiene", "fingerprint": "e6c8e755e761e9ffff118487042758049c3e56a9c1595f1c39e42c26119aa53f", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "res/ab.py", "duplicate_line": 97, "correlation_key": "fp|e6c8e755e761e9ffff118487042758049c3e56a9c1595f1c39e42c26119aa53f"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "res/audits.py"}, "region": {"startLine": 115}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 61316, "scanner": "repobility-ai-code-hygiene", "fingerprint": "3ba1c4f87ea39b0d7e4db3f1484d0e3605245bcb34e8e7fdf49b97917074e0de", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "libs/scrap/src/common/android.rs", "duplicate_line": 64, "correlation_key": "fp|3ba1c4f87ea39b0d7e4db3f1484d0e3605245bcb34e8e7fdf49b97917074e0de"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/scrap/src/common/x11.rs"}, "region": {"startLine": 51}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 61315, "scanner": "repobility-ai-code-hygiene", "fingerprint": "60f010d26cc9bfabec7bd9eacbe6512516457a90995bb4806297050f13b8f302", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "libs/scrap/src/common/dxgi.rs", "duplicate_line": 55, "correlation_key": "fp|60f010d26cc9bfabec7bd9eacbe6512516457a90995bb4806297050f13b8f302"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/scrap/src/common/x11.rs"}, "region": {"startLine": 27}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 61314, "scanner": "repobility-ai-code-hygiene", "fingerprint": "c57017bc1593b1f275944df282248c3a4a37ee32dbb767a715790f1d3a7d39c6", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "libs/scrap/src/common/aom.rs", "duplicate_line": 190, "correlation_key": "fp|c57017bc1593b1f275944df282248c3a4a37ee32dbb767a715790f1d3a7d39c6"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/scrap/src/common/vpxcodec.rs"}, "region": {"startLine": 121}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 61313, "scanner": "repobility-ai-code-hygiene", "fingerprint": "a730dd92b5c9f3e2401c0531b167527de2e50af8b0eb568fb6bd6b6163ece051", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "libs/scrap/src/common/android.rs", "duplicate_line": 62, "correlation_key": "fp|a730dd92b5c9f3e2401c0531b167527de2e50af8b0eb568fb6bd6b6163ece051"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/scrap/src/common/dxgi.rs"}, "region": {"startLine": 80}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 61312, "scanner": "repobility-ai-code-hygiene", "fingerprint": "43105329adcd2ea32304718d394dff398a69906a28083e7adc05ef81e968a96d", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "flutter/lib/models/native_model.dart", "duplicate_line": 47, "correlation_key": "fp|43105329adcd2ea32304718d394dff398a69906a28083e7adc05ef81e968a96d"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "flutter/lib/models/web_model.dart"}, "region": {"startLine": 42}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 61311, "scanner": "repobility-ai-code-hygiene", "fingerprint": "96f22b6552360ec5c0ecaeb08c5c7b79b33dbad49c3e875f41ffc2af60aa2d3a", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "flutter/lib/desktop/pages/terminal_page.dart", "duplicate_line": 52, "correlation_key": "fp|96f22b6552360ec5c0ecaeb08c5c7b79b33dbad49c3e875f41ffc2af60aa2d3a"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "flutter/lib/mobile/pages/terminal_page.dart"}, "region": {"startLine": 54}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 61310, "scanner": "repobility-ai-code-hygiene", "fingerprint": "d514e57db0efb2eaa2391c25793d2b8341b6c3f5b7015ed3ec8ba7738307b619", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "flutter/lib/desktop/pages/connection_page.dart", "duplicate_line": 183, "correlation_key": "fp|d514e57db0efb2eaa2391c25793d2b8341b6c3f5b7015ed3ec8ba7738307b619"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "flutter/lib/mobile/pages/connection_page.dart"}, "region": {"startLine": 44}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 61309, "scanner": "repobility-ai-code-hygiene", "fingerprint": "e884da2435b836dbcd1bfc4aaa6de195e3a41ed4924f43b82af9cf51df1f2174", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "flutter/lib/desktop/screen/desktop_remote_screen.dart", "duplicate_line": 10, "correlation_key": "fp|e884da2435b836dbcd1bfc4aaa6de195e3a41ed4924f43b82af9cf51df1f2174"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "flutter/lib/desktop/screen/desktop_view_camera_screen.dart"}, "region": {"startLine": 10}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 61308, "scanner": "repobility-ai-code-hygiene", "fingerprint": "13a3d366f64d637e96021d7bb408a7a0a403b909405744468cd3ef65a90e7818", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "flutter/lib/desktop/pages/file_manager_tab_page.dart", "duplicate_line": 136, "correlation_key": "fp|13a3d366f64d637e96021d7bb408a7a0a403b909405744468cd3ef65a90e7818"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "flutter/lib/desktop/pages/view_camera_tab_page.dart"}, "region": {"startLine": 327}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 61307, "scanner": "repobility-ai-code-hygiene", "fingerprint": "ea2ef2b1f122f412e0a78534f6a75665152a235b7fc5d5ff56022fbc8e2a83d7", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "flutter/lib/desktop/pages/remote_tab_page.dart", "duplicate_line": 45, "correlation_key": "fp|ea2ef2b1f122f412e0a78534f6a75665152a235b7fc5d5ff56022fbc8e2a83d7"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "flutter/lib/desktop/pages/view_camera_tab_page.dart"}, "region": {"startLine": 45}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 61306, "scanner": "repobility-ai-code-hygiene", "fingerprint": "e492287089784b7c2528bb58b6b2aa74f5f88cd7feb0d0aeb2ea331114f1aad1", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "flutter/lib/desktop/pages/file_manager_tab_page.dart", "duplicate_line": 107, "correlation_key": "fp|e492287089784b7c2528bb58b6b2aa74f5f88cd7feb0d0aeb2ea331114f1aad1"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "flutter/lib/desktop/pages/terminal_tab_page.dart"}, "region": {"startLine": 445}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 61305, "scanner": "repobility-ai-code-hygiene", "fingerprint": "18209c16b39b6f22e95b4db6194f0dc47e52aac7d14755965b7e6efc563bb5d9", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "flutter/lib/desktop/pages/file_manager_tab_page.dart", "duplicate_line": 136, "correlation_key": "fp|18209c16b39b6f22e95b4db6194f0dc47e52aac7d14755965b7e6efc563bb5d9"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "flutter/lib/desktop/pages/remote_tab_page.dart"}, "region": {"startLine": 359}}}]}, {"ruleId": "AIC009", "level": "note", "message": {"text": "Multiple AI-agent scaffold marker files are present"}, "properties": {"repobilityId": 61304, "scanner": "repobility-ai-code-hygiene", "fingerprint": "ff6e1d5f8944c42e18d355d72dd1be436aa8bed440cc2a7bce2c8a8fb4706ed6", "category": "quality", "severity": "low", "confidence": 0.68, "triageState": "open", "verdict": "likely", "isResolved": false, "reason": "Repository root contains several AI-agent scaffold marker files.", "evidence": {"markers": ["AGENTS.md", "CLAUDE.md", "GEMINI.md"], "rule_id": "AIC009", "scanner": "repobility-ai-code-hygiene", "references": ["https://arxiv.org/abs/2601.15195"], "correlation_key": "fp|ff6e1d5f8944c42e18d355d72dd1be436aa8bed440cc2a7bce2c8a8fb4706ed6"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "AGENTS.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "CORE_NO_LICENSE", "level": "note", "message": {"text": "No LICENSE file"}, "properties": {"repobilityId": 61302, "scanner": "repobility-core", "fingerprint": "9314e9238cd99885865b92490d1aaa96ca62b1390c9377878d5f3d99227e1c3c", "category": "documentation", "severity": "low", "confidence": null, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"rule_id": "CORE_NO_LICENSE", "scanner": "repobility-core", "correlation_key": "repo|documentation|core_no_license"}}}, {"ruleId": "MINED068", "level": "none", "message": {"text": "[MINED068] Rust Unsafe Block (and 9 more): Same pattern found in 9 additional files. Review if needed."}, "properties": {"repobilityId": 61387, "scanner": "repobility-threat-engine", "fingerprint": "6bab8d56e3bb32b73fa8f0ba570b552994adb5f51ad9bbb7f83a0284b848a92f", "category": "quality", "severity": "info", "confidence": 0.2, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Deduplicated summary only: 9 additional occurrences found. The top occurrences remain visible as actionable findings.", "evidence": {"mined": true, "mining": {"slug": "rust-unsafe-block", "owasp": null, "cwe_ids": ["CWE-119"], "languages": ["rust"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348060+00:00", "triaged_in_corpus": 12, "observations_count": 42383, "ai_coder_pattern_id": 116}, "scanner": "repobility-threat-engine", "aggregated": true, "correlation_key": "fp|6bab8d56e3bb32b73fa8f0ba570b552994adb5f51ad9bbb7f83a0284b848a92f", "aggregated_count": 9}}}, {"ruleId": "MINED068", "level": "none", "message": {"text": "[MINED068] Rust Unsafe Block: unsafe { ... } block. Compiler safety guarantees disabled inside."}, "properties": {"repobilityId": 61386, "scanner": "repobility-threat-engine", "fingerprint": "8bb6ad8807657e090969028bebbee05e71195a54accfc460d5ef13b5e028a137", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "rust-unsafe-block", "owasp": null, "cwe_ids": ["CWE-119"], "languages": ["rust"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348060+00:00", "triaged_in_corpus": 12, "observations_count": 42383, "ai_coder_pattern_id": 116}, "scanner": "repobility-threat-engine", "correlation_key": "fp|8bb6ad8807657e090969028bebbee05e71195a54accfc460d5ef13b5e028a137"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/plugin/desc.rs"}, "region": {"startLine": 81}}}]}, {"ruleId": "MINED068", "level": "none", "message": {"text": "[MINED068] Rust Unsafe Block: unsafe { ... } block. Compiler safety guarantees disabled inside."}, "properties": {"repobilityId": 61385, "scanner": "repobility-threat-engine", "fingerprint": "00c544765fd6fb691d92c2e61982c99d0283cece6fcc710b90e75f73d3ada069", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "rust-unsafe-block", "owasp": null, "cwe_ids": ["CWE-119"], "languages": ["rust"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348060+00:00", "triaged_in_corpus": 12, "observations_count": 42383, "ai_coder_pattern_id": 116}, "scanner": "repobility-threat-engine", "correlation_key": "fp|00c544765fd6fb691d92c2e61982c99d0283cece6fcc710b90e75f73d3ada069"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/platform/delegate.rs"}, "region": {"startLine": 40}}}]}, {"ruleId": "MINED068", "level": "none", "message": {"text": "[MINED068] Rust Unsafe Block: unsafe { ... } block. Compiler safety guarantees disabled inside."}, "properties": {"repobilityId": 61384, "scanner": "repobility-threat-engine", "fingerprint": "916e4fb5d1af64507613f414fce3e06ee711c53e20a04f2aad5f31fd19db6c1f", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "rust-unsafe-block", "owasp": null, "cwe_ids": ["CWE-119"], "languages": ["rust"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348060+00:00", "triaged_in_corpus": 12, "observations_count": 42383, "ai_coder_pattern_id": 116}, "scanner": "repobility-threat-engine", "correlation_key": "fp|916e4fb5d1af64507613f414fce3e06ee711c53e20a04f2aad5f31fd19db6c1f"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/main.rs"}, "region": {"startLine": 27}}}]}, {"ruleId": "MINED047", "level": "none", "message": {"text": "[MINED047] Emoji In Source: Emoji \u2705 \u274c \ud83d\ude80 in code/comments \u2014 common AI output unless explicitly requested."}, "properties": {"repobilityId": 61383, "scanner": "repobility-threat-engine", "fingerprint": "07b2955831c76e8b1d7a666889ba4d6612b94f76a5ee112e12c02f7c22a2d4cb", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "emoji-in-source", "owasp": null, "cwe_ids": [], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348010+00:00", "triaged_in_corpus": 9, "observations_count": 1468364, "ai_coder_pattern_id": 29}, "scanner": "repobility-threat-engine", "correlation_key": "fp|07b2955831c76e8b1d7a666889ba4d6612b94f76a5ee112e12c02f7c22a2d4cb"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang.rs"}, "region": {"startLine": 91}}}]}, {"ruleId": "MINED043", "level": "none", "message": {"text": "[MINED043] Http Not Https: Hardcoded http:// (not localhost) for endpoints that handle credentials or data."}, "properties": {"repobilityId": 61382, "scanner": "repobility-threat-engine", "fingerprint": "478546c2befd3353eada30860de740fb0d528305164d5295b23ae655d4123b6d", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "http-not-https", "owasp": "A02:2021", "cwe_ids": ["CWE-319"], "precision": 0.917, "promoted_at": "2026-05-18T14:01:32.347999+00:00", "triaged_in_corpus": 12, "observations_count": 4113831, "ai_coder_pattern_id": 15}, "scanner": "repobility-threat-engine", "correlation_key": "fp|478546c2befd3353eada30860de740fb0d528305164d5295b23ae655d4123b6d"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hbbs_http/http_client.rs"}, "region": {"startLine": 54}}}]}, {"ruleId": "MINED077", "level": "none", "message": {"text": "[MINED077] Python Open No Context: fp = open(path) outside with-block leaks file handles."}, "properties": {"repobilityId": 61380, "scanner": "repobility-threat-engine", "fingerprint": "f7168df948e50fd1900edd996cbe30256d9e4705fc47c8ba0395d4e30efce82c", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "python-open-no-context", "owasp": null, "cwe_ids": ["CWE-772"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348081+00:00", "triaged_in_corpus": 12, "observations_count": 7864, "ai_coder_pattern_id": 123}, "scanner": "repobility-threat-engine", "correlation_key": "fp|f7168df948e50fd1900edd996cbe30256d9e4705fc47c8ba0395d4e30efce82c"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "res/lang.py"}, "region": {"startLine": 46}}}]}, {"ruleId": "MINED077", "level": "none", "message": {"text": "[MINED077] Python Open No Context: fp = open(path) outside with-block leaks file handles."}, "properties": {"repobilityId": 61379, "scanner": "repobility-threat-engine", "fingerprint": "3a4c84b19a8fe9552679852047961a83307b022938992aee1d519faa719c0de9", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "python-open-no-context", "owasp": null, "cwe_ids": ["CWE-772"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348081+00:00", "triaged_in_corpus": 12, "observations_count": 7864, "ai_coder_pattern_id": 123}, "scanner": "repobility-threat-engine", "correlation_key": "fp|3a4c84b19a8fe9552679852047961a83307b022938992aee1d519faa719c0de9"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "res/inline-sciter.py"}, "region": {"startLine": 7}}}]}, {"ruleId": "SEC029", "level": "none", "message": {"text": "[SEC029] Server-Side Request Forgery (SSRF) \u2014 outbound HTTP from user input (and 1 more): Same pattern found in 1 additional files. Review if needed."}, "properties": {"repobilityId": 61378, "scanner": "repobility-threat-engine", "fingerprint": "8f4ed64e85e23651a781f801f20cbe7cf192b517efa4818df0dde258906a2c2b", "category": "ssrf", "severity": "info", "confidence": 0.2, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Deduplicated summary only: 1 additional occurrences found. The top occurrences remain visible as actionable findings.", "evidence": {"reason": "Deduplicated summary only: 1 additional occurrences found. The top occurrences remain visible as actionable findings.", "rule_id": "SEC029", "scanner": "repobility-threat-engine", "confidence": 0.2, "correlation_key": "fp|8f4ed64e85e23651a781f801f20cbe7cf192b517efa4818df0dde258906a2c2b"}}}, {"ruleId": "MINED064", "level": "none", "message": {"text": "[MINED064] Python Input Call: input() blocks for stdin. Inappropriate in services."}, "properties": {"repobilityId": 61374, "scanner": "repobility-threat-engine", "fingerprint": "dbea16a069019527921fa8a2a56b9a8ca9e7e95065170a3e259fc44a4b606e55", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "python-input-call", "owasp": null, "cwe_ids": [], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348050+00:00", "triaged_in_corpus": 12, "observations_count": 66378, "ai_coder_pattern_id": 124}, "scanner": "repobility-threat-engine", "correlation_key": "fp|dbea16a069019527921fa8a2a56b9a8ca9e7e95065170a3e259fc44a4b606e55"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "res/users.py"}, "region": {"startLine": 248}}}]}, {"ruleId": "MINED064", "level": "none", "message": {"text": "[MINED064] Python Input Call: input() blocks for stdin. Inappropriate in services."}, "properties": {"repobilityId": 61373, "scanner": "repobility-threat-engine", "fingerprint": "a79afef2bf13436f0a900e5b282be4044f4c407ce4e2b33e5d9d8cb73e011410", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "python-input-call", "owasp": null, "cwe_ids": [], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348050+00:00", "triaged_in_corpus": 12, "observations_count": 66378, "ai_coder_pattern_id": 124}, "scanner": "repobility-threat-engine", "correlation_key": "fp|a79afef2bf13436f0a900e5b282be4044f4c407ce4e2b33e5d9d8cb73e011410"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "res/devices.py"}, "region": {"startLine": 175}}}]}, {"ruleId": "COMP001", "level": "none", "message": {"text": "[COMP001] High cognitive complexity (and 13 more): Same pattern found in 13 additional files. Review if needed."}, "properties": {"repobilityId": 61372, "scanner": "repobility-threat-engine", "fingerprint": "79d352d73437ebd7dfb28aea2dab6bd7823e8d3a3a6573567ca5ec0771ab478c", "category": "quality", "severity": "info", "confidence": 0.2, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Deduplicated summary only: 13 additional occurrences found. The top occurrences remain visible as actionable findings.", "evidence": {"scanner": "repobility-threat-engine", "function": "main", "breakdown": {"if": 6, "elif": 5, "else": 1, "while": 1, "nested_bonus": 5}, "aggregated": true, "complexity": 18, "correlation_key": "fp|79d352d73437ebd7dfb28aea2dab6bd7823e8d3a3a6573567ca5ec0771ab478c", "aggregated_count": 13}}}, {"ruleId": "MINED067", "level": "none", "message": {"text": "[MINED067] Python Requests No Timeout (and 3 more): Same pattern found in 3 additional files. Review if needed."}, "properties": {"repobilityId": 61366, "scanner": "repobility-threat-engine", "fingerprint": "22c0d567d696a6862689f7c9fd8c307213fa0bf7df0ff8c77916ef3d9279f800", "category": "quality", "severity": "info", "confidence": 0.2, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Deduplicated summary only: 3 additional occurrences found. The top occurrences remain visible as actionable findings.", "evidence": {"mined": true, "mining": {"slug": "python-requests-no-timeout", "owasp": null, "cwe_ids": ["CWE-400"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348058+00:00", "triaged_in_corpus": 12, "observations_count": 45429, "ai_coder_pattern_id": 122}, "scanner": "repobility-threat-engine", "aggregated": true, "correlation_key": "fp|22c0d567d696a6862689f7c9fd8c307213fa0bf7df0ff8c77916ef3d9279f800", "aggregated_count": 3}}}, {"ruleId": "MINED067", "level": "none", "message": {"text": "[MINED067] Python Requests No Timeout: requests.get/post/etc. without timeout= can hang forever."}, "properties": {"repobilityId": 61365, "scanner": "repobility-threat-engine", "fingerprint": "88739ab8934fe65af98f58b629c1c71addf7c41536e6b8dde9c493b4fee6f03e", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "python-requests-no-timeout", "owasp": null, "cwe_ids": ["CWE-400"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348058+00:00", "triaged_in_corpus": 12, "observations_count": 45429, "ai_coder_pattern_id": 122}, "scanner": "repobility-threat-engine", "correlation_key": "fp|88739ab8934fe65af98f58b629c1c71addf7c41536e6b8dde9c493b4fee6f03e"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "res/job.py"}, "region": {"startLine": 32}}}]}, {"ruleId": "MINED067", "level": "none", "message": {"text": "[MINED067] Python Requests No Timeout: requests.get/post/etc. without timeout= can hang forever."}, "properties": {"repobilityId": 61364, "scanner": "repobility-threat-engine", "fingerprint": "c868e4eb8c62d89dd56405816d4866b2f13a009fc2a6f2f38ccb92a9414da92b", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "python-requests-no-timeout", "owasp": null, "cwe_ids": ["CWE-400"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348058+00:00", "triaged_in_corpus": 12, "observations_count": 45429, "ai_coder_pattern_id": 122}, "scanner": "repobility-threat-engine", "correlation_key": "fp|c868e4eb8c62d89dd56405816d4866b2f13a009fc2a6f2f38ccb92a9414da92b"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "res/devices.py"}, "region": {"startLine": 42}}}]}, {"ruleId": "MINED067", "level": "none", "message": {"text": "[MINED067] Python Requests No Timeout: requests.get/post/etc. without timeout= can hang forever."}, "properties": {"repobilityId": 61363, "scanner": "repobility-threat-engine", "fingerprint": "8d25cd8e0ab28bbbd92f9cf99af5392acee706e8c64e995a81bdb67ca880eb83", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "python-requests-no-timeout", "owasp": null, "cwe_ids": ["CWE-400"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348058+00:00", "triaged_in_corpus": 12, "observations_count": 45429, "ai_coder_pattern_id": 122}, "scanner": "repobility-threat-engine", "correlation_key": "fp|8d25cd8e0ab28bbbd92f9cf99af5392acee706e8c64e995a81bdb67ca880eb83"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "res/device-groups.py"}, "region": {"startLine": 49}}}]}, {"ruleId": "MINED050", "level": "none", "message": {"text": "[MINED050] Stub Only Function: Function declared but body is just pass, return None, raise NotImplementedError, or TODO comment."}, "properties": {"repobilityId": 61362, "scanner": "repobility-threat-engine", "fingerprint": "b0ed74fda2ee9b8bdba7c9d512e5251c5ba94dad60bd45a1ed30d40ced75c81d", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "stub-only-function", "owasp": null, "cwe_ids": ["CWE-1188"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348017+00:00", "triaged_in_corpus": 12, "observations_count": 633513, "ai_coder_pattern_id": 2}, "scanner": "repobility-threat-engine", "correlation_key": "fp|b0ed74fda2ee9b8bdba7c9d512e5251c5ba94dad60bd45a1ed30d40ced75c81d"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "res/user-groups.py"}, "region": {"startLine": 226}}}]}, {"ruleId": "MINED050", "level": "none", "message": {"text": "[MINED050] Stub Only Function: Function declared but body is just pass, return None, raise NotImplementedError, or TODO comment."}, "properties": {"repobilityId": 61361, "scanner": "repobility-threat-engine", "fingerprint": "4d6e8bfa2f1fea53f6facf69f4c5a758ad3997665e0b849afffabe99e4f263fa", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "stub-only-function", "owasp": null, "cwe_ids": ["CWE-1188"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348017+00:00", "triaged_in_corpus": 12, "observations_count": 633513, "ai_coder_pattern_id": 2}, "scanner": "repobility-threat-engine", "correlation_key": "fp|4d6e8bfa2f1fea53f6facf69f4c5a758ad3997665e0b849afffabe99e4f263fa"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "res/device-groups.py"}, "region": {"startLine": 192}}}]}, {"ruleId": "MINED049", "level": "none", "message": {"text": "[MINED049] Print Pii (and 1 more): Same pattern found in 1 additional files. Review if needed."}, "properties": {"repobilityId": 61360, "scanner": "repobility-threat-engine", "fingerprint": "ffe0bb40951d1fe20325d6626515b6b3f5194cef1a3be6e6de11e9645a8d8a72", "category": "quality", "severity": "info", "confidence": 0.2, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Deduplicated summary only: 1 additional occurrences found. The top occurrences remain visible as actionable findings.", "evidence": {"mined": true, "mining": {"slug": "print-pii", "owasp": "A09:2021", "cwe_ids": ["CWE-532"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348015+00:00", "triaged_in_corpus": 12, "observations_count": 676566, "ai_coder_pattern_id": 26}, "scanner": "repobility-threat-engine", "aggregated": true, "correlation_key": "fp|ffe0bb40951d1fe20325d6626515b6b3f5194cef1a3be6e6de11e9645a8d8a72", "aggregated_count": 1}}}, {"ruleId": "MINED049", "level": "none", "message": {"text": "[MINED049] Print Pii: Logging password/token/email/ssn directly to stdout."}, "properties": {"repobilityId": 61359, "scanner": "repobility-threat-engine", "fingerprint": "63b777df06e1f187ca59bd3004f8ee1d607da81bb8de1862d719bde97a3a60ae", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "print-pii", "owasp": "A09:2021", "cwe_ids": ["CWE-532"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348015+00:00", "triaged_in_corpus": 12, "observations_count": 676566, "ai_coder_pattern_id": 26}, "scanner": "repobility-threat-engine", "correlation_key": "fp|63b777df06e1f187ca59bd3004f8ee1d607da81bb8de1862d719bde97a3a60ae"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "res/user-groups.py"}, "region": {"startLine": 265}}}]}, {"ruleId": "MINED049", "level": "none", "message": {"text": "[MINED049] Print Pii: Logging password/token/email/ssn directly to stdout."}, "properties": {"repobilityId": 61358, "scanner": "repobility-threat-engine", "fingerprint": "0518b992ca4812f14dab255cba1f179e69745eef4347f051c1f9707052d71d33", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "print-pii", "owasp": "A09:2021", "cwe_ids": ["CWE-532"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348015+00:00", "triaged_in_corpus": 12, "observations_count": 676566, "ai_coder_pattern_id": 26}, "scanner": "repobility-threat-engine", "correlation_key": "fp|0518b992ca4812f14dab255cba1f179e69745eef4347f051c1f9707052d71d33"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "res/strategies.py"}, "region": {"startLine": 262}}}]}, {"ruleId": "MINED049", "level": "none", "message": {"text": "[MINED049] Print Pii: Logging password/token/email/ssn directly to stdout."}, "properties": {"repobilityId": 61357, "scanner": "repobility-threat-engine", "fingerprint": "3ec7ae7e78b59846be1bac0ebbbb4706aadcb4bc517f95ae1c664123e87e8666", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "print-pii", "owasp": "A09:2021", "cwe_ids": ["CWE-532"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348015+00:00", "triaged_in_corpus": 12, "observations_count": 676566, "ai_coder_pattern_id": 26}, "scanner": "repobility-threat-engine", "correlation_key": "fp|3ec7ae7e78b59846be1bac0ebbbb4706aadcb4bc517f95ae1c664123e87e8666"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "res/device-groups.py"}, "region": {"startLine": 233}}}]}, {"ruleId": "SEC078", "level": "none", "message": {"text": "[SEC078] Python: requests without timeout (and 3 more): Same pattern found in 3 additional files. Review if needed."}, "properties": {"repobilityId": 61354, "scanner": "repobility-threat-engine", "fingerprint": "4ad6f55494afe619cae3e4cf741803a5646a33d13c8bf832506da6d5a11f8beb", "category": "quality", "severity": "info", "confidence": 0.2, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Deduplicated summary only: 3 additional occurrences found. The top occurrences remain visible as actionable findings.", "evidence": {"reason": "Deduplicated summary only: 3 additional occurrences found. The top occurrences remain visible as actionable findings.", "rule_id": "SEC078", "scanner": "repobility-threat-engine", "confidence": 0.2, "correlation_key": "fp|4ad6f55494afe619cae3e4cf741803a5646a33d13c8bf832506da6d5a11f8beb"}}}, {"ruleId": "SEC020", "level": "none", "message": {"text": "[SEC020] Secret Printed to Logs (and 1 more): Same pattern found in 1 additional files. Review if needed."}, "properties": {"repobilityId": 61350, "scanner": "repobility-threat-engine", "fingerprint": "b6edddaddab6b62ff63a87b52b7d7b3bab2a5af6b4d7361c1238d18c2c6e3162", "category": "credential_exposure", "severity": "info", "confidence": 0.2, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Deduplicated summary only: 1 additional occurrences found. The top occurrences remain visible as actionable findings.", "evidence": {"reason": "Deduplicated summary only: 1 additional occurrences found. The top occurrences remain visible as actionable findings.", "rule_id": "SEC020", "scanner": "repobility-threat-engine", "confidence": 0.2, "correlation_key": "fp|b6edddaddab6b62ff63a87b52b7d7b3bab2a5af6b4d7361c1238d18c2c6e3162"}}}, {"ruleId": "MINED042", "level": "none", "message": {"text": "[MINED042] Cpp New Without Delete: C++ raw new without RAII / unique_ptr \u2014 memory leak risk."}, "properties": {"repobilityId": 61346, "scanner": "repobility-threat-engine", "fingerprint": "52d5113d7fb3ff938a690a939d034c9825f16fd12ca5e2d9dc77ff862d4ee875", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "cpp-new-without-delete", "owasp": null, "cwe_ids": ["CWE-401"], "languages": ["cpp"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347996+00:00", "triaged_in_corpus": 12, "observations_count": 4658256, "ai_coder_pattern_id": 134}, "scanner": "repobility-threat-engine", "correlation_key": "fp|52d5113d7fb3ff938a690a939d034c9825f16fd12ca5e2d9dc77ff862d4ee875"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "flutter/windows/runner/win32_window.cpp"}, "region": {"startLine": 90}}}]}, {"ruleId": "MINED003", "level": "none", "message": {"text": "[MINED003] Rust Unwrap In Prod (and 21 more): Same pattern found in 21 additional files. Review if needed."}, "properties": {"repobilityId": 61344, "scanner": "repobility-threat-engine", "fingerprint": "f60ddbb2c2d63a686c4405a3be0df1b02c7a8143cc293bef60bae71bedce0161", "category": "quality", "severity": "info", "confidence": 0.2, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Deduplicated summary only: 21 additional occurrences found. The top occurrences remain visible as actionable findings.", "evidence": {"mined": true, "mining": {"slug": "rust-unwrap-in-prod", "owasp": null, "cwe_ids": ["CWE-755"], "languages": ["rust"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347903+00:00", "triaged_in_corpus": 15, "observations_count": 386515, "ai_coder_pattern_id": 111}, "scanner": "repobility-threat-engine", "aggregated": true, "correlation_key": "fp|f60ddbb2c2d63a686c4405a3be0df1b02c7a8143cc293bef60bae71bedce0161", "aggregated_count": 21}}}, {"ruleId": "RUSTSEC-2025-0023", "level": "error", "message": {"text": "tokio: RUSTSEC-2025-0023"}, "properties": {"repobilityId": 61545, "scanner": "osv-scanner", "fingerprint": "ebddfeb6e5d49e6a683a84850d89ef025d278ae8faa9c37770c2d745358433eb", "category": "dependency", "severity": "high", "confidence": 0.88, "triageState": "open", "verdict": "", "isResolved": false, "reason": "Collapsed 1 duplicate scanner signal(s) for the same underlying issue.", "evidence": {"match": "", "aliases": ["GHSA-rr8g-9fpq-6wmg"], "package": "tokio", "rule_id": "RUSTSEC-2025-0023", "scanner": "osv-scanner", "correlation_key": "vuln|tokio|GHSA-RR8G-9FPQ-6WMG|token", "duplicate_count": 1, "duplicate_rule_ids": ["GHSA-rr8g-9fpq-6wmg", "RUSTSEC-2025-0023"], "duplicate_scanners": ["osv-scanner"], "duplicate_fingerprints": ["ebddfeb6e5d49e6a683a84850d89ef025d278ae8faa9c37770c2d745358433eb", "f33b5c04bea1dc93f04d738e550272a971a0986835d895314c3176f30c4c947e"]}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/virtual_display/Cargo.lock"}, "region": {"startLine": 1}}}]}, {"ruleId": "RUSTSEC-2023-0005", "level": "error", "message": {"text": "tokio: RUSTSEC-2023-0005"}, "properties": {"repobilityId": 61544, "scanner": "osv-scanner", "fingerprint": "5ad8bbece93f0951b4c4e64b70ac04bae5fbb0a277910d0724f90ff7ddb609c9", "category": "dependency", "severity": "high", "confidence": 0.88, "triageState": "open", "verdict": "", "isResolved": false, "reason": "Collapsed 1 duplicate scanner signal(s) for the same underlying issue.", "evidence": {"match": "", "aliases": ["GHSA-4q83-7cq4-p6wg"], "package": "tokio", "rule_id": "RUSTSEC-2023-0005", "scanner": "osv-scanner", "correlation_key": "vuln|tokio|GHSA-4Q83-7CQ4-P6WG|token", "duplicate_count": 1, "duplicate_rule_ids": ["GHSA-4q83-7cq4-p6wg", "RUSTSEC-2023-0005"], "duplicate_scanners": ["osv-scanner"], "duplicate_fingerprints": ["5ad8bbece93f0951b4c4e64b70ac04bae5fbb0a277910d0724f90ff7ddb609c9", "95620b28f1f74914aaa88aebf2294ddcedf6acf088c6f31fac6bd08ad1ebe254"]}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/virtual_display/Cargo.lock"}, "region": {"startLine": 1}}}]}, {"ruleId": "RUSTSEC-2023-0001", "level": "error", "message": {"text": "tokio: RUSTSEC-2023-0001"}, "properties": {"repobilityId": 61543, "scanner": "osv-scanner", "fingerprint": "d5cb61fbd34e36b2001c497c48ddb68275a562a1c5807ca80c19288f4afc984a", "category": "dependency", "severity": "high", "confidence": 0.88, "triageState": "open", "verdict": "", "isResolved": false, "reason": "Collapsed 1 duplicate scanner signal(s) for the same underlying issue.", "evidence": {"match": "", "aliases": ["CVE-2023-22466", "GHSA-7rrj-xr53-82p7"], "package": "tokio", "rule_id": "RUSTSEC-2023-0001", "scanner": "osv-scanner", "correlation_key": "vuln|tokio|CVE-2023-22466|token", "duplicate_count": 1, "duplicate_rule_ids": ["GHSA-7rrj-xr53-82p7", "RUSTSEC-2023-0001"], "duplicate_scanners": ["osv-scanner"], "duplicate_fingerprints": ["cad8729f5b75645d2f3a556ea86c92eaaf9c3ca2e89dc15e0314b51f48df105e", "d5cb61fbd34e36b2001c497c48ddb68275a562a1c5807ca80c19288f4afc984a"]}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/virtual_display/Cargo.lock"}, "region": {"startLine": 1}}}]}, {"ruleId": "RUSTSEC-2020-0071", "level": "error", "message": {"text": "time: RUSTSEC-2020-0071"}, "properties": {"repobilityId": 61542, "scanner": "osv-scanner", "fingerprint": "d496ca6e35f49ab5cb1c3e38d2dd54790a69610fc546def820f39115aba9ca65", "category": "dependency", "severity": "high", "confidence": 0.88, "triageState": "open", "verdict": "", "isResolved": false, "reason": "Collapsed 1 duplicate scanner signal(s) for the same underlying issue.", "evidence": {"match": "", "aliases": ["CVE-2020-26235", "GHSA-wcg3-cvx6-7396"], "package": "time", "rule_id": "RUSTSEC-2020-0071", "scanner": "osv-scanner", "correlation_key": "vuln|time|CVE-2020-26235|token", "duplicate_count": 1, "duplicate_rule_ids": ["GHSA-wcg3-cvx6-7396", "RUSTSEC-2020-0071"], "duplicate_scanners": ["osv-scanner"], "duplicate_fingerprints": ["d496ca6e35f49ab5cb1c3e38d2dd54790a69610fc546def820f39115aba9ca65", "d5ab14fa4cac1f39ac5a5edf4d48f464705dc4b9c2bc1da437d6fe6b2a0f1524"]}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/virtual_display/Cargo.lock"}, "region": {"startLine": 1}}}]}, {"ruleId": "RUSTSEC-2021-0137", "level": "error", "message": {"text": "sodiumoxide: RUSTSEC-2021-0137"}, "properties": {"repobilityId": 61541, "scanner": "osv-scanner", "fingerprint": "a07994cd1081f3080d13dba1ccd16e01f69b1b3364be353bba108702a249e0dd", "category": "dependency", "severity": "high", "confidence": 0.88, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "", "package": "sodiumoxide", "rule_id": "RUSTSEC-2021-0137", "scanner": "osv-scanner", "correlation_key": "fp|a07994cd1081f3080d13dba1ccd16e01f69b1b3364be353bba108702a249e0dd"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/virtual_display/Cargo.lock"}, "region": {"startLine": 1}}}]}, {"ruleId": "RUSTSEC-2023-0018", "level": "error", "message": {"text": "remove_dir_all: RUSTSEC-2023-0018"}, "properties": {"repobilityId": 61540, "scanner": "osv-scanner", "fingerprint": "5a01e2a3357258e4cd756db3ff0f6831b38ff43d3158f7ebcd09e2f40b4c5cd3", "category": "dependency", "severity": "high", "confidence": 0.88, "triageState": "open", "verdict": "", "isResolved": false, "reason": "Collapsed 1 duplicate scanner signal(s) for the same underlying issue.", "evidence": {"match": "", "aliases": ["GHSA-mc8h-8q98-g5hr"], "package": "remove_dir_all", "rule_id": "RUSTSEC-2023-0018", "scanner": "osv-scanner", "correlation_key": "vuln|remove_dir_all|GHSA-MC8H-8Q98-G5HR|token", "duplicate_count": 1, "duplicate_rule_ids": ["GHSA-mc8h-8q98-g5hr", "RUSTSEC-2023-0018"], "duplicate_scanners": ["osv-scanner"], "duplicate_fingerprints": ["5a01e2a3357258e4cd756db3ff0f6831b38ff43d3158f7ebcd09e2f40b4c5cd3", "8215de902167cc75ab620ba608d9c2a73523d08d766e168032ecb19a93aadf1e"]}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/virtual_display/Cargo.lock"}, "region": {"startLine": 1}}}]}, {"ruleId": "RUSTSEC-2026-0097", "level": "error", "message": {"text": "rand: RUSTSEC-2026-0097"}, "properties": {"repobilityId": 61539, "scanner": "osv-scanner", "fingerprint": "a2525361977f3f6a92727e7ae08fe6b27c9f4f8376732f119c75bdb0c70fd49b", "category": "dependency", "severity": "high", "confidence": 0.88, "triageState": "open", "verdict": "", "isResolved": false, "reason": "Collapsed 1 duplicate scanner signal(s) for the same underlying issue.", "evidence": {"match": "", "aliases": ["GHSA-cq8v-f236-94qc"], "package": "rand", "rule_id": "RUSTSEC-2026-0097", "scanner": "osv-scanner", "correlation_key": "vuln|rand|GHSA-CQ8V-F236-94QC|token", "duplicate_count": 1, "duplicate_rule_ids": ["GHSA-cq8v-f236-94qc", "RUSTSEC-2026-0097"], "duplicate_scanners": ["osv-scanner"], "duplicate_fingerprints": ["9feced3c47f40fde30df4e2ee709fd4abd829b0c9b9aa507d45aa1a286591359", "a2525361977f3f6a92727e7ae08fe6b27c9f4f8376732f119c75bdb0c70fd49b"]}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/virtual_display/Cargo.lock"}, "region": {"startLine": 1}}}]}, {"ruleId": "RUSTSEC-2024-0437", "level": "error", "message": {"text": "protobuf: RUSTSEC-2024-0437"}, "properties": {"repobilityId": 61538, "scanner": "osv-scanner", "fingerprint": "0af1e5d2a49b3d85e7b37cb033ae7cf1ec436e6b6b5ccc97a69c53971f4f1d19", "category": "dependency", "severity": "high", "confidence": 0.88, "triageState": "open", "verdict": "", "isResolved": false, "reason": "Collapsed 1 duplicate scanner signal(s) for the same underlying issue.", "evidence": {"match": "", "aliases": ["CVE-2025-53605", "GHSA-2gh3-rmm4-6rq5"], "package": "protobuf", "rule_id": "RUSTSEC-2024-0437", "scanner": "osv-scanner", "correlation_key": "vuln|protobuf|CVE-2025-53605|token", "duplicate_count": 1, "duplicate_rule_ids": ["GHSA-2gh3-rmm4-6rq5", "RUSTSEC-2024-0437"], "duplicate_scanners": ["osv-scanner"], "duplicate_fingerprints": ["0af1e5d2a49b3d85e7b37cb033ae7cf1ec436e6b6b5ccc97a69c53971f4f1d19", "355fe2b6d5099268e5af683a5fe6ad3d88659e3b08668258fc9805edd992fd22"]}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/virtual_display/Cargo.lock"}, "region": {"startLine": 1}}}]}, {"ruleId": "RUSTSEC-2024-0019", "level": "error", "message": {"text": "mio: RUSTSEC-2024-0019"}, "properties": {"repobilityId": 61537, "scanner": "osv-scanner", "fingerprint": "bc3078853d1ad02c8ddb74d9937c83fabbe94bbf6b0868f0249742e9be0419ca", "category": "dependency", "severity": "high", "confidence": 0.88, "triageState": "open", "verdict": "", "isResolved": false, "reason": "Collapsed 1 duplicate scanner signal(s) for the same underlying issue.", "evidence": {"match": "", "aliases": ["CVE-2024-27308", "GHSA-r8w9-5wcg-vfj7"], "package": "mio", "rule_id": "RUSTSEC-2024-0019", "scanner": "osv-scanner", "correlation_key": "vuln|mio|CVE-2024-27308|token", "duplicate_count": 1, "duplicate_rule_ids": ["GHSA-r8w9-5wcg-vfj7", "RUSTSEC-2024-0019"], "duplicate_scanners": ["osv-scanner"], "duplicate_fingerprints": ["8324abb703eec5f4dae1a424d8021f02477a2e98787f72541db635519201c53b", "bc3078853d1ad02c8ddb74d9937c83fabbe94bbf6b0868f0249742e9be0419ca"]}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/virtual_display/Cargo.lock"}, "region": {"startLine": 1}}}]}, {"ruleId": "RUSTSEC-2024-0384", "level": "error", "message": {"text": "instant: RUSTSEC-2024-0384"}, "properties": {"repobilityId": 61536, "scanner": "osv-scanner", "fingerprint": "01c5761ff09144e7269f0a07ae403394faf5a5a4180380a8b280f13a5d7948c1", "category": "dependency", "severity": "high", "confidence": 0.88, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "", "package": "instant", "rule_id": "RUSTSEC-2024-0384", "scanner": "osv-scanner", "correlation_key": "fp|01c5761ff09144e7269f0a07ae403394faf5a5a4180380a8b280f13a5d7948c1"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/virtual_display/Cargo.lock"}, "region": {"startLine": 1}}}]}, {"ruleId": "RUSTSEC-2026-0007", "level": "error", "message": {"text": "bytes: RUSTSEC-2026-0007"}, "properties": {"repobilityId": 61535, "scanner": "osv-scanner", "fingerprint": "38cae38abcd9a53ffcb7067700a96481fed4e44465e96c82620374a960beaa00", "category": "dependency", "severity": "high", "confidence": 0.88, "triageState": "open", "verdict": "", "isResolved": false, "reason": "Collapsed 1 duplicate scanner signal(s) for the same underlying issue.", "evidence": {"match": "", "aliases": ["CVE-2026-25541", "GHSA-434x-w66g-qw3r"], "package": "bytes", "rule_id": "RUSTSEC-2026-0007", "scanner": "osv-scanner", "correlation_key": "vuln|bytes|CVE-2026-25541|token", "duplicate_count": 1, "duplicate_rule_ids": ["GHSA-434x-w66g-qw3r", "RUSTSEC-2026-0007"], "duplicate_scanners": ["osv-scanner"], "duplicate_fingerprints": ["38cae38abcd9a53ffcb7067700a96481fed4e44465e96c82620374a960beaa00", "f9892a0ec92ae5f53255eeacfc0dcc971f84b454a077ccff01cbe552b55c1fef"]}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/virtual_display/Cargo.lock"}, "region": {"startLine": 1}}}]}, {"ruleId": "RUSTSEC-2024-0375", "level": "error", "message": {"text": "atty: RUSTSEC-2024-0375"}, "properties": {"repobilityId": 61534, "scanner": "osv-scanner", "fingerprint": "bc8c13baa400735d11b9e40cffee520b31529ac885694579461c66780ce0e724", "category": "dependency", "severity": "high", "confidence": 0.88, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "", "package": "atty", "rule_id": "RUSTSEC-2024-0375", "scanner": "osv-scanner", "correlation_key": "fp|bc8c13baa400735d11b9e40cffee520b31529ac885694579461c66780ce0e724"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/virtual_display/Cargo.lock"}, "region": {"startLine": 1}}}]}, {"ruleId": "RUSTSEC-2021-0145", "level": "error", "message": {"text": "atty: RUSTSEC-2021-0145"}, "properties": {"repobilityId": 61533, "scanner": "osv-scanner", "fingerprint": "a8da12d2ddc6f3a998421c053de8d482c5b1e68465b21cdfba22b3087ed30f63", "category": "dependency", "severity": "high", "confidence": 0.88, "triageState": "open", "verdict": "", "isResolved": false, "reason": "Collapsed 1 duplicate scanner signal(s) for the same underlying issue.", "evidence": {"match": "", "aliases": ["GHSA-g98v-hv3f-hcfr"], "package": "atty", "rule_id": "RUSTSEC-2021-0145", "scanner": "osv-scanner", "correlation_key": "vuln|atty|GHSA-G98V-HV3F-HCFR|token", "duplicate_count": 1, "duplicate_rule_ids": ["GHSA-g98v-hv3f-hcfr", "RUSTSEC-2021-0145"], "duplicate_scanners": ["osv-scanner"], "duplicate_fingerprints": ["118151a2d41eabd59af8029df12b9d348ed2c37e822165daa33454b47265f06c", "a8da12d2ddc6f3a998421c053de8d482c5b1e68465b21cdfba22b3087ed30f63"]}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/virtual_display/Cargo.lock"}, "region": {"startLine": 1}}}]}, {"ruleId": "RUSTSEC-2025-0040", "level": "error", "message": {"text": "users: RUSTSEC-2025-0040"}, "properties": {"repobilityId": 61532, "scanner": "osv-scanner", "fingerprint": "9a1cec42a625d06abbe58b2594588bfd64e0e206f18849663df7ec86b7995798", "category": "dependency", "severity": "high", "confidence": 0.88, "triageState": "open", "verdict": "", "isResolved": false, "reason": "Collapsed 1 duplicate scanner signal(s) for the same underlying issue.", "evidence": {"match": "", "aliases": ["CVE-2025-5791", "GHSA-m65q-v92h-cm7q"], "package": "users", "rule_id": "RUSTSEC-2025-0040", "scanner": "osv-scanner", "correlation_key": "vuln|users|CVE-2025-5791|cargo.lock", "duplicate_count": 1, "duplicate_rule_ids": ["GHSA-m65q-v92h-cm7q", "RUSTSEC-2025-0040"], "duplicate_scanners": ["osv-scanner"], "duplicate_fingerprints": ["57ddf8372f7cdcce5b6c7ffb5b6cb5db578db72b4bc1f97d34d2cb07f30572bd", "9a1cec42a625d06abbe58b2594588bfd64e0e206f18849663df7ec86b7995798"]}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Cargo.lock"}, "region": {"startLine": 1}}}]}, {"ruleId": "RUSTSEC-2023-0059", "level": "error", "message": {"text": "users: RUSTSEC-2023-0059"}, "properties": {"repobilityId": 61531, "scanner": "osv-scanner", "fingerprint": "3230c32332e4af841da0cf685854ddaf23f1e49caa7f617c93333c776f26e9cb", "category": "dependency", "severity": "high", "confidence": 0.88, "triageState": "open", "verdict": "", "isResolved": false, "reason": "Collapsed 1 duplicate scanner signal(s) for the same underlying issue.", "evidence": {"match": "", "aliases": ["GHSA-jcr6-4frq-9gjj"], "package": "users", "rule_id": "RUSTSEC-2023-0059", "scanner": "osv-scanner", "correlation_key": "vuln|users|GHSA-JCR6-4FRQ-9GJJ|cargo.lock", "duplicate_count": 1, "duplicate_rule_ids": ["GHSA-jcr6-4frq-9gjj", "RUSTSEC-2023-0059"], "duplicate_scanners": ["osv-scanner"], "duplicate_fingerprints": ["3230c32332e4af841da0cf685854ddaf23f1e49caa7f617c93333c776f26e9cb", "ca67b2e5be4a6c453b391a50290e7d87e24e81adb12dd2bb6e097a7d969c7c72"]}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Cargo.lock"}, "region": {"startLine": 1}}}]}, {"ruleId": "RUSTSEC-2023-0040", "level": "error", "message": {"text": "users: RUSTSEC-2023-0040"}, "properties": {"repobilityId": 61530, "scanner": "osv-scanner", "fingerprint": "238fe01c21face59966fb7a30de724d721da625ee52bdaa206f7af8d88d3540f", "category": "dependency", "severity": "high", "confidence": 0.88, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "", "package": "users", "rule_id": "RUSTSEC-2023-0040", "scanner": "osv-scanner", "correlation_key": "fp|238fe01c21face59966fb7a30de724d721da625ee52bdaa206f7af8d88d3540f"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Cargo.lock"}, "region": {"startLine": 1}}}]}, {"ruleId": "RUSTSEC-2025-0098", "level": "error", "message": {"text": "unic-ucd-version: RUSTSEC-2025-0098"}, "properties": {"repobilityId": 61529, "scanner": "osv-scanner", "fingerprint": "06fe7c47e9b484cb74a72b526eeb1bd4918050594abaff6f206c98d977915f20", "category": "dependency", "severity": "high", "confidence": 0.88, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "", "package": "unic-ucd-version", "rule_id": "RUSTSEC-2025-0098", "scanner": "osv-scanner", "correlation_key": "fp|06fe7c47e9b484cb74a72b526eeb1bd4918050594abaff6f206c98d977915f20"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Cargo.lock"}, "region": {"startLine": 1}}}]}, {"ruleId": "RUSTSEC-2025-0083", "level": "error", "message": {"text": "unic-ucd-bidi: RUSTSEC-2025-0083"}, "properties": {"repobilityId": 61528, "scanner": "osv-scanner", "fingerprint": "a7ce754330c9c3730419d95a1175255176053f56deabd4aec8b9eac59408bcb5", "category": "dependency", "severity": "high", "confidence": 0.88, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "", "package": "unic-ucd-bidi", "rule_id": "RUSTSEC-2025-0083", "scanner": "osv-scanner", "correlation_key": "fp|a7ce754330c9c3730419d95a1175255176053f56deabd4aec8b9eac59408bcb5"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Cargo.lock"}, "region": {"startLine": 1}}}]}, {"ruleId": "RUSTSEC-2025-0080", "level": "error", "message": {"text": "unic-common: RUSTSEC-2025-0080"}, "properties": {"repobilityId": 61527, "scanner": "osv-scanner", "fingerprint": "5c35bf96b81287dcd2e5ed2b97337276e2d14de552724e356eaaace1897ff3fa", "category": "dependency", "severity": "high", "confidence": 0.88, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "", "package": "unic-common", "rule_id": "RUSTSEC-2025-0080", "scanner": "osv-scanner", "correlation_key": "fp|5c35bf96b81287dcd2e5ed2b97337276e2d14de552724e356eaaace1897ff3fa"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Cargo.lock"}, "region": {"startLine": 1}}}]}, {"ruleId": "RUSTSEC-2025-0075", "level": "error", "message": {"text": "unic-char-range: RUSTSEC-2025-0075"}, "properties": {"repobilityId": 61526, "scanner": "osv-scanner", "fingerprint": "fa8344e1f03d5986c0a672e54d9533c5eb80400e4844eecab6b1f630ac9e76b0", "category": "dependency", "severity": "high", "confidence": 0.88, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "", "package": "unic-char-range", "rule_id": "RUSTSEC-2025-0075", "scanner": "osv-scanner", "correlation_key": "fp|fa8344e1f03d5986c0a672e54d9533c5eb80400e4844eecab6b1f630ac9e76b0"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Cargo.lock"}, "region": {"startLine": 1}}}]}, {"ruleId": "RUSTSEC-2025-0081", "level": "error", "message": {"text": "unic-char-property: RUSTSEC-2025-0081"}, "properties": {"repobilityId": 61525, "scanner": "osv-scanner", "fingerprint": "a0d9725cc2e8feb0f8c178c7e1e1ab6560fb992068321457c042afe3f7897cce", "category": "dependency", "severity": "high", "confidence": 0.88, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "", "package": "unic-char-property", "rule_id": "RUSTSEC-2025-0081", "scanner": "osv-scanner", "correlation_key": "fp|a0d9725cc2e8feb0f8c178c7e1e1ab6560fb992068321457c042afe3f7897cce"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Cargo.lock"}, "region": {"startLine": 1}}}]}, {"ruleId": "RUSTSEC-2025-0096", "level": "error", "message": {"text": "unic-bidi: RUSTSEC-2025-0096"}, "properties": {"repobilityId": 61524, "scanner": "osv-scanner", "fingerprint": "c6dd5dbfbed80c030e746b71491aeb26f1a8c0739339aeacea8b803be358b663", "category": "dependency", "severity": "high", "confidence": 0.88, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "", "package": "unic-bidi", "rule_id": "RUSTSEC-2025-0096", "scanner": "osv-scanner", "correlation_key": "fp|c6dd5dbfbed80c030e746b71491aeb26f1a8c0739339aeacea8b803be358b663"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Cargo.lock"}, "region": {"startLine": 1}}}]}, {"ruleId": "RUSTSEC-2025-0055", "level": "error", "message": {"text": "tracing-subscriber: RUSTSEC-2025-0055"}, "properties": {"repobilityId": 61523, "scanner": "osv-scanner", "fingerprint": "382c2e6bf380a1b7402058788d5b4c01a3bc24ca705aff7ee84bc92483bc38d1", "category": "dependency", "severity": "high", "confidence": 0.88, "triageState": "open", "verdict": "", "isResolved": false, "reason": "Collapsed 1 duplicate scanner signal(s) for the same underlying issue.", "evidence": {"match": "", "aliases": ["CVE-2025-58160", "GHSA-xwfj-jgwm-7wp5"], "package": "tracing-subscriber", "rule_id": "RUSTSEC-2025-0055", "scanner": "osv-scanner", "correlation_key": "vuln|tracing-subscriber|CVE-2025-58160|cargo.lock", "duplicate_count": 1, "duplicate_rule_ids": ["GHSA-xwfj-jgwm-7wp5", "RUSTSEC-2025-0055"], "duplicate_scanners": ["osv-scanner"], "duplicate_fingerprints": ["382c2e6bf380a1b7402058788d5b4c01a3bc24ca705aff7ee84bc92483bc38d1", "421e2ded1a3973c135ca2b34d9f5ceabf14f26ee72a5d93fdb9a429b39db56cd"]}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Cargo.lock"}, "region": {"startLine": 1}}}]}, {"ruleId": "RUSTSEC-2026-0009", "level": "error", "message": {"text": "time: RUSTSEC-2026-0009"}, "properties": {"repobilityId": 61522, "scanner": "osv-scanner", "fingerprint": "9fb941cdcde7d808df297ded949de574907ac1fbeb6f7223b9e05c56e941adb0", "category": "dependency", "severity": "high", "confidence": 0.88, "triageState": "open", "verdict": "", "isResolved": false, "reason": "Collapsed 1 duplicate scanner signal(s) for the same underlying issue.", "evidence": {"match": "", "aliases": ["CVE-2026-25727", "GHSA-r6v5-fh4h-64xc"], "package": "time", "rule_id": "RUSTSEC-2026-0009", "scanner": "osv-scanner", "correlation_key": "vuln|time|CVE-2026-25727|cargo.lock", "duplicate_count": 1, "duplicate_rule_ids": ["GHSA-r6v5-fh4h-64xc", "RUSTSEC-2026-0009"], "duplicate_scanners": ["osv-scanner"], "duplicate_fingerprints": ["2c2d2ae12df666e8132d287bd534a3c14d824cdb5129b7d9425024955a840e9f", "9fb941cdcde7d808df297ded949de574907ac1fbeb6f7223b9e05c56e941adb0"]}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Cargo.lock"}, "region": {"startLine": 1}}}]}, {"ruleId": "RUSTSEC-2020-0071", "level": "error", "message": {"text": "time: RUSTSEC-2020-0071"}, "properties": {"repobilityId": 61521, "scanner": "osv-scanner", "fingerprint": "697587d587922a1148a604fbaf7f5be21c8f689f769aba520d0d8b73542757ab", "category": "dependency", "severity": "high", "confidence": 0.88, "triageState": "open", "verdict": "", "isResolved": false, "reason": "Collapsed 1 duplicate scanner signal(s) for the same underlying issue.", "evidence": {"match": "", "aliases": ["CVE-2020-26235", "GHSA-wcg3-cvx6-7396"], "package": "time", "rule_id": "RUSTSEC-2020-0071", "scanner": "osv-scanner", "correlation_key": "vuln|time|CVE-2020-26235|cargo.lock", "duplicate_count": 1, "duplicate_rule_ids": ["GHSA-wcg3-cvx6-7396", "RUSTSEC-2020-0071"], "duplicate_scanners": ["osv-scanner"], "duplicate_fingerprints": ["697587d587922a1148a604fbaf7f5be21c8f689f769aba520d0d8b73542757ab", "c3a538986c51394cbf3bc96935540d0894293550ae9f20ebe8921ea4bb83b67d"]}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Cargo.lock"}, "region": {"startLine": 1}}}]}, {"ruleId": "RUSTSEC-2021-0137", "level": "error", "message": {"text": "sodiumoxide: RUSTSEC-2021-0137"}, "properties": {"repobilityId": 61520, "scanner": "osv-scanner", "fingerprint": "57e7ca15f0447edcccba0858c50b91e53674d2dafc76e3556b05d2f89d36bac5", "category": "dependency", "severity": "high", "confidence": 0.88, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "", "package": "sodiumoxide", "rule_id": "RUSTSEC-2021-0137", "scanner": "osv-scanner", "correlation_key": "fp|57e7ca15f0447edcccba0858c50b91e53674d2dafc76e3556b05d2f89d36bac5"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Cargo.lock"}, "region": {"startLine": 1}}}]}, {"ruleId": "RUSTSEC-2017-0008", "level": "error", "message": {"text": "serial: RUSTSEC-2017-0008"}, "properties": {"repobilityId": 61519, "scanner": "osv-scanner", "fingerprint": "21bea907de0cfa41b0eeeddc660f4ea15019afeb7ec51ef9b7d35f6e4cf2c279", "category": "dependency", "severity": "high", "confidence": 0.88, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "", "package": "serial", "rule_id": "RUSTSEC-2017-0008", "scanner": "osv-scanner", "correlation_key": "fp|21bea907de0cfa41b0eeeddc660f4ea15019afeb7ec51ef9b7d35f6e4cf2c279"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Cargo.lock"}, "region": {"startLine": 1}}}]}, {"ruleId": "RUSTSEC-2026-0104", "level": "error", "message": {"text": "rustls-webpki: RUSTSEC-2026-0104"}, "properties": {"repobilityId": 61518, "scanner": "osv-scanner", "fingerprint": "fcab9132587a2c990296f83177c4848cd44ed60f21e65c82ba81416282ab891e", "category": "dependency", "severity": "high", "confidence": 0.88, "triageState": "open", "verdict": "", "isResolved": false, "reason": "Collapsed 1 duplicate scanner signal(s) for the same underlying issue.", "evidence": {"match": "", "aliases": ["GHSA-82j2-j2ch-gfr8"], "package": "rustls-webpki", "rule_id": "RUSTSEC-2026-0104", "scanner": "osv-scanner", "correlation_key": "vuln|rustls-webpki|GHSA-82J2-J2CH-GFR8|cargo.lock", "duplicate_count": 1, "duplicate_rule_ids": ["GHSA-82j2-j2ch-gfr8", "RUSTSEC-2026-0104"], "duplicate_scanners": ["osv-scanner"], "duplicate_fingerprints": ["476482283f7b4bf24cebe63c772832bbcbb2a342714f10bd108d0c5c67b78813", "fcab9132587a2c990296f83177c4848cd44ed60f21e65c82ba81416282ab891e"]}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Cargo.lock"}, "region": {"startLine": 1}}}]}, {"ruleId": "RUSTSEC-2026-0099", "level": "error", "message": {"text": "rustls-webpki: RUSTSEC-2026-0099"}, "properties": {"repobilityId": 61517, "scanner": "osv-scanner", "fingerprint": "ac54d27f2da05de068570ed12b689c1c212043920c11599e88d3ec15aed9e04f", "category": "dependency", "severity": "high", "confidence": 0.88, "triageState": "open", "verdict": "", "isResolved": false, "reason": "Collapsed 1 duplicate scanner signal(s) for the same underlying issue.", "evidence": {"match": "", "aliases": ["GHSA-xgp8-3hg3-c2mh"], "package": "rustls-webpki", "rule_id": "RUSTSEC-2026-0099", "scanner": "osv-scanner", "correlation_key": "vuln|rustls-webpki|GHSA-XGP8-3HG3-C2MH|cargo.lock", "duplicate_count": 1, "duplicate_rule_ids": ["GHSA-xgp8-3hg3-c2mh", "RUSTSEC-2026-0099"], "duplicate_scanners": ["osv-scanner"], "duplicate_fingerprints": ["2a5659d7cbd0bb9dfc9d2adea8035c41fc228507431bf1ff230640799fbb9dc2", "ac54d27f2da05de068570ed12b689c1c212043920c11599e88d3ec15aed9e04f"]}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Cargo.lock"}, "region": {"startLine": 1}}}]}, {"ruleId": "RUSTSEC-2026-0098", "level": "error", "message": {"text": "rustls-webpki: RUSTSEC-2026-0098"}, "properties": {"repobilityId": 61516, "scanner": "osv-scanner", "fingerprint": "f164bd6ab1544e41652580549ab01f3ee5677dfeb6440d8de8a63093cf542613", "category": "dependency", "severity": "high", "confidence": 0.88, "triageState": "open", "verdict": "", "isResolved": false, "reason": "Collapsed 1 duplicate scanner signal(s) for the same underlying issue.", "evidence": {"match": "", "aliases": ["GHSA-965h-392x-2mh5"], "package": "rustls-webpki", "rule_id": "RUSTSEC-2026-0098", "scanner": "osv-scanner", "correlation_key": "vuln|rustls-webpki|GHSA-965H-392X-2MH5|cargo.lock", "duplicate_count": 1, "duplicate_rule_ids": ["GHSA-965h-392x-2mh5", "RUSTSEC-2026-0098"], "duplicate_scanners": ["osv-scanner"], "duplicate_fingerprints": ["4e353f860af1fd9047341f396e862081c6c9d858904293310e34f17a61d47c4c", "f164bd6ab1544e41652580549ab01f3ee5677dfeb6440d8de8a63093cf542613"]}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Cargo.lock"}, "region": {"startLine": 1}}}]}, {"ruleId": "RUSTSEC-2026-0049", "level": "error", "message": {"text": "rustls-webpki: RUSTSEC-2026-0049"}, "properties": {"repobilityId": 61515, "scanner": "osv-scanner", "fingerprint": "c255a366c5ce5102bcdc590878b2b69c65babf58fba82dc3e7831720a1de8e0b", "category": "dependency", "severity": "high", "confidence": 0.88, "triageState": "open", "verdict": "", "isResolved": false, "reason": "Collapsed 1 duplicate scanner signal(s) for the same underlying issue.", "evidence": {"match": "", "aliases": ["GHSA-pwjx-qhcg-rvj4"], "package": "rustls-webpki", "rule_id": "RUSTSEC-2026-0049", "scanner": "osv-scanner", "correlation_key": "vuln|rustls-webpki|GHSA-PWJX-QHCG-RVJ4|cargo.lock", "duplicate_count": 1, "duplicate_rule_ids": ["GHSA-pwjx-qhcg-rvj4", "RUSTSEC-2026-0049"], "duplicate_scanners": ["osv-scanner"], "duplicate_fingerprints": ["8d0a8a95183a8e67ddddb67ea96d335b0564fb0fcd1f901d95577ef01a82be3b", "c255a366c5ce5102bcdc590878b2b69c65babf58fba82dc3e7831720a1de8e0b"]}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Cargo.lock"}, "region": {"startLine": 1}}}]}, {"ruleId": "RUSTSEC-2025-0124", "level": "error", "message": {"text": "rand_os: RUSTSEC-2025-0124"}, "properties": {"repobilityId": 61513, "scanner": "osv-scanner", "fingerprint": "4a1339b33ba22dc836f7b63f1d6b949d20a620f0f2410515f5c09c348b45ac56", "category": "dependency", "severity": "high", "confidence": 0.88, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "", "package": "rand_os", "rule_id": "RUSTSEC-2025-0124", "scanner": "osv-scanner", "correlation_key": "fp|4a1339b33ba22dc836f7b63f1d6b949d20a620f0f2410515f5c09c348b45ac56"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Cargo.lock"}, "region": {"startLine": 1}}}]}, {"ruleId": "RUSTSEC-2026-0097", "level": "error", "message": {"text": "rand: RUSTSEC-2026-0097"}, "properties": {"repobilityId": 61512, "scanner": "osv-scanner", "fingerprint": "a22e3aa5f0c463335f53b031b0648b51d94f3563915cac37a8666a217ed7a5dc", "category": "dependency", "severity": "high", "confidence": 0.88, "triageState": "open", "verdict": "", "isResolved": false, "reason": "Collapsed 1 duplicate scanner signal(s) for the same underlying issue.", "evidence": {"match": "", "aliases": ["GHSA-cq8v-f236-94qc"], "package": "rand", "rule_id": "RUSTSEC-2026-0097", "scanner": "osv-scanner", "correlation_key": "vuln|rand|GHSA-CQ8V-F236-94QC|cargo.lock", "duplicate_count": 1, "duplicate_rule_ids": ["GHSA-cq8v-f236-94qc", "RUSTSEC-2026-0097"], "duplicate_scanners": ["osv-scanner"], "duplicate_fingerprints": ["a22e3aa5f0c463335f53b031b0648b51d94f3563915cac37a8666a217ed7a5dc", "ee2ad9157999fcb0c8f925391a5e09946511288ceed3e6c5f5b05828611b879f"]}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Cargo.lock"}, "region": {"startLine": 1}}}]}, {"ruleId": "RUSTSEC-2026-0037", "level": "error", "message": {"text": "quinn-proto: RUSTSEC-2026-0037"}, "properties": {"repobilityId": 61511, "scanner": "osv-scanner", "fingerprint": "f9c1af453f9a0bdfe4a69e7898d9b3129cb1ee80152010518158bda28e881f27", "category": "dependency", "severity": "high", "confidence": 0.88, "triageState": "open", "verdict": "", "isResolved": false, "reason": "Collapsed 1 duplicate scanner signal(s) for the same underlying issue.", "evidence": {"match": "", "aliases": ["CVE-2026-31812", "GHSA-6xvm-j4wr-6v98"], "package": "quinn-proto", "rule_id": "RUSTSEC-2026-0037", "scanner": "osv-scanner", "correlation_key": "vuln|quinn-proto|CVE-2026-31812|cargo.lock", "duplicate_count": 1, "duplicate_rule_ids": ["GHSA-6xvm-j4wr-6v98", "RUSTSEC-2026-0037"], "duplicate_scanners": ["osv-scanner"], "duplicate_fingerprints": ["2dc7434cf5d6d3f88ba848d37c8b48497b46115aca80c0a7dd5239e3c7556031", "f9c1af453f9a0bdfe4a69e7898d9b3129cb1ee80152010518158bda28e881f27"]}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Cargo.lock"}, "region": {"startLine": 1}}}]}, {"ruleId": "RUSTSEC-2024-0370", "level": "error", "message": {"text": "proc-macro-error: RUSTSEC-2024-0370"}, "properties": {"repobilityId": 61510, "scanner": "osv-scanner", "fingerprint": "479281b680a3742dad2f7a7c69c0da3e0c7676004685623da1f79bbaa167eba8", "category": "dependency", "severity": "high", "confidence": 0.88, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "", "package": "proc-macro-error", "rule_id": "RUSTSEC-2024-0370", "scanner": "osv-scanner", "correlation_key": "fp|479281b680a3742dad2f7a7c69c0da3e0c7676004685623da1f79bbaa167eba8"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Cargo.lock"}, "region": {"startLine": 1}}}]}, {"ruleId": "RUSTSEC-2024-0436", "level": "error", "message": {"text": "paste: RUSTSEC-2024-0436"}, "properties": {"repobilityId": 61509, "scanner": "osv-scanner", "fingerprint": "ecf6a49d252eada338538964a3d9bb37acf276dba6d473e55cf76f528b35783f", "category": "dependency", "severity": "high", "confidence": 0.88, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "", "package": "paste", "rule_id": "RUSTSEC-2024-0436", "scanner": "osv-scanner", "correlation_key": "fp|ecf6a49d252eada338538964a3d9bb37acf276dba6d473e55cf76f528b35783f"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Cargo.lock"}, "region": {"startLine": 1}}}]}, {"ruleId": "GHSA-xp3w-r5p5-63rr", "level": "error", "message": {"text": "openssl: GHSA-xp3w-r5p5-63rr"}, "properties": {"repobilityId": 61507, "scanner": "osv-scanner", "fingerprint": "d3c5711dee25a3797b74ad5eb81fb765a4fb03d4c045924932e9431b10ed3aa6", "category": "dependency", "severity": "high", "confidence": 0.88, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "", "aliases": ["CVE-2026-42327"], "package": "openssl", "rule_id": "GHSA-xp3w-r5p5-63rr", "scanner": "osv-scanner", "correlation_key": "vuln|openssl|CVE-2026-42327|cargo.lock"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Cargo.lock"}, "region": {"startLine": 1}}}]}, {"ruleId": "GHSA-pqf5-4pqq-29f5", "level": "error", "message": {"text": "openssl: GHSA-pqf5-4pqq-29f5"}, "properties": {"repobilityId": 61505, "scanner": "osv-scanner", "fingerprint": "0ec078659210fefe0ed55693da0692e92806f964834e9dd96ef956f363973206", "category": "dependency", "severity": "high", "confidence": 0.88, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "", "aliases": ["CVE-2026-41676"], "package": "openssl", "rule_id": "GHSA-pqf5-4pqq-29f5", "scanner": "osv-scanner", "correlation_key": "vuln|openssl|CVE-2026-41676|cargo.lock"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Cargo.lock"}, "region": {"startLine": 1}}}]}, {"ruleId": "GHSA-hppc-g8h3-xhp3", "level": "error", "message": {"text": "openssl: GHSA-hppc-g8h3-xhp3"}, "properties": {"repobilityId": 61503, "scanner": "osv-scanner", "fingerprint": "88a97a0ca38fd4860b8196b0939de4a840c1e4dabcf9da45cd425237ca3a51e7", "category": "dependency", "severity": "high", "confidence": 0.88, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "", "aliases": ["CVE-2026-41898"], "package": "openssl", "rule_id": "GHSA-hppc-g8h3-xhp3", "scanner": "osv-scanner", "correlation_key": "vuln|openssl|CVE-2026-41898|cargo.lock"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Cargo.lock"}, "region": {"startLine": 1}}}]}, {"ruleId": "GHSA-ghm9-cr32-g9qj", "level": "error", "message": {"text": "openssl: GHSA-ghm9-cr32-g9qj"}, "properties": {"repobilityId": 61502, "scanner": "osv-scanner", "fingerprint": "57a3956e206bd3b83f7ab45d9ab03abf63121d7caac7aea76eba0bab20f3b54a", "category": "dependency", "severity": "high", "confidence": 0.88, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "", "aliases": ["CVE-2026-41681"], "package": "openssl", "rule_id": "GHSA-ghm9-cr32-g9qj", "scanner": "osv-scanner", "correlation_key": "vuln|openssl|CVE-2026-41681|cargo.lock"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Cargo.lock"}, "region": {"startLine": 1}}}]}, {"ruleId": "GHSA-8c75-8mhr-p7r9", "level": "error", "message": {"text": "openssl: GHSA-8c75-8mhr-p7r9"}, "properties": {"repobilityId": 61501, "scanner": "osv-scanner", "fingerprint": "d293e6e38180ff7bbd16cc8c5355c5503db1da8dbbee4e0f5820f94c039c562a", "category": "dependency", "severity": "high", "confidence": 0.88, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "", "aliases": ["CVE-2026-41678"], "package": "openssl", "rule_id": "GHSA-8c75-8mhr-p7r9", "scanner": "osv-scanner", "correlation_key": "vuln|openssl|CVE-2026-41678|cargo.lock"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Cargo.lock"}, "region": {"startLine": 1}}}]}, {"ruleId": "RUSTSEC-2025-0022", "level": "error", "message": {"text": "openssl: RUSTSEC-2025-0022"}, "properties": {"repobilityId": 61500, "scanner": "osv-scanner", "fingerprint": "d27be3cea3bd92484deeb3013db33563567b54352bfcbb424721cf4c1dd942ad", "category": "dependency", "severity": "high", "confidence": 0.88, "triageState": "open", "verdict": "", "isResolved": false, "reason": "Collapsed 1 duplicate scanner signal(s) for the same underlying issue.", "evidence": {"match": "", "aliases": ["GHSA-4fcv-w3qc-ppgg"], "package": "openssl", "rule_id": "RUSTSEC-2025-0022", "scanner": "osv-scanner", "correlation_key": "vuln|openssl|GHSA-4FCV-W3QC-PPGG|cargo.lock", "duplicate_count": 1, "duplicate_rule_ids": ["GHSA-4fcv-w3qc-ppgg", "RUSTSEC-2025-0022"], "duplicate_scanners": ["osv-scanner"], "duplicate_fingerprints": ["d27be3cea3bd92484deeb3013db33563567b54352bfcbb424721cf4c1dd942ad", "e22f59b7ab2cf26946c1f9dd419c8ed6fd5fd932ce3a341d0d47c9b63761684f"]}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Cargo.lock"}, "region": {"startLine": 1}}}]}, {"ruleId": "RUSTSEC-2025-0004", "level": "error", "message": {"text": "openssl: RUSTSEC-2025-0004"}, "properties": {"repobilityId": 61499, "scanner": "osv-scanner", "fingerprint": "07d8e55122ced6fc17e405ad2f35d3c423b59f558278395a03d4c54f1407103b", "category": "dependency", "severity": "high", "confidence": 0.88, "triageState": "open", "verdict": "", "isResolved": false, "reason": "Collapsed 1 duplicate scanner signal(s) for the same underlying issue.", "evidence": {"match": "", "aliases": ["CVE-2025-24898", "GHSA-rpmj-rpgj-qmpm"], "package": "openssl", "rule_id": "RUSTSEC-2025-0004", "scanner": "osv-scanner", "correlation_key": "vuln|openssl|CVE-2025-24898|cargo.lock", "duplicate_count": 1, "duplicate_rule_ids": ["GHSA-rpmj-rpgj-qmpm", "RUSTSEC-2025-0004"], "duplicate_scanners": ["osv-scanner"], "duplicate_fingerprints": ["07d8e55122ced6fc17e405ad2f35d3c423b59f558278395a03d4c54f1407103b", "5dd9dbcc63a5cc0c307e0a9061fa8f0498708690c617ebec947f1ef4df1810f7"]}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Cargo.lock"}, "region": {"startLine": 1}}}]}, {"ruleId": "RUSTSEC-2024-0013", "level": "error", "message": {"text": "libgit2-sys: RUSTSEC-2024-0013"}, "properties": {"repobilityId": 61498, "scanner": "osv-scanner", "fingerprint": "d4cfe053769b6a560fc2bcc08f876f1ee2655378d31e7179eba385e4338e23d3", "category": "dependency", "severity": "high", "confidence": 0.88, "triageState": "open", "verdict": "", "isResolved": false, "reason": "Collapsed 1 duplicate scanner signal(s) for the same underlying issue.", "evidence": {"match": "", "aliases": ["GHSA-22q8-ghmq-63vf"], "package": "libgit2-sys", "rule_id": "RUSTSEC-2024-0013", "scanner": "osv-scanner", "correlation_key": "vuln|libgit2-sys|GHSA-22Q8-GHMQ-63VF|cargo.lock", "duplicate_count": 1, "duplicate_rule_ids": ["GHSA-22q8-ghmq-63vf", "RUSTSEC-2024-0013"], "duplicate_scanners": ["osv-scanner"], "duplicate_fingerprints": ["d4cfe053769b6a560fc2bcc08f876f1ee2655378d31e7179eba385e4338e23d3", "e057811d2ee2b3d6d83f16ba50d4e0993a344f07b271055b2550c3d013e741f5"]}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Cargo.lock"}, "region": {"startLine": 1}}}]}, {"ruleId": "RUSTSEC-2024-0384", "level": "error", "message": {"text": "instant: RUSTSEC-2024-0384"}, "properties": {"repobilityId": 61497, "scanner": "osv-scanner", "fingerprint": "2ceb760f484abeb3a84e0d3edb5de7bba161864b40faf40414de9a12f611490f", "category": "dependency", "severity": "high", "confidence": 0.88, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "", "package": "instant", "rule_id": "RUSTSEC-2024-0384", "scanner": "osv-scanner", "correlation_key": "fp|2ceb760f484abeb3a84e0d3edb5de7bba161864b40faf40414de9a12f611490f"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Cargo.lock"}, "region": {"startLine": 1}}}]}, {"ruleId": "RUSTSEC-2024-0421", "level": "error", "message": {"text": "idna: RUSTSEC-2024-0421"}, "properties": {"repobilityId": 61496, "scanner": "osv-scanner", "fingerprint": "7d20a5357c96bba71f374c60a718f1f82d959708f50b2a4abab6692fa4134543", "category": "dependency", "severity": "high", "confidence": 0.88, "triageState": "open", "verdict": "", "isResolved": false, "reason": "Collapsed 1 duplicate scanner signal(s) for the same underlying issue.", "evidence": {"match": "", "aliases": ["CVE-2024-12224", "GHSA-h97m-ww89-6jmq"], "package": "idna", "rule_id": "RUSTSEC-2024-0421", "scanner": "osv-scanner", "correlation_key": "vuln|idna|CVE-2024-12224|cargo.lock", "duplicate_count": 1, "duplicate_rule_ids": ["GHSA-h97m-ww89-6jmq", "RUSTSEC-2024-0421"], "duplicate_scanners": ["osv-scanner"], "duplicate_fingerprints": ["7d20a5357c96bba71f374c60a718f1f82d959708f50b2a4abab6692fa4134543", "82b0c4ba6f2c41a30637a847b630af88c6eaa4def2d8f264307f9c6648af09b6"]}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Cargo.lock"}, "region": {"startLine": 1}}}]}, {"ruleId": "RUSTSEC-2024-0419", "level": "error", "message": {"text": "gtk3-macros: RUSTSEC-2024-0419"}, "properties": {"repobilityId": 61495, "scanner": "osv-scanner", "fingerprint": "7ed6638c73b537564cad9f8f4bddb7e852b39b1aa54911f5223a5aa0f6a9f02a", "category": "dependency", "severity": "high", "confidence": 0.88, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "", "package": "gtk3-macros", "rule_id": "RUSTSEC-2024-0419", "scanner": "osv-scanner", "correlation_key": "fp|7ed6638c73b537564cad9f8f4bddb7e852b39b1aa54911f5223a5aa0f6a9f02a"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Cargo.lock"}, "region": {"startLine": 1}}}]}, {"ruleId": "RUSTSEC-2024-0420", "level": "error", "message": {"text": "gtk-sys: RUSTSEC-2024-0420"}, "properties": {"repobilityId": 61494, "scanner": "osv-scanner", "fingerprint": "146b163e91271c881ca756bf880e8ea14f879a715f48ae4131079a5eb2625810", "category": "dependency", "severity": "high", "confidence": 0.88, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "", "package": "gtk-sys", "rule_id": "RUSTSEC-2024-0420", "scanner": "osv-scanner", "correlation_key": "fp|146b163e91271c881ca756bf880e8ea14f879a715f48ae4131079a5eb2625810"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Cargo.lock"}, "region": {"startLine": 1}}}]}, {"ruleId": "RUSTSEC-2024-0415", "level": "error", "message": {"text": "gtk: RUSTSEC-2024-0415"}, "properties": {"repobilityId": 61493, "scanner": "osv-scanner", "fingerprint": "ef6c49d8458c504f502f0ca8492eece32c6272a0d40f81061f6464b33a4466ff", "category": "dependency", "severity": "high", "confidence": 0.88, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "", "package": "gtk", "rule_id": "RUSTSEC-2024-0415", "scanner": "osv-scanner", "correlation_key": "fp|ef6c49d8458c504f502f0ca8492eece32c6272a0d40f81061f6464b33a4466ff"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Cargo.lock"}, "region": {"startLine": 1}}}]}, {"ruleId": "RUSTSEC-2024-0429", "level": "error", "message": {"text": "glib: RUSTSEC-2024-0429"}, "properties": {"repobilityId": 61492, "scanner": "osv-scanner", "fingerprint": "12b7e3b6f7acd23e1cb790a240a0e9e1d21191658e09e703bdee511b678dae05", "category": "dependency", "severity": "high", "confidence": 0.88, "triageState": "open", "verdict": "", "isResolved": false, "reason": "Collapsed 1 duplicate scanner signal(s) for the same underlying issue.", "evidence": {"match": "", "aliases": ["GHSA-wrw7-89jp-8q8g"], "package": "glib", "rule_id": "RUSTSEC-2024-0429", "scanner": "osv-scanner", "correlation_key": "vuln|glib|GHSA-WRW7-89JP-8Q8G|cargo.lock", "duplicate_count": 1, "duplicate_rule_ids": ["GHSA-wrw7-89jp-8q8g", "RUSTSEC-2024-0429"], "duplicate_scanners": ["osv-scanner"], "duplicate_fingerprints": ["12b7e3b6f7acd23e1cb790a240a0e9e1d21191658e09e703bdee511b678dae05", "74730250037c3fbc33649a38415a01a8b49f3610a11c5b2231ec5230c9dd8be4"]}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Cargo.lock"}, "region": {"startLine": 1}}}]}, {"ruleId": "RUSTSEC-2026-0008", "level": "error", "message": {"text": "git2: RUSTSEC-2026-0008"}, "properties": {"repobilityId": 61491, "scanner": "osv-scanner", "fingerprint": "40f966496c85d57e0ad0968e7a900247bd8285adf9ed2d82319ad1bd91d679b9", "category": "dependency", "severity": "high", "confidence": 0.88, "triageState": "open", "verdict": "", "isResolved": false, "reason": "Collapsed 1 duplicate scanner signal(s) for the same underlying issue.", "evidence": {"match": "", "aliases": ["GHSA-j39j-6gw9-jw6h"], "package": "git2", "rule_id": "RUSTSEC-2026-0008", "scanner": "osv-scanner", "correlation_key": "vuln|git2|GHSA-J39J-6GW9-JW6H|cargo.lock", "duplicate_count": 1, "duplicate_rule_ids": ["GHSA-j39j-6gw9-jw6h", "RUSTSEC-2026-0008"], "duplicate_scanners": ["osv-scanner"], "duplicate_fingerprints": ["40f966496c85d57e0ad0968e7a900247bd8285adf9ed2d82319ad1bd91d679b9", "76dc259bc1562ecb96657ef429b1237ce54834c8f34de36cf36992d51e1436ae"]}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Cargo.lock"}, "region": {"startLine": 1}}}]}, {"ruleId": "RUSTSEC-2024-0414", "level": "error", "message": {"text": "gdkx11-sys: RUSTSEC-2024-0414"}, "properties": {"repobilityId": 61490, "scanner": "osv-scanner", "fingerprint": "bd8e0dfc94a48efaa1260a3a8d8bf04854603c657c0b6eae43d59f275ebd2db6", "category": "dependency", "severity": "high", "confidence": 0.88, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "", "package": "gdkx11-sys", "rule_id": "RUSTSEC-2024-0414", "scanner": "osv-scanner", "correlation_key": "fp|bd8e0dfc94a48efaa1260a3a8d8bf04854603c657c0b6eae43d59f275ebd2db6"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Cargo.lock"}, "region": {"startLine": 1}}}]}, {"ruleId": "RUSTSEC-2024-0411", "level": "error", "message": {"text": "gdkwayland-sys: RUSTSEC-2024-0411"}, "properties": {"repobilityId": 61489, "scanner": "osv-scanner", "fingerprint": "39fdb742d61df7a8d4b8439f79804e219a6e8d014aa79eefd6c7513c04bc98b4", "category": "dependency", "severity": "high", "confidence": 0.88, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "", "package": "gdkwayland-sys", "rule_id": "RUSTSEC-2024-0411", "scanner": "osv-scanner", "correlation_key": "fp|39fdb742d61df7a8d4b8439f79804e219a6e8d014aa79eefd6c7513c04bc98b4"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Cargo.lock"}, "region": {"startLine": 1}}}]}, {"ruleId": "RUSTSEC-2024-0418", "level": "error", "message": {"text": "gdk-sys: RUSTSEC-2024-0418"}, "properties": {"repobilityId": 61488, "scanner": "osv-scanner", "fingerprint": "0feeb140daa9af4478f47074c39d6d7ecf8514ede3cdf8eb3065a2b1759a9cf1", "category": "dependency", "severity": "high", "confidence": 0.88, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "", "package": "gdk-sys", "rule_id": "RUSTSEC-2024-0418", "scanner": "osv-scanner", "correlation_key": "fp|0feeb140daa9af4478f47074c39d6d7ecf8514ede3cdf8eb3065a2b1759a9cf1"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Cargo.lock"}, "region": {"startLine": 1}}}]}, {"ruleId": "RUSTSEC-2024-0412", "level": "error", "message": {"text": "gdk: RUSTSEC-2024-0412"}, "properties": {"repobilityId": 61487, "scanner": "osv-scanner", "fingerprint": "fded467d0459073e051899c6673dc075337202a2df1c35a003e652a81ff1d655", "category": "dependency", "severity": "high", "confidence": 0.88, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "", "package": "gdk", "rule_id": "RUSTSEC-2024-0412", "scanner": "osv-scanner", "correlation_key": "fp|fded467d0459073e051899c6673dc075337202a2df1c35a003e652a81ff1d655"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Cargo.lock"}, "region": {"startLine": 1}}}]}, {"ruleId": "RUSTSEC-2021-0154", "level": "error", "message": {"text": "fuser: RUSTSEC-2021-0154"}, "properties": {"repobilityId": 61486, "scanner": "osv-scanner", "fingerprint": "aeba01c86ed2e6f8bae475a7eb07e3915f8a275aa935939f8433292313ec2842", "category": "dependency", "severity": "high", "confidence": 0.88, "triageState": "open", "verdict": "", "isResolved": false, "reason": "Collapsed 1 duplicate scanner signal(s) for the same underlying issue.", "evidence": {"match": "", "aliases": ["GHSA-cvmj-47v9-35m9"], "package": "fuser", "rule_id": "RUSTSEC-2021-0154", "scanner": "osv-scanner", "correlation_key": "vuln|fuser|GHSA-CVMJ-47V9-35M9|cargo.lock", "duplicate_count": 1, "duplicate_rule_ids": ["GHSA-cvmj-47v9-35m9", "RUSTSEC-2021-0154"], "duplicate_scanners": ["osv-scanner"], "duplicate_fingerprints": ["659a211d93d07b7801a18f15f35602cb8704a1f380e95bd2c814536c668726b5", "aeba01c86ed2e6f8bae475a7eb07e3915f8a275aa935939f8433292313ec2842"]}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Cargo.lock"}, "region": {"startLine": 1}}}]}, {"ruleId": "RUSTSEC-2023-0051", "level": "error", "message": {"text": "dlopen_derive: RUSTSEC-2023-0051"}, "properties": {"repobilityId": 61485, "scanner": "osv-scanner", "fingerprint": "c8f4507532a0b4572906974a5627df0ae834862c5411e88acdee1b271d0ef9c6", "category": "dependency", "severity": "high", "confidence": 0.88, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "", "package": "dlopen_derive", "rule_id": "RUSTSEC-2023-0051", "scanner": "osv-scanner", "correlation_key": "fp|c8f4507532a0b4572906974a5627df0ae834862c5411e88acdee1b271d0ef9c6"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Cargo.lock"}, "region": {"startLine": 1}}}]}, {"ruleId": "RUSTSEC-2024-0388", "level": "error", "message": {"text": "derivative: RUSTSEC-2024-0388"}, "properties": {"repobilityId": 61484, "scanner": "osv-scanner", "fingerprint": "547bdd0377aa2b4e584493ec26f7c8f775912e0ae45112076d07893a6853c7c3", "category": "dependency", "severity": "high", "confidence": 0.88, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "", "package": "derivative", "rule_id": "RUSTSEC-2024-0388", "scanner": "osv-scanner", "correlation_key": "fp|547bdd0377aa2b4e584493ec26f7c8f775912e0ae45112076d07893a6853c7c3"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Cargo.lock"}, "region": {"startLine": 1}}}]}, {"ruleId": "RUSTSEC-2025-0024", "level": "error", "message": {"text": "crossbeam-channel: RUSTSEC-2025-0024"}, "properties": {"repobilityId": 61483, "scanner": "osv-scanner", "fingerprint": "3e0995a0d2f07e71e5d7d18486a80c62707ce071e2914dff201e2b596c0eb051", "category": "dependency", "severity": "high", "confidence": 0.88, "triageState": "open", "verdict": "", "isResolved": false, "reason": "Collapsed 1 duplicate scanner signal(s) for the same underlying issue.", "evidence": {"match": "", "aliases": ["CVE-2025-4574", "GHSA-pg9f-39pc-qf8g", "TROVE-2025-013"], "package": "crossbeam-channel", "rule_id": "RUSTSEC-2025-0024", "scanner": "osv-scanner", "correlation_key": "vuln|crossbeam-channel|CVE-2025-4574|cargo.lock", "duplicate_count": 1, "duplicate_rule_ids": ["GHSA-pg9f-39pc-qf8g", "RUSTSEC-2025-0024"], "duplicate_scanners": ["osv-scanner"], "duplicate_fingerprints": ["3e0995a0d2f07e71e5d7d18486a80c62707ce071e2914dff201e2b596c0eb051", "71c0701a3b54f91c729600f72b297785d05afd19e3ba6e32ad4a8d4015762f8f"]}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Cargo.lock"}, "region": {"startLine": 1}}}]}, {"ruleId": "RUSTSEC-2022-0056", "level": "error", "message": {"text": "clipboard: RUSTSEC-2022-0056"}, "properties": {"repobilityId": 61482, "scanner": "osv-scanner", "fingerprint": "e46c15fa0d89e1b5f194b26b7440408c0778a06048dd4f5fc01e7bd2f7667137", "category": "dependency", "severity": "high", "confidence": 0.88, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "", "package": "clipboard", "rule_id": "RUSTSEC-2022-0056", "scanner": "osv-scanner", "correlation_key": "fp|e46c15fa0d89e1b5f194b26b7440408c0778a06048dd4f5fc01e7bd2f7667137"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Cargo.lock"}, "region": {"startLine": 1}}}]}, {"ruleId": "RUSTSEC-2026-0007", "level": "error", "message": {"text": "bytes: RUSTSEC-2026-0007"}, "properties": {"repobilityId": 61481, "scanner": "osv-scanner", "fingerprint": "840e36d2de2ac4a8c1c34987b6b57d85a91e4b9353f37c12a525b9daca3b5258", "category": "dependency", "severity": "high", "confidence": 0.88, "triageState": "open", "verdict": "", "isResolved": false, "reason": "Collapsed 1 duplicate scanner signal(s) for the same underlying issue.", "evidence": {"match": "", "aliases": ["CVE-2026-25541", "GHSA-434x-w66g-qw3r"], "package": "bytes", "rule_id": "RUSTSEC-2026-0007", "scanner": "osv-scanner", "correlation_key": "vuln|bytes|CVE-2026-25541|cargo.lock", "duplicate_count": 1, "duplicate_rule_ids": ["GHSA-434x-w66g-qw3r", "RUSTSEC-2026-0007"], "duplicate_scanners": ["osv-scanner"], "duplicate_fingerprints": ["840e36d2de2ac4a8c1c34987b6b57d85a91e4b9353f37c12a525b9daca3b5258", "95131744e23e323a780caee127b231789361290b6f3c2f97df8af0deb20d6e30"]}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Cargo.lock"}, "region": {"startLine": 1}}}]}, {"ruleId": "RUSTSEC-2025-0141", "level": "error", "message": {"text": "bincode: RUSTSEC-2025-0141"}, "properties": {"repobilityId": 61480, "scanner": "osv-scanner", "fingerprint": "634ded575a91e8662811f47a1170cf5fb4279a65e3c3176bb84aeaac3c78b213", "category": "dependency", "severity": "high", "confidence": 0.88, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "", "package": "bincode", "rule_id": "RUSTSEC-2025-0141", "scanner": "osv-scanner", "correlation_key": "fp|634ded575a91e8662811f47a1170cf5fb4279a65e3c3176bb84aeaac3c78b213"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Cargo.lock"}, "region": {"startLine": 1}}}]}, {"ruleId": "RUSTSEC-2024-0375", "level": "error", "message": {"text": "atty: RUSTSEC-2024-0375"}, "properties": {"repobilityId": 61479, "scanner": "osv-scanner", "fingerprint": "7659bfa3796c87ab29d2fa2fed8de97a968f38d0d7927cd19e00695ce8330bd5", "category": "dependency", "severity": "high", "confidence": 0.88, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "", "package": "atty", "rule_id": "RUSTSEC-2024-0375", "scanner": "osv-scanner", "correlation_key": "fp|7659bfa3796c87ab29d2fa2fed8de97a968f38d0d7927cd19e00695ce8330bd5"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Cargo.lock"}, "region": {"startLine": 1}}}]}, {"ruleId": "RUSTSEC-2021-0145", "level": "error", "message": {"text": "atty: RUSTSEC-2021-0145"}, "properties": {"repobilityId": 61478, "scanner": "osv-scanner", "fingerprint": "a1c674679a0daa9ad82d1d4917872781295adfcddd1cd580124d38ff15d2687a", "category": "dependency", "severity": "high", "confidence": 0.88, "triageState": "open", "verdict": "", "isResolved": false, "reason": "Collapsed 1 duplicate scanner signal(s) for the same underlying issue.", "evidence": {"match": "", "aliases": ["GHSA-g98v-hv3f-hcfr"], "package": "atty", "rule_id": "RUSTSEC-2021-0145", "scanner": "osv-scanner", "correlation_key": "vuln|atty|GHSA-G98V-HV3F-HCFR|cargo.lock", "duplicate_count": 1, "duplicate_rule_ids": ["GHSA-g98v-hv3f-hcfr", "RUSTSEC-2021-0145"], "duplicate_scanners": ["osv-scanner"], "duplicate_fingerprints": ["40f04d504386f433be36aeb657151d1f32299623bc61dff32f4ed07d1989ada2", "a1c674679a0daa9ad82d1d4917872781295adfcddd1cd580124d38ff15d2687a"]}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Cargo.lock"}, "region": {"startLine": 1}}}]}, {"ruleId": "RUSTSEC-2024-0416", "level": "error", "message": {"text": "atk-sys: RUSTSEC-2024-0416"}, "properties": {"repobilityId": 61477, "scanner": "osv-scanner", "fingerprint": "42788dd707d4ed9d9da0cb41839adeb772b3c61386cad71b9adbf290879aae67", "category": "dependency", "severity": "high", "confidence": 0.88, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "", "package": "atk-sys", "rule_id": "RUSTSEC-2024-0416", "scanner": "osv-scanner", "correlation_key": "fp|42788dd707d4ed9d9da0cb41839adeb772b3c61386cad71b9adbf290879aae67"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Cargo.lock"}, "region": {"startLine": 1}}}]}, {"ruleId": "RUSTSEC-2024-0413", "level": "error", "message": {"text": "atk: RUSTSEC-2024-0413"}, "properties": {"repobilityId": 61476, "scanner": "osv-scanner", "fingerprint": "cd23383912cf1e6467caa308a01c7da4e22fd2a568cd9440f9eb85e4ba5d84f3", "category": "dependency", "severity": "high", "confidence": 0.88, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "", "package": "atk", "rule_id": "RUSTSEC-2024-0413", "scanner": "osv-scanner", "correlation_key": "fp|cd23383912cf1e6467caa308a01c7da4e22fd2a568cd9440f9eb85e4ba5d84f3"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Cargo.lock"}, "region": {"startLine": 1}}}]}, {"ruleId": "RUSTSEC-2021-0139", "level": "error", "message": {"text": "ansi_term: RUSTSEC-2021-0139"}, "properties": {"repobilityId": 61475, "scanner": "osv-scanner", "fingerprint": "29266863e8cf0fcb57aab1ed70c3eff0361447a486e44e530bc0a26ae493454f", "category": "dependency", "severity": "high", "confidence": 0.88, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "", "package": "ansi_term", "rule_id": "RUSTSEC-2021-0139", "scanner": "osv-scanner", "correlation_key": "fp|29266863e8cf0fcb57aab1ed70c3eff0361447a486e44e530bc0a26ae493454f"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Cargo.lock"}, "region": {"startLine": 1}}}]}, {"ruleId": "RUSTSEC-2025-0056", "level": "error", "message": {"text": "adler: RUSTSEC-2025-0056"}, "properties": {"repobilityId": 61474, "scanner": "osv-scanner", "fingerprint": "4d21ad4c6fbf173d850e104dddef538734e8999f68794eddface0315b01501fb", "category": "dependency", "severity": "high", "confidence": 0.88, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "", "package": "adler", "rule_id": "RUSTSEC-2025-0056", "scanner": "osv-scanner", "correlation_key": "fp|4d21ad4c6fbf173d850e104dddef538734e8999f68794eddface0315b01501fb"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Cargo.lock"}, "region": {"startLine": 1}}}]}, {"ruleId": "DKR001", "level": "error", "message": {"text": "Docker final stage runs as root"}, "properties": {"repobilityId": 61388, "scanner": "repobility-docker", "fingerprint": "a8998de525e316d45b20647ac742b05be7648247cf113468a4e9deaede097dc1", "category": "docker", "severity": "high", "confidence": 0.95, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Final Dockerfile USER resolves to root.", "evidence": {"rule_id": "DKR001", "scanner": "repobility-docker", "final_user": "root", "references": ["https://docs.docker.com/develop/develop-images/dockerfile_best-practices/", "https://cheatsheetseries.owasp.org/cheatsheets/Docker_Security_Cheat_Sheet.html", "https://github.com/hadolint/hadolint"], "correlation_key": "fp|a8998de525e316d45b20647ac742b05be7648247cf113468a4e9deaede097dc1"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Dockerfile"}, "region": {"startLine": 61}}}]}, {"ruleId": "MINED004", "level": "error", "message": {"text": "[MINED004] Weak Crypto: MD5/SHA1/DES/RC4 used for security context (not just checksums)."}, "properties": {"repobilityId": 61381, "scanner": "repobility-threat-engine", "fingerprint": "76e8386e0896e11c9b6bb7bac9909600ea051fe3ef47e2494ecc2008759676e6", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "weak-crypto", "owasp": "A02:2021", "cwe_ids": ["CWE-327"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347906+00:00", "triaged_in_corpus": 15, "observations_count": 303181, "ai_coder_pattern_id": 13}, "scanner": "repobility-threat-engine", "correlation_key": "fp|76e8386e0896e11c9b6bb7bac9909600ea051fe3ef47e2494ecc2008759676e6"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/auth_2fa.rs"}, "region": {"startLine": 31}}}]}, {"ruleId": "SEC029", "level": "error", "message": {"text": "[SEC029] Server-Side Request Forgery (SSRF) \u2014 outbound HTTP from user input: Outbound HTTP request to a user-controlled URL without allowlist validation. Attackers can probe internal services (169.254.169.254 metadata, internal Kubernetes endpoints, file:// URIs), exfiltrate data, or pivot through your network. SSRF is OWASP A10:2021 and a frequent foothold in cloud breaches."}, "properties": {"repobilityId": 61377, "scanner": "repobility-threat-engine", "fingerprint": "cf3043bee36ac43e7f87602698f6aba0371b7b4eaa23d23dbb093028e427694b", "category": "ssrf", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "url(u", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC029", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|cf3043bee36ac43e7f87602698f6aba0371b7b4eaa23d23dbb093028e427694b"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/hbbs_http/http_client.rs"}, "region": {"startLine": 123}}}]}, {"ruleId": "SEC029", "level": "error", "message": {"text": "[SEC029] Server-Side Request Forgery (SSRF) \u2014 outbound HTTP from user input: Outbound HTTP request to a user-controlled URL without allowlist validation. Attackers can probe internal services (169.254.169.254 metadata, internal Kubernetes endpoints, file:// URIs), exfiltrate data, or pivot through your network. SSRF is OWASP A10:2021 and a frequent foothold in cloud breaches."}, "properties": {"repobilityId": 61376, "scanner": "repobility-threat-engine", "fingerprint": "75f94db50ea8333dd6be750988f1c8013bfc7227014006feb3bbf2394cccc1c9", "category": "ssrf", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "URL (f", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC029", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|75f94db50ea8333dd6be750988f1c8013bfc7227014006feb3bbf2394cccc1c9"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "res/users.py"}, "region": {"startLine": 204}}}]}, {"ruleId": "SEC029", "level": "error", "message": {"text": "[SEC029] Server-Side Request Forgery (SSRF) \u2014 outbound HTTP from user input: Outbound HTTP request to a user-controlled URL without allowlist validation. Attackers can probe internal services (169.254.169.254 metadata, internal Kubernetes endpoints, file:// URIs), exfiltrate data, or pivot through your network. SSRF is OWASP A10:2021 and a frequent foothold in cloud breaches."}, "properties": {"repobilityId": 61375, "scanner": "repobility-threat-engine", "fingerprint": "0ba00bbdf595beac038e27901d6c71ad47c0bac9b15db8dbe2c36b9fd2addb94", "category": "ssrf", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "url(i", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC029", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|0ba00bbdf595beac038e27901d6c71ad47c0bac9b15db8dbe2c36b9fd2addb94"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "res/inline-sciter.py"}, "region": {"startLine": 12}}}]}, {"ruleId": "MINED001", "level": "error", "message": {"text": "[MINED001] Bare Except Pass: except: pass or except Exception: pass \u2014 silently swallows everything including KeyboardInterrupt and bugs."}, "properties": {"repobilityId": 61356, "scanner": "repobility-threat-engine", "fingerprint": "9814fb432e078e3bdcccfbbf78bcb2225752640a0b889e77298d653dbcfcd687", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "bare-except-pass", "owasp": null, "cwe_ids": ["CWE-755"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347744+00:00", "triaged_in_corpus": 15, "observations_count": 1550824, "ai_coder_pattern_id": 6}, "scanner": "repobility-threat-engine", "correlation_key": "fp|9814fb432e078e3bdcccfbbf78bcb2225752640a0b889e77298d653dbcfcd687"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "res/user-groups.py"}, "region": {"startLine": 225}}}]}, {"ruleId": "MINED001", "level": "error", "message": {"text": "[MINED001] Bare Except Pass: except: pass or except Exception: pass \u2014 silently swallows everything including KeyboardInterrupt and bugs."}, "properties": {"repobilityId": 61355, "scanner": "repobility-threat-engine", "fingerprint": "911cffd628f8193e0013dd7d9fbc96a582243359b6869bbf32ccdb50f9da0080", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "bare-except-pass", "owasp": null, "cwe_ids": ["CWE-755"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347744+00:00", "triaged_in_corpus": 15, "observations_count": 1550824, "ai_coder_pattern_id": 6}, "scanner": "repobility-threat-engine", "correlation_key": "fp|911cffd628f8193e0013dd7d9fbc96a582243359b6869bbf32ccdb50f9da0080"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "res/device-groups.py"}, "region": {"startLine": 191}}}]}, {"ruleId": "SEC078", "level": "error", "message": {"text": "[SEC078] Python: requests without timeout: requests.get/post without a timeout will hang indefinitely on a non-responsive server, causing thread exhaustion and ReDoS. Ported from bandit B113 (Apache-2.0). NOTE: this regex is heuristic; a real AST check is preferred for accuracy."}, "properties": {"repobilityId": 61353, "scanner": "repobility-threat-engine", "fingerprint": "17a1de7f123aa4da199e6fdf6a52f35ea191708a3fa5670f7733ca072c57e214", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "requests.post(", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC078", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|17a1de7f123aa4da199e6fdf6a52f35ea191708a3fa5670f7733ca072c57e214"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "res/job.py"}, "region": {"startLine": 32}}}]}, {"ruleId": "SEC078", "level": "error", "message": {"text": "[SEC078] Python: requests without timeout: requests.get/post without a timeout will hang indefinitely on a non-responsive server, causing thread exhaustion and ReDoS. Ported from bandit B113 (Apache-2.0). NOTE: this regex is heuristic; a real AST check is preferred for accuracy."}, "properties": {"repobilityId": 61352, "scanner": "repobility-threat-engine", "fingerprint": "88da19422a2e0c6233a95913c9df7d2ff00ed3d98721523c7da580ce439fec0e", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "requests.get(", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC078", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|88da19422a2e0c6233a95913c9df7d2ff00ed3d98721523c7da580ce439fec0e"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "res/devices.py"}, "region": {"startLine": 42}}}]}, {"ruleId": "SEC078", "level": "error", "message": {"text": "[SEC078] Python: requests without timeout: requests.get/post without a timeout will hang indefinitely on a non-responsive server, causing thread exhaustion and ReDoS. Ported from bandit B113 (Apache-2.0). NOTE: this regex is heuristic; a real AST check is preferred for accuracy."}, "properties": {"repobilityId": 61351, "scanner": "repobility-threat-engine", "fingerprint": "4f32d8ce7f3db294a9014ca2ebe4dca3f0f8fd34d0c3affa1db7a93fe2fbead3", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "requests.get(", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC078", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|4f32d8ce7f3db294a9014ca2ebe4dca3f0f8fd34d0c3affa1db7a93fe2fbead3"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "res/device-groups.py"}, "region": {"startLine": 49}}}]}, {"ruleId": "SEC020", "level": "error", "message": {"text": "[SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-bearing value. This is a frequent AI-assisted coding failure: the helper exposes the exact value needed for troubleshooting."}, "properties": {"repobilityId": 61349, "scanner": "repobility-threat-engine", "fingerprint": "f0ea23916b06999c9e4d0353030302fd930e7a0670dc53fbb400b5902654f167", "category": "credential_exposure", "severity": "high", "confidence": 0.85, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Credential-bearing variable appears to be printed or logged", "evidence": {"match": "print(delete_groups(args.url, args.token, names)", "reason": "Credential-bearing variable appears to be printed or logged", "rule_id": "SEC020", "scanner": "repobility-threat-engine", "confidence": 0.85, "correlation_key": "secret|res/user-groups.py|28|print delete_groups args.url args.token names"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "res/user-groups.py"}, "region": {"startLine": 284}}}]}, {"ruleId": "SEC020", "level": "error", "message": {"text": "[SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-bearing value. This is a frequent AI-assisted coding failure: the helper exposes the exact value needed for troubleshooting."}, "properties": {"repobilityId": 61348, "scanner": "repobility-threat-engine", "fingerprint": "b00f45ec67d787fc4e6b9854f518e6c626a81a91822afd36531789ab31d71d3c", "category": "credential_exposure", "severity": "high", "confidence": 0.85, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Credential-bearing variable appears to be printed or logged", "evidence": {"match": "print(enable_strategy(args.url, args.token, args.name)", "reason": "Credential-bearing variable appears to be printed or logged", "rule_id": "SEC020", "scanner": "repobility-threat-engine", "confidence": 0.85, "correlation_key": "secret|res/strategies.py|26|print enable_strategy args.url args.token args.name"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "res/strategies.py"}, "region": {"startLine": 262}}}]}, {"ruleId": "SEC020", "level": "error", "message": {"text": "[SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-bearing value. This is a frequent AI-assisted coding failure: the helper exposes the exact value needed for troubleshooting."}, "properties": {"repobilityId": 61347, "scanner": "repobility-threat-engine", "fingerprint": "c1fefa40be74aadaa2d7af45fd6934b0cf1063fa89e9a09df613fdd17df2e22a", "category": "credential_exposure", "severity": "high", "confidence": 0.85, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Credential-bearing variable appears to be printed or logged", "evidence": {"match": "print(delete_groups(args.url, args.token, names)", "reason": "Credential-bearing variable appears to be printed or logged", "rule_id": "SEC020", "scanner": "repobility-threat-engine", "confidence": 0.85, "correlation_key": "secret|res/device-groups.py|24|print delete_groups args.url args.token names"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "res/device-groups.py"}, "region": {"startLine": 250}}}]}, {"ruleId": "MINED029", "level": "error", "message": {"text": "[MINED029] Kotlin Null Bang: x!! throws NullPointerException if x is null. Bypasses Kotlins null safety."}, "properties": {"repobilityId": 61345, "scanner": "repobility-threat-engine", "fingerprint": "22d28cfdc1afa5cd38e4a6b9e5a5036b6294f67c7080eda6d13a8ab2a19e4e9f", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "kotlin-null-bang", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["kotlin"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347966+00:00", "triaged_in_corpus": 15, "observations_count": 7344, "ai_coder_pattern_id": 155}, "scanner": "repobility-threat-engine", "correlation_key": "fp|22d28cfdc1afa5cd38e4a6b9e5a5036b6294f67c7080eda6d13a8ab2a19e4e9f"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "flutter/android/app/src/main/kotlin/com/carriez/flutter_hbb/AudioRecordHandle.kt"}, "region": {"startLine": 101}}}]}, {"ruleId": "MINED003", "level": "error", "message": {"text": "[MINED003] Rust Unwrap In Prod: .unwrap() panics if None/Err. Acceptable in tests; risky elsewhere."}, "properties": {"repobilityId": 61343, "scanner": "repobility-threat-engine", "fingerprint": "b9adb0f1110ee7fe4ed8f07b5c76b734560fc4c6482db90efb74f651363232d2", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "rust-unwrap-in-prod", "owasp": null, "cwe_ids": ["CWE-755"], "languages": ["rust"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347903+00:00", "triaged_in_corpus": 15, "observations_count": 386515, "ai_coder_pattern_id": 111}, "scanner": "repobility-threat-engine", "correlation_key": "fp|b9adb0f1110ee7fe4ed8f07b5c76b734560fc4c6482db90efb74f651363232d2"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/cli.rs"}, "region": {"startLine": 42}}}]}, {"ruleId": "MINED003", "level": "error", "message": {"text": "[MINED003] Rust Unwrap In Prod: .unwrap() panics if None/Err. Acceptable in tests; risky elsewhere."}, "properties": {"repobilityId": 61342, "scanner": "repobility-threat-engine", "fingerprint": "e6be36a33dfd27e6507c35cda451aa382bc88c8d35eecc2a6923c0dee544205c", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "rust-unwrap-in-prod", "owasp": null, "cwe_ids": ["CWE-755"], "languages": ["rust"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347903+00:00", "triaged_in_corpus": 15, "observations_count": 386515, "ai_coder_pattern_id": 111}, "scanner": "repobility-threat-engine", "correlation_key": "fp|e6be36a33dfd27e6507c35cda451aa382bc88c8d35eecc2a6923c0dee544205c"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/auth_2fa.rs"}, "region": {"startLine": 92}}}]}, {"ruleId": "MINED003", "level": "error", "message": {"text": "[MINED003] Rust Unwrap In Prod: .unwrap() panics if None/Err. Acceptable in tests; risky elsewhere."}, "properties": {"repobilityId": 61341, "scanner": "repobility-threat-engine", "fingerprint": "677c5541266907e2feba3033d5dd6f64d4555010d94ad024c159bab215df5009", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "rust-unwrap-in-prod", "owasp": null, "cwe_ids": ["CWE-755"], "languages": ["rust"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347903+00:00", "triaged_in_corpus": 15, "observations_count": 386515, "ai_coder_pattern_id": 111}, "scanner": "repobility-threat-engine", "correlation_key": "fp|677c5541266907e2feba3033d5dd6f64d4555010d94ad024c159bab215df5009"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "build.rs"}, "region": {"startLine": 28}}}]}, {"ruleId": "MINED118", "level": "error", "message": {"text": "Dockerfile FROM `debian:bullseye-slim` not pinned by digest"}, "properties": {"repobilityId": 61326, "scanner": "repobility-supply-chain", "fingerprint": "aa57be0398475cbb2a022dc35e02f855d2afb1f628f9421762834f5a80d234a0", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "docker-from-unpinned", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["dockerfile"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|aa57be0398475cbb2a022dc35e02f855d2afb1f628f9421762834f5a80d234a0"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61473, "scanner": "gitleaks", "fingerprint": "da9b472b0457ae8c9a85336744f54b69475d195daeb4d15ab7cd69a7be30b3f4", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/nl.rs|64|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/nl.rs"}, "region": {"startLine": 646}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61472, "scanner": "gitleaks", "fingerprint": "824ada3f5f5744450ba41f20374e092e76996d58ab982df48aa0fbe1cacb62e3", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/nl.rs|56|key redacted"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/nl.rs"}, "region": {"startLine": 562}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61471, "scanner": "gitleaks", "fingerprint": "775e6df4c82a5e256da8176193e6c47e3bab57029a264bca4de343b20bdb9a04", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/ca.rs|64|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/ca.rs"}, "region": {"startLine": 646}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61470, "scanner": "gitleaks", "fingerprint": "97155bbb147bd07806a0005c2766a413ef8998ab78e01226a9e9bb0601f7bba5", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/pt_pt.rs|64|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/pt_PT.rs"}, "region": {"startLine": 646}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61469, "scanner": "gitleaks", "fingerprint": "cce7951fd344f4a2dd3d91a94d30d782498f745685be6424d365109d36a29cdd", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/pt_pt.rs|56|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/pt_PT.rs"}, "region": {"startLine": 562}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61468, "scanner": "gitleaks", "fingerprint": "a7791428f88e84152a82d4d46e50d75ff8f6a9500367b92749da56178fe50e19", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/fr.rs|64|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/fr.rs"}, "region": {"startLine": 646}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61467, "scanner": "gitleaks", "fingerprint": "cda08e33dbc2795cfe5bc7e561b6ed97f239894f8449dc06775dda4a6d3a6bf2", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/fr.rs|56|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/fr.rs"}, "region": {"startLine": 562}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61466, "scanner": "gitleaks", "fingerprint": "f53b51a3189160b9e9b78bff93a4433a4f6497fe6ba5ceb30efb0f9dac1eede3", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/es.rs|64|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/es.rs"}, "region": {"startLine": 646}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61465, "scanner": "gitleaks", "fingerprint": "bf76c2c6dcb332112ca8db50e4d01e74bb6e7b7d984f95424b366770d897e118", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/es.rs|56|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/es.rs"}, "region": {"startLine": 562}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61464, "scanner": "gitleaks", "fingerprint": "2cba5575b9d91b385eec0dd6a5680bdd240c47e277fcf413aac27cca255231a9", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/eo.rs|64|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/eo.rs"}, "region": {"startLine": 646}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61463, "scanner": "gitleaks", "fingerprint": "fc37aee58f8292dca04e5f36266c7349b2f219f998caa7a09101d4447e65d782", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/eo.rs|56|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/eo.rs"}, "region": {"startLine": 562}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61462, "scanner": "gitleaks", "fingerprint": "b6c49f1ddd3203671b8e5ed042d9c8f1e31d4d8b17a1612733fd2bfa011da388", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/nb.rs|64|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/nb.rs"}, "region": {"startLine": 646}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61461, "scanner": "gitleaks", "fingerprint": "84fea1b1c86e0913f86ce1b737f802c878b8b4c9dbc599497f927cef3392b1a8", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/nb.rs|56|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/nb.rs"}, "region": {"startLine": 562}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61460, "scanner": "gitleaks", "fingerprint": "42bcfc0a22d69efdf8d5736dd4b3caa781c2dd28018b163e109f97dace0574fa", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/sr.rs|64|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/sr.rs"}, "region": {"startLine": 646}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61459, "scanner": "gitleaks", "fingerprint": "8d91a979654576fc0811e8253e31ebebf907ef1b5305959c793af8d7c260c5e5", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/sr.rs|56|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/sr.rs"}, "region": {"startLine": 562}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61458, "scanner": "gitleaks", "fingerprint": "e65d9ca67313b5d5adc8b1d48fc9a158d7c5b6f2ebb58fa8f2154e572226d23f", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/pl.rs|64|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/pl.rs"}, "region": {"startLine": 646}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61457, "scanner": "gitleaks", "fingerprint": "adb8dff02af9d35ea222f52261bb117f8c438d57b66db7ddbfbf20e057f038b8", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/pl.rs|56|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/pl.rs"}, "region": {"startLine": 562}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61456, "scanner": "gitleaks", "fingerprint": "517901f3cf7b2459ea4b9eab4beddb62c2341f8902bd7a2dec4ebc31afe111fb", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/en.rs|23|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/en.rs"}, "region": {"startLine": 235}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61455, "scanner": "gitleaks", "fingerprint": "9709ceeea02272d99c377cb945ade146413f10bf9a3be3c8432acecba81bbc0a", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/en.rs|20|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/en.rs"}, "region": {"startLine": 202}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61454, "scanner": "gitleaks", "fingerprint": "7fe0332f0a9aea4b0d91f740c0cc22a38d4577e20b36c9cbd9e2e90d09333b36", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/de.rs|64|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/de.rs"}, "region": {"startLine": 646}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61453, "scanner": "gitleaks", "fingerprint": "41b77da3dd746243edd581fe584ad6c6759c5efe1ec983a4c92001a14ee33dec", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/de.rs|56|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/de.rs"}, "region": {"startLine": 562}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61452, "scanner": "gitleaks", "fingerprint": "fa0bbb90004a70967ab637547180764c0f9a399a2df9013a23f3f1bc2d997995", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/sq.rs|64|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/sq.rs"}, "region": {"startLine": 646}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61451, "scanner": "gitleaks", "fingerprint": "2804b9acbfb5a6e682e04f2b67d3c34c75deb3d77b41e0b4acaa97b64f796751", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/sq.rs|56|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/sq.rs"}, "region": {"startLine": 562}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61450, "scanner": "gitleaks", "fingerprint": "c31c52f6d90f5d3cdb6c656355392ed7f8aba688b0ca4d66271454369e5e33cb", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/tr.rs|64|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/tr.rs"}, "region": {"startLine": 646}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61449, "scanner": "gitleaks", "fingerprint": "484282bd5405cb68aa9178ba73d6c453f8115bc309436f795e6a02195b7ddcd8", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/tr.rs|56|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/tr.rs"}, "region": {"startLine": 562}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61448, "scanner": "gitleaks", "fingerprint": "a3f0a0e6c98d95da28107079bc27e6fdcfd29a871bfc7ac6e6123cf4a48ddbce", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/ptbr.rs|64|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/ptbr.rs"}, "region": {"startLine": 646}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61447, "scanner": "gitleaks", "fingerprint": "0fe660704b2895431ebaebf32fc7f89a1ace237115c6e2366a8be35dfe2d6a4f", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/ptbr.rs|56|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/ptbr.rs"}, "region": {"startLine": 562}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61446, "scanner": "gitleaks", "fingerprint": "ae4484e5819697a5cfa0bf7a187e299e74d7f4288880ed8e729fb49b642428f5", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/id.rs|64|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/id.rs"}, "region": {"startLine": 646}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61445, "scanner": "gitleaks", "fingerprint": "4cfd9602cf62c85d4d0caa8f408535a92fcd12f1538c8f03dba008bf28155a92", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/id.rs|56|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/id.rs"}, "region": {"startLine": 562}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61444, "scanner": "gitleaks", "fingerprint": "f9f46c5280d40858220d019b36bee87ed1ad51ea7f634fbc3533f6df49433855", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/it.rs|64|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/it.rs"}, "region": {"startLine": 646}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61443, "scanner": "gitleaks", "fingerprint": "7086e1ecd3cf2a32202e5eef5b36184d095af3d62f43cf1635ae46da0b6f7383", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/it.rs|56|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/it.rs"}, "region": {"startLine": 562}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61442, "scanner": "gitleaks", "fingerprint": "01aa783f1070cb4801460ccf596e6c11315a19038601d88190d4662863b928c4", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/lt.rs|64|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/lt.rs"}, "region": {"startLine": 646}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61441, "scanner": "gitleaks", "fingerprint": "2e92df3c5b77f664138095802af54b2e7709eaf2d797c3d56586ed46ee9763a7", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/lt.rs|56|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/lt.rs"}, "region": {"startLine": 562}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61440, "scanner": "gitleaks", "fingerprint": "eb59df0e53f78ad04b420356e7c6c0b8e424c330295d97d0d808548f264f4ada", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/hr.rs|64|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/hr.rs"}, "region": {"startLine": 646}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61439, "scanner": "gitleaks", "fingerprint": "3e70e3204b55e9583a1a8ddfed18dd50c14469338197df5543c5651d89f735f6", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/hr.rs|56|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/hr.rs"}, "region": {"startLine": 562}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61438, "scanner": "gitleaks", "fingerprint": "3e0c5efb6e470c2b9d74c93278e6eabfa09cbeba294340aaa99a6e78687fcddb", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/da.rs|64|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/da.rs"}, "region": {"startLine": 646}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61437, "scanner": "gitleaks", "fingerprint": "7ad64e61b0ffb571a706b98167b69de350fad330261a6536406ca5e02aa3a8f5", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/da.rs|56|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/da.rs"}, "region": {"startLine": 562}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61436, "scanner": "gitleaks", "fingerprint": "923fab14f1a50c120ceb8a0497e68901ad4bb3f56839846ea1d61dca82ca9702", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/sv.rs|64|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/sv.rs"}, "region": {"startLine": 646}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61435, "scanner": "gitleaks", "fingerprint": "58cfb631b0fc37b1ad8fd050ffdc88a082b12e176258b046599b583972006000", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/sv.rs|56|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/sv.rs"}, "region": {"startLine": 562}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61434, "scanner": "gitleaks", "fingerprint": "bdf94b76e41dd5eff21c7b52f80e4f9fd6b37952ed05c57ff1bfbc2c0db99b36", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/sl.rs|64|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/sl.rs"}, "region": {"startLine": 646}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61433, "scanner": "gitleaks", "fingerprint": "2334650c9be60dc4b17c7697a454624e98760fa3271c20b02b498aa848b1a93d", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/sl.rs|56|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/sl.rs"}, "region": {"startLine": 562}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61432, "scanner": "gitleaks", "fingerprint": "1041b6b7e460b9f417cd8d8c03230ab15db2d63399c957772d29b3d3afc3f6ab", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/sc.rs|64|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/sc.rs"}, "region": {"startLine": 646}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61431, "scanner": "gitleaks", "fingerprint": "575b7401db1b05b6833f2ee162637fc546da34d8581b442992a1997b1ac2b1d8", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/sc.rs|56|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/sc.rs"}, "region": {"startLine": 562}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61430, "scanner": "gitleaks", "fingerprint": "dbb10f08687aaf718e326c4a7dbb8018fcfc98f4a4a5edcf4bc48768be75475b", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/uk.rs|64|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/uk.rs"}, "region": {"startLine": 646}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61429, "scanner": "gitleaks", "fingerprint": "1487fe21b8b55cdc5f3e14449d823462fda7f8cc60b5f4a1e4dcf505dc0e5d9e", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/uk.rs|56|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/uk.rs"}, "region": {"startLine": 562}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61428, "scanner": "gitleaks", "fingerprint": "3e3b85b63a3241598e421120f985e96712ecaaf5a5d24071a86438485cc18967", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/sk.rs|64|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/sk.rs"}, "region": {"startLine": 646}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61427, "scanner": "gitleaks", "fingerprint": "3abc955caa998bd7fa3aadfc7d2f7da87eaf85df42efb7f0a7dff9b39f67022d", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/sk.rs|56|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/sk.rs"}, "region": {"startLine": 562}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61426, "scanner": "gitleaks", "fingerprint": "21859453cbf1e8b4485c9fa343b2c1bc9151a6e148c68806f37ed65bd53092d0", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/eu.rs|64|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/eu.rs"}, "region": {"startLine": 646}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61425, "scanner": "gitleaks", "fingerprint": "2508c96e858e56964c349c93c7299286945f6f959586082fa8ea3b95c2d30fe5", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/eu.rs|56|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/eu.rs"}, "region": {"startLine": 562}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61424, "scanner": "gitleaks", "fingerprint": "54e3e5d4cdc01c092b42da17cf2a53227f32d8afd361e738a90ea2e4d33df647", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/tw.rs|64|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/tw.rs"}, "region": {"startLine": 646}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61423, "scanner": "gitleaks", "fingerprint": "d198b579acd45214f00e42de75adcc43de6dcc45e4adbe5ab1b4d3fd9d906a43", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/tw.rs|56|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/tw.rs"}, "region": {"startLine": 562}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61422, "scanner": "gitleaks", "fingerprint": "297a413003ceca81449c20e9888356ee996f072090deec2418ce709f82dbd946", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/th.rs|64|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/th.rs"}, "region": {"startLine": 646}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61421, "scanner": "gitleaks", "fingerprint": "2db830cf177c9c29dbc3320de5ecc16e0650e5683dce21b63544b638cfa48132", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/th.rs|56|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/th.rs"}, "region": {"startLine": 562}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61420, "scanner": "gitleaks", "fingerprint": "b86847b71b7fae0732c2cb2865e61cc0d5187f7f586604971698d664959984d3", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/kz.rs|64|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/kz.rs"}, "region": {"startLine": 646}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61419, "scanner": "gitleaks", "fingerprint": "ea6fa42389beaab4605bfa4248fdbb66042cf317c14a88a8085b326194c61bb0", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/kz.rs|56|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/kz.rs"}, "region": {"startLine": 562}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61418, "scanner": "gitleaks", "fingerprint": "848820a5c030e8e14b8c23f6eeee81e69dcd0750123c5c973fa8106e739d53a4", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/et.rs|64|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/et.rs"}, "region": {"startLine": 646}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61417, "scanner": "gitleaks", "fingerprint": "fd773d1d628e916416b2a7b9f81141f39270aff8b65db51eaabfb89794347ce5", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/et.rs|56|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/et.rs"}, "region": {"startLine": 562}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61416, "scanner": "gitleaks", "fingerprint": "b0e96f50ef27ab01ae93cb3bcf3d24b92886af2c5eef003f87291c4b014a1b16", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/lv.rs|64|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/lv.rs"}, "region": {"startLine": 646}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61415, "scanner": "gitleaks", "fingerprint": "43cc6cfc5b7e3b9beec8b50436d4bfb07dabfa4ed093a242fed4e40b0ab8b796", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/lv.rs|56|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/lv.rs"}, "region": {"startLine": 562}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61414, "scanner": "gitleaks", "fingerprint": "8260c7626a19d9fc6ddeadbba4cd8817cfe10f2e8cf5dea22f313fc9a6e20855", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/hu.rs|64|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/hu.rs"}, "region": {"startLine": 646}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61413, "scanner": "gitleaks", "fingerprint": "7d48ad2808751880bb2d2a72ec09496cf3e848e998e6f66cd72265c68509c5a1", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/hu.rs|56|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/hu.rs"}, "region": {"startLine": 562}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61412, "scanner": "gitleaks", "fingerprint": "742b70bef66e0ce07398ae18bd22613213c09a2651342e5fc1690b33a2a3f480", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/cs.rs|64|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/cs.rs"}, "region": {"startLine": 646}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61411, "scanner": "gitleaks", "fingerprint": "57ab815a243eba6c04fc81f059911499457b9fae9663c3011bc1fe517062f2c6", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/cs.rs|56|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/cs.rs"}, "region": {"startLine": 562}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61410, "scanner": "gitleaks", "fingerprint": "b93dc4c6bd9f7a43716a9c395615812d743adb11491ce4047368de212ed1861e", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/ko.rs|64|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/ko.rs"}, "region": {"startLine": 646}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61409, "scanner": "gitleaks", "fingerprint": "cc195b958f0a4ca5b7077a1c893f5190d2286d1386b4b94abdb0aceb66aa740f", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/ko.rs|56|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/ko.rs"}, "region": {"startLine": 562}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61408, "scanner": "gitleaks", "fingerprint": "cf82086aaef584588238725c9c75296b79f8a82f260d90a3975efc47232925b6", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/ru.rs|64|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/ru.rs"}, "region": {"startLine": 646}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61407, "scanner": "gitleaks", "fingerprint": "db34be1fc1e5ab3e5ff5ec68c357e26082e1564cddf3d6dfa963ed220a8c3f99", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/ru.rs|56|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/ru.rs"}, "region": {"startLine": 562}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61406, "scanner": "gitleaks", "fingerprint": "ceb16affa4231bd9c12db111f0cd925243db809cc29ccd36269c6bf92d6c410e", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/ja.rs|64|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/ja.rs"}, "region": {"startLine": 646}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61405, "scanner": "gitleaks", "fingerprint": "9ffb1c38dd39c561c4763ec9dff8e445be33ad7141c740d4cadb8b66fe0452aa", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/el.rs|64|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/el.rs"}, "region": {"startLine": 646}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61404, "scanner": "gitleaks", "fingerprint": "cc9c7f014b0a1f88fb82bf160debf3062426e8ca03f7d20ab635e19f5eb64060", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/el.rs|56|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/el.rs"}, "region": {"startLine": 562}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61403, "scanner": "gitleaks", "fingerprint": "6dd8ce50f908c842247fb3d62bf481e8c001c4806209fbe7c428d070c0370f20", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/ge.rs|64|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/ge.rs"}, "region": {"startLine": 646}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61402, "scanner": "gitleaks", "fingerprint": "1322cd1aa7a451149221b340341afa089ddb640b06b75e3beb0ba565c03860db", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/ge.rs|56|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/ge.rs"}, "region": {"startLine": 562}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61401, "scanner": "gitleaks", "fingerprint": "adee994367532cb13c3d14347ac0d48c06da260d04859a4877eb93d66e153c8a", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/he.rs|56|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/he.rs"}, "region": {"startLine": 562}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61400, "scanner": "gitleaks", "fingerprint": "567ba4f6ba1f5da40c5c18e209dec8e5d9b71b3f8713f919b82df3db3c08e1b5", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/be.rs|64|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/be.rs"}, "region": {"startLine": 646}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61399, "scanner": "gitleaks", "fingerprint": "f6ddd497c24e5ef45e749af80786672f11338311ea0a21cc0569d0c15565a560", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/be.rs|56|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/be.rs"}, "region": {"startLine": 562}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61398, "scanner": "gitleaks", "fingerprint": "84ab40a409750c13b0eb47530098b6e6a23480a15125d06f93ed6f56c83df649", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/fa.rs|56|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/fa.rs"}, "region": {"startLine": 562}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61397, "scanner": "gitleaks", "fingerprint": "9446eacc6a498ff08a1524b47a224cb61af3453e92e75f9ff92496a77e79ffe0", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/bg.rs|64|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/bg.rs"}, "region": {"startLine": 646}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61396, "scanner": "gitleaks", "fingerprint": "1cc951a4a146f69e64bf495bcc79b0eba521b47091336dd03872047cc3d3732a", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\\n", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/lang/bg.rs|56|key redacted n"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/lang/bg.rs"}, "region": {"startLine": 562}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61395, "scanner": "gitleaks", "fingerprint": "bd8fb87736fb7d4c56a30263c07066a40abe4b242d04257935203d74e8e4cc91", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key: \"REDACTED\"", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/custom_server.rs|18|key: redacted"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/custom_server.rs"}, "region": {"startLine": 187}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61394, "scanner": "gitleaks", "fingerprint": "2fa7f4146b954c30c75f080d90d20b552045cb62ec021b95c0d7a5e0aade2cb2", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key: \"REDACTED\"", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/custom_server.rs|17|key: redacted"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/custom_server.rs"}, "region": {"startLine": 180}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61393, "scanner": "gitleaks", "fingerprint": "b7a7da32b33b450e6016f42003f868ce7be42b7bfa29abf1b4d178b23022703d", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key: \"REDACTED\"", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/custom_server.rs|16|key: redacted"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/custom_server.rs"}, "region": {"startLine": 168}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61392, "scanner": "gitleaks", "fingerprint": "a3fa6a1e725b6fdf12d87f27f87a4dd30188499a45e661af0f905b48e3be0f33", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key: \"REDACTED\"", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/custom_server.rs|15|key: redacted"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/custom_server.rs"}, "region": {"startLine": 156}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61391, "scanner": "gitleaks", "fingerprint": "e1fa43e0a6183f05e0e5081f5352ec1db55511e00243099fe2cb97c0c3090e8d", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key: \"REDACTED\"", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/custom_server.rs|14|key: redacted"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/custom_server.rs"}, "region": {"startLine": 144}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 61390, "scanner": "gitleaks", "fingerprint": "1e34d881d92c5633806ab929806a0465bfac10f1207d0a8826871bb3cd41c5cc", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key=REDACTED\"", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|src/custom_server.rs|13|key redacted"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/custom_server.rs"}, "region": {"startLine": 139}}}]}, {"ruleId": "MINED133", "level": "error", "message": {"text": "Hardcoded Telegram bot webhook URL in source"}, "properties": {"repobilityId": 61328, "scanner": "repobility-supply-chain", "fingerprint": "761aab7ab15ff8877e72a11d590e7426f4efefe66b6cc28d046efe3f1a34818f", "category": "dependency", "severity": "critical", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "exfil-webhook-url", "owasp": null, "cwe_ids": ["CWE-200", "CWE-540"], "languages": ["any"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|761aab7ab15ff8877e72a11d590e7426f4efefe66b6cc28d046efe3f1a34818f"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/common.rs"}, "region": {"startLine": 2800}}}]}]}]}