{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-4af986425089d076", "name": "Possibly dead Python function: animation_tick", "shortDescription": {"text": "Possibly dead Python function: animation_tick"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-370fb12846b55bc6", "name": "Possibly dead Python function: check_fade", "shortDescription": {"text": "Possibly dead Python function: check_fade"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1912bedb041ce4ee", "name": "Possibly dead Python function: play_click", "shortDescription": {"text": "Possibly dead Python function: play_click"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c6233c11f872e460", "name": "Possibly dead Python function: hide_cursor", "shortDescription": {"text": "Possibly dead Python function: hide_cursor"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e696b8ec7fdebad1", "name": "Possibly dead Python function: set_masked", "shortDescription": {"text": "Possibly dead Python function: set_masked"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-96f8ad9a5253e5ff", "name": "Possibly dead Python function: replace_iconify_element", "shortDescription": {"text": "Possibly dead Python function: replace_iconify_element"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bdbdcb9e8c09df78", "name": "Possibly dead Python function: right_click_element", "shortDescription": {"text": "Possibly dead Python function: right_click_element"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-de05ae39bf66f8f7", "name": "Possibly dead Python function: render_snapshot", "shortDescription": {"text": "Possibly dead Python function: render_snapshot"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9c119a1e4497a009", "name": "Possibly dead Python function: parse_action_string", "shortDescription": {"text": "Possibly dead Python function: parse_action_string"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-660b5717a1f764d1", "name": "Possibly dead Python function: dict_to_action", "shortDescription": {"text": "Possibly dead Python function: dict_to_action"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5ddda2ab654ca003", "name": "Possibly dead Python function: compare_schematic_to_netlist", "shortDescription": {"text": "Possibly dead Python function: compare_schematic_to_netlist"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b9f25870aaf8f9d2", "name": "Possibly dead Python function: handle_root", "shortDescription": {"text": "Possibly dead Python function: handle_root"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-54187acc3778dd7c", "name": "Possibly dead Python function: container_is_running", "shortDescription": {"text": "Possibly dead Python function: container_is_running"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-eccb27038fbf0e42", "name": "Possibly dead Python function: prune_unused_images", "shortDescription": {"text": "Possibly dead Python function: prune_unused_images"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bd06fc508de1956f", "name": "Possibly dead Python function: create_event", "shortDescription": {"text": "Possibly dead Python function: create_event"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1df880950370c990", "name": "Possibly dead Python function: delete_event", "shortDescription": {"text": "Possibly dead Python function: delete_event"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e8f4a9c19896404b", "name": "Possibly dead Python function: bound_method", "shortDescription": {"text": "Possibly dead Python function: bound_method"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4b5018bbfc025723", "name": "Possibly dead Python function: export_netlist", "shortDescription": {"text": "Possibly dead Python function: export_netlist"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b1ee79761e900f56", "name": "Possibly dead Python function: simulate_operating_point", "shortDescription": {"text": "Possibly dead Python function: simulate_operating_point"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d37335f95fe51d3b", "name": "Possibly dead Python function: simulate_transient", "shortDescription": {"text": "Possibly dead Python function: simulate_transient"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e9b78868d4bc1a60", "name": "`dangerouslySetInnerHTML` used in a React component \u2014 docs/src/components/mermaid.tsx:43", "shortDescription": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 docs/src/components/mermaid.tsx:43"}, "fullDescription": {"text": "Open XSS surface unless the input is provably trusted. Replace with explicit JSX or sanitize via a vetted library.\n\nWhy: OWASP basics. Already partially flagged by the security analyzer.\nRule id: fq.dangerous-html"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d21d52f33f199592", "name": "`dangerouslySetInnerHTML` used in a React component \u2014 docs/src/app/layout.tsx:39", "shortDescription": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 docs/src/app/layout.tsx:39"}, "fullDescription": {"text": "Open XSS surface unless the input is provably trusted. Replace with explicit JSX or sanitize via a vetted library.\n\nWhy: OWASP basics. Already partially flagged by the security analyzer.\nRule id: fq.dangerous-html"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3bda0537ef6fcf13", "name": "Stray `console.log` in TS/JS \u2014 docs/src/app/api/copilotkit/route.ts:301", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 docs/src/app/api/copilotkit/route.ts:301"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-07947fd1419e1196", "name": "Stray `console.log` in TS/JS \u2014 docs/src/lib/posthog-query.ts:37", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 docs/src/lib/posthog-query.ts:37"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-821ff2c2184afbde", "name": "Stray `console.log` in TS/JS \u2014 scripts/docs-generators/lume.ts:203", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/docs-generators/lume.ts:203"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f616052e2f15e3f5", "name": "Stray `console.log` in TS/JS \u2014 scripts/docs-generators/typescript-sdk.ts:134", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/docs-generators/typescript-sdk.ts:134"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-77d4e15bc51e9a1a", "name": "Stray `console.log` in TS/JS \u2014 scripts/docs-generators/cua-driver.ts:211", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/docs-generators/cua-driver.ts:211"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d363f530911883d4", "name": "Stray `console.log` in TS/JS \u2014 scripts/docs-generators/generate-versioned-docs.ts:117", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/docs-generators/generate-versioned-docs.ts:117"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-25cb9840685a18dc", "name": "Stray `console.log` in TS/JS \u2014 scripts/docs-generators/python-sdk.ts:180", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/docs-generators/python-sdk.ts:180"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8652358a2c59568f", "name": "Stray `console.log` in TS/JS \u2014 scripts/docs-generators/generate-changelog.ts:91", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/docs-generators/generate-changelog.ts:91"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d2d340ba2f62454e", "name": "Stray `console.log` in TS/JS \u2014 scripts/docs-generators/runner.ts:72", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/docs-generators/runner.ts:72"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-99d0d5448ab2b7cd", "name": "Stray `console.log` in TS/JS \u2014 libs/cuabot/src/cuabotd.ts:169", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 libs/cuabot/src/cuabotd.ts:169"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2b397dd9c84519d6", "name": "TODO/FIXME marker in shipping code \u2014 libs/cuabot/src/utils.ts:124", "shortDescription": {"text": "TODO/FIXME marker in shipping code \u2014 libs/cuabot/src/utils.ts:124"}, "fullDescription": {"text": "Track in /reviews or /issues, not as a code comment that rots.\n\nWhy: Drift control \u2014 shouldn't be the same as Quality TODO scanner.\nRule id: fq.todo-marker"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-674f968666f0313b", "name": "Stray `console.log` in TS/JS \u2014 libs/cuabot/src/client.ts:214", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 libs/cuabot/src/client.ts:214"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-eb3017639b7d2b24", "name": "Stray `console.log` in TS/JS \u2014 libs/cuabot/src/cuabot.tsx:196", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 libs/cuabot/src/cuabot.tsx:196"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-378d2994d5e7cec4", "name": "Stray `console.log` in TS/JS \u2014 libs/cuabot/src/onboarding.tsx:383", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 libs/cuabot/src/onboarding.tsx:383"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-519b186e367ee827", "name": "TODO/FIXME marker in shipping code \u2014 libs/typescript/playground/src/constants/sandboxPresets.ts:28", "shortDescription": {"text": "TODO/FIXME marker in shipping code \u2014 libs/typescript/playground/src/constants/sandboxPresets.ts:28"}, "fullDescription": {"text": "Track in /reviews or /issues, not as a code comment that rots.\n\nWhy: Drift control \u2014 shouldn't be the same as Quality TODO scanner.\nRule id: fq.todo-marker"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-9306f7ed3445710a", "name": "`truncate` class without `title=` for hover reveal \u2014 libs/typescript/playground/src/components/modals/ReplayTrajectoryMo", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 libs/typescript/playground/src/components/modals/ReplayTrajectoryModal.tsx:266"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b1400580523d9c7e", "name": "`truncate` class without `title=` for hover reveal \u2014 libs/typescript/playground/src/components/modals/ExportTrajectoryMo", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 libs/typescript/playground/src/components/modals/ExportTrajectoryModal.tsx:183"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-9b35dbe16596cd78", "name": "`truncate` class without `title=` for hover reveal \u2014 libs/typescript/playground/src/components/ui/select.tsx:116", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 libs/typescript/playground/src/components/ui/select.tsx:116"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7a5786ca8e67e23d", "name": "TODO/FIXME marker in shipping code \u2014 libs/typescript/playground/src/components/primitives/ChatMessage.tsx:75", "shortDescription": {"text": "TODO/FIXME marker in shipping code \u2014 libs/typescript/playground/src/components/primitives/ChatMessage.tsx:75"}, "fullDescription": {"text": "Track in /reviews or /issues, not as a code comment that rots.\n\nWhy: Drift control \u2014 shouldn't be the same as Quality TODO scanner.\nRule id: fq.todo-marker"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b4ec6817471732a5", "name": "`truncate` class without `title=` for hover reveal \u2014 libs/typescript/playground/src/components/composed/ChatList.tsx:238", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 libs/typescript/playground/src/components/composed/ChatList.tsx:238"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-5a671b553393acda", "name": "`truncate` class without `title=` for hover reveal \u2014 libs/typescript/playground/src/components/composed/ComputerList.tsx", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 libs/typescript/playground/src/components/composed/ComputerList.tsx:180"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-65b7636895950806", "name": "`truncate` class without `title=` for hover reveal \u2014 libs/typescript/playground/src/components/composed/ChatSidebar.tsx:", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 libs/typescript/playground/src/components/composed/ChatSidebar.tsx:246"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-60f1858d46a72f8c", "name": "Stray `console.log` in TS/JS \u2014 libs/typescript/computer/src/interface/base.ts:109", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 libs/typescript/computer/src/interface/base.ts:109"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f51ce5cdceb9ed70", "name": "Stray `console.log` in TS/JS \u2014 libs/typescript/cua-cli/src/auth.ts:42", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 libs/typescript/cua-cli/src/auth.ts:42"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-58785b5c9d41fa15", "name": "Stray `console.log` in TS/JS \u2014 libs/typescript/cua-cli/src/util.ts:55", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 libs/typescript/cua-cli/src/util.ts:55"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-92d3a0cdf573dddb", "name": "Stray `console.log` in TS/JS \u2014 libs/typescript/cua-cli/src/cli.ts:177", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 libs/typescript/cua-cli/src/cli.ts:177"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ec566b3ef10841ed", "name": "Stray `console.log` in TS/JS \u2014 libs/typescript/cua-cli/src/commands/auth.ts:10", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 libs/typescript/cua-cli/src/commands/auth.ts:10"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-049486bc5a013ce1", "name": "Stray `console.log` in TS/JS \u2014 libs/typescript/cua-cli/src/commands/sandbox.ts:197", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 libs/typescript/cua-cli/src/commands/sandbox.ts:197"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1f773a7b9005a617", "name": "Stray `console.log` in TS/JS \u2014 libs/typescript/cua-cli/src/commands/image.ts:70", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 libs/typescript/cua-cli/src/commands/image.ts:70"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0e04832fcad5d022", "name": "Stray `console.log` in TS/JS \u2014 libs/typescript/cua-cli/src/commands/skills.ts:1027", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 libs/typescript/cua-cli/src/commands/skills.ts:1027"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9fa7a734ee59c865", "name": "Stray `console.log` in TS/JS \u2014 libs/python/cua-sandbox/cua_sandbox/runtime/_bw_init.js:57", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 libs/python/cua-sandbox/cua_sandbox/runtime/_bw_init.js:57"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-59cc5688025f3000", "name": "Stray `console.log` in TS/JS \u2014 examples/computer-example-ts/src/index.ts:61", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 examples/computer-example-ts/src/index.ts:61"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fc45330b6f2fe459", "name": "Stray `console.log` in TS/JS \u2014 examples/computer-example-ts/src/helpers.ts:11", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 examples/computer-example-ts/src/helpers.ts:11"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-783841ec2c6dcf2e", "name": "Privileged port 1000 in use", "shortDescription": {"text": "Privileged port 1000 in use"}, "fullDescription": {"text": "Port 1000 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d63da3583b14afc0", "name": "Dockerfile runs as root: Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-de3c1f217d72a063", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-29c3f5f8786ec40e", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f5786914277ba7de", "name": "Dockerfile runs as root: libs/kasm/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: libs/kasm/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0f1325f4b2a2ffb0", "name": "Docker base image is tag-pinned but not digest-pinned: kasmweb/core-ubuntu-jammy:1.17.0", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: kasmweb/core-ubuntu-jammy:1.17.0"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-59939ad8f5c121ed", "name": "Dockerfile runs as root: libs/xfce/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: libs/xfce/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1a704897a6034b23", "name": "Docker base image is tag-pinned but not digest-pinned: kicad/kicad:9.0", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: kicad/kicad:9.0"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a7142264efe702f3", "name": "Docker base image is tag-pinned but not digest-pinned: ubuntu:22.04", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:22.04"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ad7a39001f822300", "name": "Dockerfile pipes a remote installer into a shell", "shortDescription": {"text": "Dockerfile pipes a remote installer into a shell"}, "fullDescription": {"text": "Executing downloaded code during image build gives the remote endpoint build-time code execution. Prefer pinned packages or verify downloaded installers by checksum/signature."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "high", "confidence": 1.0}}, {"id": "scanner-babddbbf708b16b5", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b6bf63d7995d1ad8", "name": "Dockerfile runs as root: libs/lumier/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: libs/lumier/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6b858541dddc62df", "name": "Docker base image is tag-pinned but not digest-pinned: debian:bullseye-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: debian:bullseye-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e02bf0cbd03a912e", "name": "Dockerfile runs as root: libs/qemu-docker/android/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: libs/qemu-docker/android/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-183decdb0fbc9935", "name": "Docker base image is tag-pinned but not digest-pinned: eclipse-temurin:17-jdk", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: eclipse-temurin:17-jdk"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-80501bd68237b24a", "name": "Docker base image is tag-pinned but not digest-pinned: budtmo/docker-android:emulator_11.0", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: budtmo/docker-android:emulator_11.0"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5924bfbe87f2e2d6", "name": "Dockerfile pipes a remote installer into a shell", "shortDescription": {"text": "Dockerfile pipes a remote installer into a shell"}, "fullDescription": {"text": "Executing downloaded code during image build gives the remote endpoint build-time code execution. Prefer pinned packages or verify downloaded installers by checksum/signature."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "high", "confidence": 1.0}}, {"id": "scanner-2fe07073265e21e7", "name": "Dockerfile runs as root: libs/qemu-docker/windows/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: libs/qemu-docker/windows/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-57cd18160922cda9", "name": "Docker base image uses a mutable or implicit tag: trycua/windows-local:latest", "shortDescription": {"text": "Docker base image uses a mutable or implicit tag: trycua/windows-local:latest"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-51871cb296973c0d", "name": "Dockerfile runs as root: libs/qemu-docker/linux/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: libs/qemu-docker/linux/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-eac947f9a5daf6e6", "name": "Docker base image uses a mutable or implicit tag: trycua/qemu-local:latest", "shortDescription": {"text": "Docker base image uses a mutable or implicit tag: trycua/qemu-local:latest"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-aa5acaa49eb8315b", "name": "Containers defined but no K8s/orchestration manifest found", "shortDescription": {"text": "Containers defined but no K8s/orchestration manifest found"}, "fullDescription": {"text": "Repo has Dockerfiles/compose but no Kubernetes/Nomad manifests. If the target deployment is K8s, the manifests may live in a separate ops repo."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-92867aa4ad98ab27", "name": "Insecure pattern 'cors_wildcard' in docs/scripts/modal_app.py:1970", "shortDescription": {"text": "Insecure pattern 'cors_wildcard' in docs/scripts/modal_app.py:1970"}, "fullDescription": {"text": "Found a known-risky pattern (cors_wildcard). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2e68b9355cb162be", "name": "Insecure pattern 'cors_wildcard' in docs/scripts/docs-mcp-server/main.py:506", "shortDescription": {"text": "Insecure pattern 'cors_wildcard' in docs/scripts/docs-mcp-server/main.py:506"}, "fullDescription": {"text": "Found a known-risky pattern (cors_wildcard). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-80037c4c837ca683", "name": "Insecure pattern 'dangerous_innerhtml' in docs/src/components/mermaid.tsx:43", "shortDescription": {"text": "Insecure pattern 'dangerous_innerhtml' in docs/src/components/mermaid.tsx:43"}, "fullDescription": {"text": "Found a known-risky pattern (dangerous_innerhtml). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6195cce07499b94c", "name": "Insecure pattern 'dangerous_innerhtml' in docs/src/app/layout.tsx:39", "shortDescription": {"text": "Insecure pattern 'dangerous_innerhtml' in docs/src/app/layout.tsx:39"}, "fullDescription": {"text": "Found a known-risky pattern (dangerous_innerhtml). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8e020eb7776b8b74", "name": "Insecure pattern 'node_child_process' in scripts/typescript-typecheck.js:2", "shortDescription": {"text": "Insecure pattern 'node_child_process' in scripts/typescript-typecheck.js:2"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-65251aa027b32684", "name": "Insecure pattern 'node_child_process' in scripts/docs-generators/lume.ts:14", "shortDescription": {"text": "Insecure pattern 'node_child_process' in scripts/docs-generators/lume.ts:14"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b62dc865b28e817f", "name": "Insecure pattern 'node_child_process' in scripts/docs-generators/typescript-sdk.ts:17", "shortDescription": {"text": "Insecure pattern 'node_child_process' in scripts/docs-generators/typescript-sdk.ts:17"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-feb58064765d8eff", "name": "Insecure pattern 'node_child_process' in scripts/docs-generators/cua-driver.ts:14", "shortDescription": {"text": "Insecure pattern 'node_child_process' in scripts/docs-generators/cua-driver.ts:14"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1be795e53d11fef6", "name": "Insecure pattern 'node_child_process' in scripts/docs-generators/generate-versioned-docs.ts:15", "shortDescription": {"text": "Insecure pattern 'node_child_process' in scripts/docs-generators/generate-versioned-docs.ts:15"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ef182317b3233830", "name": "Insecure pattern 'eval_used' in scripts/docs-generators/extract_python_docs.py:202", "shortDescription": {"text": "Insecure pattern 'eval_used' in scripts/docs-generators/extract_python_docs.py:202"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-7b7696b0fbb6fc17", "name": "Insecure pattern 'node_child_process' in scripts/docs-generators/python-sdk.ts:15", "shortDescription": {"text": "Insecure pattern 'node_child_process' in scripts/docs-generators/python-sdk.ts:15"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-669b0312e68b9496", "name": "Insecure pattern 'node_child_process' in scripts/docs-generators/generate-changelog.ts:16", "shortDescription": {"text": "Insecure pattern 'node_child_process' in scripts/docs-generators/generate-changelog.ts:16"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9b9cc8df9aa1df97", "name": "Insecure pattern 'node_child_process' in scripts/docs-generators/runner.ts:17", "shortDescription": {"text": "Insecure pattern 'node_child_process' in scripts/docs-generators/runner.ts:17"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-377a0d4d05f6e8ec", "name": "Insecure pattern 'exec_used' in libs/cuabot/src/cuabotd.ts:172", "shortDescription": {"text": "Insecure pattern 'exec_used' in libs/cuabot/src/cuabotd.ts:172"}, "fullDescription": {"text": "Found a known-risky pattern (exec_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-62a4e922ae41e480", "name": "Insecure pattern 'node_child_process' in libs/cuabot/src/cuabotd.ts:10", "shortDescription": {"text": "Insecure pattern 'node_child_process' in libs/cuabot/src/cuabotd.ts:10"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bc29b71556d0b614", "name": "Insecure pattern 'cors_wildcard' in libs/cuabot/src/cuabotd.ts:966", "shortDescription": {"text": "Insecure pattern 'cors_wildcard' in libs/cuabot/src/cuabotd.ts:966"}, "fullDescription": {"text": "Found a known-risky pattern (cors_wildcard). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6f7c1a67030abef9", "name": "Insecure pattern 'exec_used' in libs/cuabot/src/utils.ts:262", "shortDescription": {"text": "Insecure pattern 'exec_used' in libs/cuabot/src/utils.ts:262"}, "fullDescription": {"text": "Found a known-risky pattern (exec_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-2b31abd9093706ec", "name": "Insecure pattern 'node_child_process' in libs/cuabot/src/utils.ts:6", "shortDescription": {"text": "Insecure pattern 'node_child_process' in libs/cuabot/src/utils.ts:6"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c95edecb08bc7b95", "name": "Possible secret in libs/cuabot/src/telemetry.ts", "shortDescription": {"text": "Possible secret in libs/cuabot/src/telemetry.ts"}, "fullDescription": {"text": "Detected pattern matching generic_api_key. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-9a338fecec6ea1aa", "name": "Insecure pattern 'node_child_process' in libs/cuabot/src/client.ts:6", "shortDescription": {"text": "Insecure pattern 'node_child_process' in libs/cuabot/src/client.ts:6"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a9e4d0afe71a275c", "name": "Insecure pattern 'node_child_process' in libs/cuabot/src/cuabot.tsx:23", "shortDescription": {"text": "Insecure pattern 'node_child_process' in libs/cuabot/src/cuabot.tsx:23"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b2f6a404d8f2e17f", "name": "Insecure pattern 'exec_used' in libs/cuabot/src/onboarding.tsx:401", "shortDescription": {"text": "Insecure pattern 'exec_used' in libs/cuabot/src/onboarding.tsx:401"}, "fullDescription": {"text": "Found a known-risky pattern (exec_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-47290cfee8dc9074", "name": "Insecure pattern 'node_child_process' in libs/cuabot/src/onboarding.tsx:25", "shortDescription": {"text": "Insecure pattern 'node_child_process' in libs/cuabot/src/onboarding.tsx:25"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-02462ef6a24e7f39", "name": "Insecure pattern 'cors_wildcard' in libs/cua-bench/cua_bench/cli/commands/trace.py:466", "shortDescription": {"text": "Insecure pattern 'cors_wildcard' in libs/cua-bench/cua_bench/cli/commands/trace.py:466"}, "fullDescription": {"text": "Found a known-risky pattern (cors_wildcard). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b772e48b46773dfb", "name": "Insecure pattern 'exec_used' in libs/cua-bench/cua_bench/computers/webtop.py:301", "shortDescription": {"text": "Insecure pattern 'exec_used' in libs/cua-bench/cua_bench/computers/webtop.py:301"}, "fullDescription": {"text": "Found a known-risky pattern (exec_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a169cc96ef816f5f", "name": "Insecure pattern 'cors_wildcard' in libs/cua-bench/cua_bench/workers/worker_server.py:75", "shortDescription": {"text": "Insecure pattern 'cors_wildcard' in libs/cua-bench/cua_bench/workers/worker_server.py:75"}, "fullDescription": {"text": "Found a known-risky pattern (cors_wildcard). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a9bf98a08288942d", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/cua-bench/cua_bench/www/trace_viewer.html:599", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/cua-bench/cua_bench/www/trace_viewer.html:599"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b62c5f02ce3e898a", "name": "Insecure pattern 'domparser_html_parse' in libs/cua-bench/cua_bench/www/trace_viewer.html:320", "shortDescription": {"text": "Insecure pattern 'domparser_html_parse' in libs/cua-bench/cua_bench/www/trace_viewer.html:320"}, "fullDescription": {"text": "Found a known-risky pattern (domparser_html_parse). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-118aafc0c005d508", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/cua-bench/cua_bench/www/environments.html:306", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/cua-bench/cua_bench/www/environments.html:306"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6378cfbaa46a6c5f", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/cua-bench/cua_bench/www/generate.html:486", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/cua-bench/cua_bench/www/generate.html:486"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6d709a8a53e3f92f", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/cua-bench/cua_bench/www/environment-detail.html:416", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/cua-bench/cua_bench/www/environment-detail.html:416"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e36783adc3136b32", "name": "Possible secret in libs/cua-bench/tasks/winarena_adapter/evaluators/getters/vlc.py", "shortDescription": {"text": "Possible secret in libs/cua-bench/tasks/winarena_adapter/evaluators/getters/vlc.py"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-3a8677e6188f61d7", "name": "Insecure pattern 'eval_used' in libs/cua-bench/tasks/winarena_adapter/evaluators/getters/fileexplorer.py:96", "shortDescription": {"text": "Insecure pattern 'eval_used' in libs/cua-bench/tasks/winarena_adapter/evaluators/getters/fileexplorer.py:96"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-423e4105aee270ca", "name": "Insecure pattern 'eval_used' in libs/cua-bench/tasks/winarena_adapter/evaluators/metrics/basic_os.py:4", "shortDescription": {"text": "Insecure pattern 'eval_used' in libs/cua-bench/tasks/winarena_adapter/evaluators/metrics/basic_os.py:4"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-5947182575beeb1b", "name": "Insecure pattern 'exec_used' in libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:194", "shortDescription": {"text": "Insecure pattern 'exec_used' in libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:194"}, "fullDescription": {"text": "Found a known-risky pattern (exec_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c2c589cf79df603b", "name": "Insecure pattern 'subprocess_shell_true' in libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:297", "shortDescription": {"text": "Insecure pattern 'subprocess_shell_true' in libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:297"}, "fullDescription": {"text": "Found a known-risky pattern (subprocess_shell_true). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ef20c16609a31466", "name": "Insecure pattern 'debug_true' in libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:2030", "shortDescription": {"text": "Insecure pattern 'debug_true' in libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:2030"}, "fullDescription": {"text": "Found a known-risky pattern (debug_true). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-59e535d5f13e2c44", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/cua-bench/tasks/slack_env/gui/index.html:2003", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/cua-bench/tasks/slack_env/gui/index.html:2003"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5e40df8557361f18", "name": "Possible secret in libs/typescript/core/src/telemetry/clients/posthog.ts", "shortDescription": {"text": "Possible secret in libs/typescript/core/src/telemetry/clients/posthog.ts"}, "fullDescription": {"text": "Detected pattern matching generic_api_key. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-824a03f193635a24", "name": "Insecure pattern 'node_child_process' in libs/typescript/cua-cli/src/commands/serve-mcp.ts:10", "shortDescription": {"text": "Insecure pattern 'node_child_process' in libs/typescript/cua-cli/src/commands/serve-mcp.ts:10"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-488c0a7c6529ddf7", "name": "Insecure pattern 'eval_used' in libs/cua-driver/rust/crates/platform-windows/src/tools/page_bookmark.rs:165", "shortDescription": {"text": "Insecure pattern 'eval_used' in libs/cua-driver/rust/crates/platform-windows/src/tools/page_bookmark.rs:165"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f27eb64f343ae123", "name": "Possible secret in libs/lumier/src/lib/utils.sh", "shortDescription": {"text": "Possible secret in libs/lumier/src/lib/utils.sh"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-6d6832e5b13f9cdf", "name": "Insecure pattern 'cors_wildcard' in libs/python/agent/cua_agent/playground/server.py:46", "shortDescription": {"text": "Insecure pattern 'cors_wildcard' in libs/python/agent/cua_agent/playground/server.py:46"}, "fullDescription": {"text": "Found a known-risky pattern (cors_wildcard). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-902b1a341b527947", "name": "Insecure pattern 'eval_used' in libs/python/agent/cua_agent/loops/uitars.py:306", "shortDescription": {"text": "Insecure pattern 'eval_used' in libs/python/agent/cua_agent/loops/uitars.py:306"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-141ffe9972662c11", "name": "Insecure pattern 'cors_wildcard' in libs/python/computer-server/computer_server/main.py:182", "shortDescription": {"text": "Insecure pattern 'cors_wildcard' in libs/python/computer-server/computer_server/main.py:182"}, "fullDescription": {"text": "Found a known-risky pattern (cors_wildcard). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b1c6a7adc352dfd9", "name": "Insecure pattern 'subprocess_shell_true' in libs/python/computer-server/computer_server/handlers/generic.py:115", "shortDescription": {"text": "Insecure pattern 'subprocess_shell_true' in libs/python/computer-server/computer_server/handlers/generic.py:115"}, "fullDescription": {"text": "Found a known-risky pattern (subprocess_shell_true). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-30d13f66951b200d", "name": "Insecure pattern 'exec_used' in libs/python/computer/computer/computer.py:1404", "shortDescription": {"text": "Insecure pattern 'exec_used' in libs/python/computer/computer/computer.py:1404"}, "fullDescription": {"text": "Found a known-risky pattern (exec_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3306b98d1b80ebbb", "name": "Insecure pattern 'weak_hash' in libs/python/computer/computer/ui/gradio/app.py:497", "shortDescription": {"text": "Insecure pattern 'weak_hash' in libs/python/computer/computer/ui/gradio/app.py:497"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fe7a00ad89082b51", "name": "Insecure pattern 'subprocess_shell_true' in libs/python/computer/computer/providers/lume_api.py:77", "shortDescription": {"text": "Insecure pattern 'subprocess_shell_true' in libs/python/computer/computer/providers/lume_api.py:77"}, "fullDescription": {"text": "Found a known-risky pattern (subprocess_shell_true). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a23d25dc976ceab3", "name": "Possible secret in libs/python/core/cua_core/telemetry/posthog.py", "shortDescription": {"text": "Possible secret in libs/python/core/cua_core/telemetry/posthog.py"}, "fullDescription": {"text": "Detected pattern matching generic_api_key. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-98f841ffda4f698e", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/openshot/linux/logs", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/openshot/linux/logs/transcript/index.html:321"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a6d07b823bcf8d1b", "name": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/openshot/linux/logs/transc", "shortDescription": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/openshot/linux/logs/transcript/index.html:387"}, "fullDescription": {"text": "Found a known-risky pattern (domparser_html_parse). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-60028212dc21a261", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/openshot/linux/logs", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/openshot/linux/logs/transcript/page-001.html:936"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ddb1223d72d902ec", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/genie3/linux/logs/t", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/genie3/linux/logs/transcript/index.html:288"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-201d3871f8b6a418", "name": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/genie3/linux/logs/transcri", "shortDescription": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/genie3/linux/logs/transcript/index.html:354"}, "fullDescription": {"text": "Found a known-risky pattern (domparser_html_parse). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-650748f0a0b2ed40", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/genie3/linux/logs/t", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/genie3/linux/logs/transcript/page-001.html:276"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-274ce0df5b91ece5", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/nmap/linux/logs/tra", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/nmap/linux/logs/transcript/index.html:314"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5d21cda50328f81e", "name": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/nmap/linux/logs/transcript", "shortDescription": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/nmap/linux/logs/transcript/index.html:380"}, "fullDescription": {"text": "Found a known-risky pattern (domparser_html_parse). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-179e00242e35994e", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/nmap/linux/logs/tra", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/nmap/linux/logs/transcript/page-001.html:750"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-62d0a13326cb5a77", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/docker/linux/logs/t", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/docker/linux/logs/transcript/index.html:311"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f0b794eb75c70379", "name": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/docker/linux/logs/transcri", "shortDescription": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/docker/linux/logs/transcript/index.html:377"}, "fullDescription": {"text": "Found a known-risky pattern (domparser_html_parse). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ccda15761c1d9fc3", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/docker/linux/logs/t", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/docker/linux/logs/transcript/page-001.html:1631"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2f86b30e4bf67d48", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/eclipse-ide/linux/l", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/eclipse-ide/linux/logs/transcript/index.html:319"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e49674d1a577542f", "name": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/eclipse-ide/linux/logs/tra", "shortDescription": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/eclipse-ide/linux/logs/transcript/index.html:385"}, "fullDescription": {"text": "Found a known-risky pattern (domparser_html_parse). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f1e57377d317cd06", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/eclipse-ide/linux/l", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/eclipse-ide/linux/logs/transcript/page-001.html:996"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3c7a6ef18a9df1c4", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/metasploit/linux/lo", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/metasploit/linux/logs/transcript/index.html:335"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-06b088e4eefbb129", "name": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/metasploit/linux/logs/tran", "shortDescription": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/metasploit/linux/logs/transcript/index.html:401"}, "fullDescription": {"text": "Found a known-risky pattern (domparser_html_parse). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9af0daf52d83323c", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/metasploit/linux/lo", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/metasploit/linux/logs/transcript/page-001.html:2548"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f10cfca557f29280", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/featurewiz/linux/lo", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/featurewiz/linux/logs/transcript/index.html:284"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-766979045c03624d", "name": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/featurewiz/linux/logs/tran", "shortDescription": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/featurewiz/linux/logs/transcript/index.html:350"}, "fullDescription": {"text": "Found a known-risky pattern (domparser_html_parse). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2887d978c4a0bd02", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/featurewiz/linux/lo", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/featurewiz/linux/logs/transcript/page-001.html:239"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a07e5fdaecd81b15", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/mysql/linux/logs/tr", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/mysql/linux/logs/transcript/index.html:312"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e525542023fdf624", "name": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/mysql/linux/logs/transcrip", "shortDescription": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/mysql/linux/logs/transcript/index.html:378"}, "fullDescription": {"text": "Found a known-risky pattern (domparser_html_parse). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-afb4fa6bca5849ce", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/mysql/linux/logs/tr", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/mysql/linux/logs/transcript/page-001.html:2165"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6ccca27186c78791", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/gawk/linux/logs/tra", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/gawk/linux/logs/transcript/index.html:322"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9aa6116dc6a05daf", "name": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/gawk/linux/logs/transcript", "shortDescription": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/gawk/linux/logs/transcript/index.html:388"}, "fullDescription": {"text": "Found a known-risky pattern (domparser_html_parse). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7701c6297a524439", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/gawk/linux/logs/tra", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/gawk/linux/logs/transcript/page-001.html:1106"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8edecedd878ff8df", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/systemd-hostnamed/l", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/systemd-hostnamed/linux/logs/transcript/index.html:309"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5f4b77e886a32569", "name": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/systemd-hostnamed/linux/lo", "shortDescription": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/systemd-hostnamed/linux/logs/transcript/index.html:375"}, "fullDescription": {"text": "Found a known-risky pattern (domparser_html_parse). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e3cba6fc79d09539", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/systemd-hostnamed/l", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/systemd-hostnamed/linux/logs/transcript/page-001.html:1234"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4803b04da2731428", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/torch-points3d/linu", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/torch-points3d/linux/logs/transcript/index.html:295"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1fcb2e3038b5b419", "name": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/torch-points3d/linux/logs/", "shortDescription": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/torch-points3d/linux/logs/transcript/index.html:361"}, "fullDescription": {"text": "Found a known-risky pattern (domparser_html_parse). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6c08070bdf501628", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/torch-points3d/linu", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/torch-points3d/linux/logs/transcript/page-001.html:289"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-dfc0e04c7a3e8d63", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/unity/linux/logs/tr", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/unity/linux/logs/transcript/index.html:306"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ef7a0e51a53f0fb8", "name": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/unity/linux/logs/transcrip", "shortDescription": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/unity/linux/logs/transcript/index.html:372"}, "fullDescription": {"text": "Found a known-risky pattern (domparser_html_parse). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-87080e5e2d74d301", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/unity/linux/logs/tr", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/unity/linux/logs/transcript/page-001.html:2363"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-545b07eecbf99e3b", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/wireshark/linux/log", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/wireshark/linux/logs/transcript/index.html:312"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-76d88060a560d6f3", "name": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/wireshark/linux/logs/trans", "shortDescription": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/wireshark/linux/logs/transcript/index.html:378"}, "fullDescription": {"text": "Found a known-risky pattern (domparser_html_parse). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-211434d7bb50a17f", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/wireshark/linux/log", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/wireshark/linux/logs/transcript/page-001.html:867"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-94f1bc219fd0b1bf", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/visual-studio-code/", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/visual-studio-code/linux/logs/transcript/index.html:313"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f0e1dddebda04dc4", "name": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/visual-studio-code/linux/l", "shortDescription": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/visual-studio-code/linux/logs/transcript/index.html:379"}, "fullDescription": {"text": "Found a known-risky pattern (domparser_html_parse). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-06d9d4a0c1c7de28", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/visual-studio-code/", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/visual-studio-code/linux/logs/transcript/page-001.html:1565"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e52a4d3a758e04e0", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/wazuh/linux/logs/tr", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/wazuh/linux/logs/transcript/index.html:327"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0c60a7a892a6a5c2", "name": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/wazuh/linux/logs/transcrip", "shortDescription": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/wazuh/linux/logs/transcript/index.html:393"}, "fullDescription": {"text": "Found a known-risky pattern (domparser_html_parse). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a034105f3a25b504", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/jenkins/linux/logs/", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/jenkins/linux/logs/transcript/index.html:313"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2f62aecfd9cedede", "name": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/jenkins/linux/logs/transcr", "shortDescription": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/jenkins/linux/logs/transcript/index.html:379"}, "fullDescription": {"text": "Found a known-risky pattern (domparser_html_parse). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ea1ca9e102987af9", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/jenkins/linux/logs/", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/jenkins/linux/logs/transcript/page-001.html:1877"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-985c5e466b7b1895", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/neovim/linux/logs/t", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/neovim/linux/logs/transcript/index.html:301"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-915645918c390698", "name": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/neovim/linux/logs/transcri", "shortDescription": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/neovim/linux/logs/transcript/index.html:367"}, "fullDescription": {"text": "Found a known-risky pattern (domparser_html_parse). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0b4ce1f839ab0cc0", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/neovim/linux/logs/t", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/neovim/linux/logs/transcript/page-001.html:894"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2a6126b60d6310a8", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/apache-cassandra/li", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/apache-cassandra/linux/logs/transcript/index.html:324"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8c83129d45e11aad", "name": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/apache-cassandra/linux/log", "shortDescription": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/apache-cassandra/linux/logs/transcript/index.html:390"}, "fullDescription": {"text": "Found a known-risky pattern (domparser_html_parse). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2750a16f47bbf4de", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/apache-cassandra/li", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/apache-cassandra/linux/logs/transcript/page-001.html:1456"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b4151a3d0b1d1f36", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/puppet/linux/logs/t", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/puppet/linux/logs/transcript/index.html:314"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2865ad3076407c02", "name": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/puppet/linux/logs/transcri", "shortDescription": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/puppet/linux/logs/transcript/index.html:380"}, "fullDescription": {"text": "Found a known-risky pattern (domparser_html_parse). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8d9e66c8217443e2", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/puppet/linux/logs/t", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/puppet/linux/logs/transcript/page-001.html:967"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b1f78fc85784e628", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/git/linux/logs/tran", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/git/linux/logs/transcript/index.html:339"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c734267c4dd04ae3", "name": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/git/linux/logs/transcript/", "shortDescription": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/git/linux/logs/transcript/index.html:405"}, "fullDescription": {"text": "Found a known-risky pattern (domparser_html_parse). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-08ca41e9c5352eeb", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/git/linux/logs/tran", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/git/linux/logs/transcript/page-001.html:774"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d5a8e97e38509af3", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/redis/linux/logs/tr", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/redis/linux/logs/transcript/index.html:305"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-05cd356ddcbaa3be", "name": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/redis/linux/logs/transcrip", "shortDescription": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/redis/linux/logs/transcript/index.html:371"}, "fullDescription": {"text": "Found a known-risky pattern (domparser_html_parse). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a15aaf931c628b6d", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/redis/linux/logs/tr", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/redis/linux/logs/transcript/page-001.html:1113"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4795738b4d0e004b", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/kubernetes/linux/lo", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/kubernetes/linux/logs/transcript/index.html:330"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f127bf43447140d8", "name": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/kubernetes/linux/logs/tran", "shortDescription": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/kubernetes/linux/logs/transcript/index.html:396"}, "fullDescription": {"text": "Found a known-risky pattern (domparser_html_parse). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3bbd01c0df7ed5d7", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/kubernetes/linux/lo", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/kubernetes/linux/logs/transcript/page-001.html:2140"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b07582f10ac39c49", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/gitlab/linux/logs/t", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/gitlab/linux/logs/transcript/index.html:377"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-80818f3023cf426c", "name": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/gitlab/linux/logs/transcri", "shortDescription": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/gitlab/linux/logs/transcript/index.html:443"}, "fullDescription": {"text": "Found a known-risky pattern (domparser_html_parse). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6d7ac47f60ee4d71", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/gitlab/linux/logs/t", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/gitlab/linux/logs/transcript/page-001.html:4931"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-07bff925187b313f", "name": "Insecure pattern 'weak_hash' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/gitlab/linux/logs/transcript/page-001", "shortDescription": {"text": "Insecure pattern 'weak_hash' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/gitlab/linux/logs/transcript/page-001.html:660"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f371f06fd5429d83", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/azure-data-studio/l", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/azure-data-studio/linux/logs/transcript/index.html:309"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-96c221d31139b474", "name": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/azure-data-studio/linux/lo", "shortDescription": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/azure-data-studio/linux/logs/transcript/index.html:375"}, "fullDescription": {"text": "Found a known-risky pattern (domparser_html_parse). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fef94a3569cd8730", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/azure-data-studio/l", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/azure-data-studio/linux/logs/transcript/page-001.html:1991"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cedc897f71e49c20", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/ansible/linux/logs/", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/ansible/linux/logs/transcript/index.html:318"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5d47059f33aa251b", "name": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/ansible/linux/logs/transcr", "shortDescription": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/ansible/linux/logs/transcript/index.html:384"}, "fullDescription": {"text": "Found a known-risky pattern (domparser_html_parse). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-14ff2b824853a678", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/ansible/linux/logs/", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/ansible/linux/logs/transcript/page-001.html:1133"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3be6e547364e9430", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/lit/linux/logs/tran", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/lit/linux/logs/transcript/index.html:286"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bef1488919289611", "name": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/lit/linux/logs/transcript/", "shortDescription": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/lit/linux/logs/transcript/index.html:352"}, "fullDescription": {"text": "Found a known-risky pattern (domparser_html_parse). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0614429c30c9f164", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/lit/linux/logs/tran", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/lit/linux/logs/transcript/page-001.html:224"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4c09fd636feb8b99", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/pycharm/linux/logs/", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/pycharm/linux/logs/transcript/index.html:313"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-54f0fc8e3fc05ef7", "name": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/pycharm/linux/logs/transcr", "shortDescription": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/pycharm/linux/logs/transcript/index.html:379"}, "fullDescription": {"text": "Found a known-risky pattern (domparser_html_parse). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9232015ce658fecc", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/netbeans/linux/logs", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/netbeans/linux/logs/transcript/index.html:315"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-262b4ddcb6ab719b", "name": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/netbeans/linux/logs/transc", "shortDescription": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/netbeans/linux/logs/transcript/index.html:381"}, "fullDescription": {"text": "Found a known-risky pattern (domparser_html_parse). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b26619b3255ca72a", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/netbeans/linux/logs", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/netbeans/linux/logs/transcript/page-001.html:2876"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-480afaecf01eed38", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/postgresql/linux/lo", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/postgresql/linux/logs/transcript/index.html:307"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0f4207e354b888cb", "name": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/postgresql/linux/logs/tran", "shortDescription": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/postgresql/linux/logs/transcript/index.html:373"}, "fullDescription": {"text": "Found a known-risky pattern (domparser_html_parse). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-299b9d1211437983", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/postgresql/linux/lo", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/postgresql/linux/logs/transcript/page-001.html:1479"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8927d400caa186d5", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/pgadmin/linux/logs/", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/pgadmin/linux/logs/transcript/index.html:315"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9d087b4e4fcdeb15", "name": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/pgadmin/linux/logs/transcr", "shortDescription": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/pgadmin/linux/logs/transcript/index.html:381"}, "fullDescription": {"text": "Found a known-risky pattern (domparser_html_parse). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-50d800eddb900f25", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/mariadb/linux/logs/", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/mariadb/linux/logs/transcript/index.html:311"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1ba16515427b3512", "name": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/mariadb/linux/logs/transcr", "shortDescription": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/mariadb/linux/logs/transcript/index.html:377"}, "fullDescription": {"text": "Found a known-risky pattern (domparser_html_parse). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8d3c361b0517bb80", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/mariadb/linux/logs/", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/mariadb/linux/logs/transcript/page-001.html:1070"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-50789fed72f7b5c9", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/vim/linux/logs/tran", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/vim/linux/logs/transcript/index.html:303"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1e0dc24dbae25aed", "name": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/vim/linux/logs/transcript/", "shortDescription": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/vim/linux/logs/transcript/index.html:369"}, "fullDescription": {"text": "Found a known-risky pattern (domparser_html_parse). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4b82b637f320a664", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/vim/linux/logs/tran", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/vim/linux/logs/transcript/page-001.html:878"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a1489b3686f34066", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/gin/linux/logs/tran", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/gin/linux/logs/transcript/index.html:286"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b057ae9ba9c893fd", "name": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/gin/linux/logs/transcript/", "shortDescription": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/gin/linux/logs/transcript/index.html:352"}, "fullDescription": {"text": "Found a known-risky pattern (domparser_html_parse). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ebf1fb01fb84f25e", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/gin/linux/logs/tran", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/gin/linux/logs/transcript/page-001.html:251"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-df1bb809a2845c1d", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/emacs/linux/logs/tr", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/emacs/linux/logs/transcript/index.html:309"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-86a8ee4c1c35eaf0", "name": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/emacs/linux/logs/transcrip", "shortDescription": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/emacs/linux/logs/transcript/index.html:375"}, "fullDescription": {"text": "Found a known-risky pattern (domparser_html_parse). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f59e9cadb5168e5a", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/emacs/linux/logs/tr", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/emacs/linux/logs/transcript/page-001.html:697"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0dea1a4a842bd7ad", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/dbeaver/linux/logs/", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/dbeaver/linux/logs/transcript/index.html:319"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f2361fb5ee71762b", "name": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/dbeaver/linux/logs/transcr", "shortDescription": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/dbeaver/linux/logs/transcript/index.html:385"}, "fullDescription": {"text": "Found a known-risky pattern (domparser_html_parse). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0841d374d2e1ed76", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/dbeaver/linux/logs/", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/dbeaver/linux/logs/transcript/page-001.html:2101"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4fc188a47203c27a", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/godot-engine/linux/", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/godot-engine/linux/logs/transcript/index.html:300"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ff60088b703da87e", "name": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/godot-engine/linux/logs/tr", "shortDescription": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/godot-engine/linux/logs/transcript/index.html:366"}, "fullDescription": {"text": "Found a known-risky pattern (domparser_html_parse). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5ef5b42b72296ded", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/godot-engine/linux/", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/godot-engine/linux/logs/transcript/page-001.html:1072"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-20c32a46797caf14", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/elasticsearch/linux", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/elasticsearch/linux/logs/transcript/index.html:315"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-041cbd213f3dd457", "name": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/elasticsearch/linux/logs/t", "shortDescription": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/elasticsearch/linux/logs/transcript/index.html:381"}, "fullDescription": {"text": "Found a known-risky pattern (domparser_html_parse). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-758f5c972aaa16ca", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/elasticsearch/linux", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/elasticsearch/linux/logs/transcript/page-001.html:2035"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-69ab55d307b00c9d", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/intellij-idea/linux", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/intellij-idea/linux/logs/transcript/index.html:335"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0316041d84c72098", "name": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/intellij-idea/linux/logs/t", "shortDescription": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/intellij-idea/linux/logs/transcript/index.html:401"}, "fullDescription": {"text": "Found a known-risky pattern (domparser_html_parse). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8e526f258894c25c", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/intellij-idea/linux", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/intellij-idea/linux/logs/transcript/page-001.html:2498"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ffd92899b6029572", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/chef/linux/logs/tra", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/chef/linux/logs/transcript/index.html:319"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e97506cac0d85488", "name": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/chef/linux/logs/transcript", "shortDescription": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/chef/linux/logs/transcript/index.html:385"}, "fullDescription": {"text": "Found a known-risky pattern (domparser_html_parse). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-737be9bad3500d99", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/chef/linux/logs/tra", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/chef/linux/logs/transcript/page-001.html:1609"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c107670c31f33915", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/raneto/linux/logs/t", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/raneto/linux/logs/transcript/index.html:332"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0195ead2ffc56e0f", "name": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/raneto/linux/logs/transcri", "shortDescription": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/raneto/linux/logs/transcript/index.html:398"}, "fullDescription": {"text": "Found a known-risky pattern (domparser_html_parse). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9d4ffd1d8892bc0e", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/raneto/linux/logs/t", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/raneto/linux/logs/transcript/page-001.html:1950"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-60820b50ae2abe11", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/sqlite/linux/logs/t", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/sqlite/linux/logs/transcript/index.html:324"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0d9e1b30f9f776e0", "name": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/sqlite/linux/logs/transcri", "shortDescription": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/sqlite/linux/logs/transcript/index.html:390"}, "fullDescription": {"text": "Found a known-risky pattern (domparser_html_parse). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3b0fb8172fc7ea2d", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/sqlite/linux/logs/t", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/sqlite/linux/logs/transcript/page-001.html:1435"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-eae47f1e74e99c0c", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/github-actions/linu", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/github-actions/linux/logs/transcript/index.html:332"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9fbb2b3b7d746a27", "name": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/github-actions/linux/logs/", "shortDescription": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/github-actions/linux/logs/transcript/index.html:398"}, "fullDescription": {"text": "Found a known-risky pattern (domparser_html_parse). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f696db7db7fa3b25", "name": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/github-actions/linu", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/github-actions/linux/logs/transcript/page-001.html:1416"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c0a036fc5e33b7e4", "name": "Insecure pattern 'subprocess_shell_true' in libs/python/cua-cli/cua_cli/auth/browser.py:95", "shortDescription": {"text": "Insecure pattern 'subprocess_shell_true' in libs/python/cua-cli/cua_cli/auth/browser.py:95"}, "fullDescription": {"text": "Found a known-risky pattern (subprocess_shell_true). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f2fa4da1b17e03ed", "name": "Insecure pattern 'node_child_process' in libs/python/cua-sandbox/cua_sandbox/runtime/_bw_init.js:20", "shortDescription": {"text": "Insecure pattern 'node_child_process' in libs/python/cua-sandbox/cua_sandbox/runtime/_bw_init.js:20"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a31b4028f375d332", "name": "Insecure pattern 'subprocess_shell_true' in libs/python/cua-auto/cua_auto/window.py:187", "shortDescription": {"text": "Insecure pattern 'subprocess_shell_true' in libs/python/cua-auto/cua_auto/window.py:187"}, "fullDescription": {"text": "Found a known-risky pattern (subprocess_shell_true). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9a9e5d32856e39b6", "name": "Insecure pattern 'subprocess_shell_true' in libs/python/cua-auto/cua_auto/shell.py:38", "shortDescription": {"text": "Insecure pattern 'subprocess_shell_true' in libs/python/cua-auto/cua_auto/shell.py:38"}, "fullDescription": {"text": "Found a known-risky pattern (subprocess_shell_true). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6ba3436f70c3f5b7", "name": "Possible secret in .github/workflows/cd-swift-cua-driver.yml", "shortDescription": {"text": "Possible secret in .github/workflows/cd-swift-cua-driver.yml"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-76f1bda3fe2c8594", "name": "Possible secret in .github/workflows/cd-swift-lume.yml", "shortDescription": {"text": "Possible secret in .github/workflows/cd-swift-lume.yml"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-a42ac57523b50d6b", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fc2e4ca7d5e933e9", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/github-script@v7 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-37256797d4a79cb0", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-73b7ed975b3d1e53", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-33a2498b600ca2ad", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c94fbd68c5976008", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/setup-node@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-684e16fc71374e78", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b3b20013dba3748f", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-373db48671ab0f3e", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-054f68ccf2ac565f", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-834274c534bccf90", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/setup-python@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ccf383199750f7b2", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e6595c785434e38e", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/setup-python@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c89d5ebfbb0231a3", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/upload-artifact@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d9d7a56d872045f6", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e569de407dd451f7", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8a017062abd77e4f", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-984d23acbe98cbc5", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e69711486dd5b0a4", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v3 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c7514ca92e6df234", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-732fa889e549a619", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-063a47f8ac0dc739", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2da2960774a62aba", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1e4d0c643b84ea07", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v3 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-513e2630b87283f5", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-79690ceaf542de7f", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1cb2066b52a03d3b", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-deddfa43b3584a26", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e418a2d69fc5131d", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/create-github-app-token@v1 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b722330fc5eee7c3", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9159caac854e5e03", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-779c500f07b65023", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/setup-python@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-85606ad8a03ff0db", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6fcf5e9bf8c87c1d", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-edc8be4548b7d09f", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-dd9debeb69ad754b", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-13e085ab62ca4e6d", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fbf6c8e7ff8e6c8a", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d66a8ca9b280b721", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7e42f7f257b9aa1c", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/setup-node@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-793f3b6c0793639f", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4f64a2fa79b6d54a", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/setup-python@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-26582fc4a9289214", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-afdf443a3485a8cc", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d43ee6848a061d86", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-44c24b7afc7a6a4a", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/download-artifact@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-009f47c2229018a3", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-063f28aa56dd38f8", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/setup-python@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2894f3060fe2f74a", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4d184fe377812054", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1a62894214708773", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3458107a1cf9010d", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7ce4cbc61b59cdbf", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6cb328ad310a26a3", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/setup-python@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ae446606d3decfb8", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-43c3e255582de081", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9527e609a238c364", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-85eb4e2ead48d790", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1fa773e572861170", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-dec588d6b2e87be3", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/upload-artifact@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-46e22360cfe8b5ea", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b8a2774e3f184a7e", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-529d9f2b5dd1170d", "name": "package.json defines install-time lifecycle scripts", "shortDescription": {"text": "package.json defines install-time lifecycle scripts"}, "fullDescription": {"text": "preinstall/install/postinstall/prepare scripts execute during dependency installation. Review them carefully for network calls, obfuscation, shell execution, or credential access."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3cbbbac6cb75e549", "name": "Very large file: docs/scripts/modal_app.py (2031 lines)", "shortDescription": {"text": "Very large file: docs/scripts/modal_app.py (2031 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c3ac4259576e1ad1", "name": "Very large file: libs/cua-bench/cua_bench/cli/commands/run.py (2208 lines)", "shortDescription": {"text": "Very large file: libs/cua-bench/cua_bench/cli/commands/run.py (2208 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b8243b13d29ddd2f", "name": "Very large file: libs/cua-bench/tasks/winarena_adapter/evaluators/getters/chrome.py (1368 lines)", "shortDescription": {"text": "Very large file: libs/cua-bench/tasks/winarena_adapter/evaluators/getters/chrome.py (1368 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fc7a4b5b04079bd0", "name": "Very large file: libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py (2036 lines)", "shortDescription": {"text": "Very large file: libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py (2036 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ef5e25db2ae54823", "name": "Very large file: libs/typescript/playground/src/components/TrajectoryViewer/index.tsx (1833 lines)", "shortDescription": {"text": "Very large file: libs/typescript/playground/src/components/TrajectoryViewer/index.tsx (1833 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ef8da5d4247fb4e0", "name": "Very large file: libs/cua-driver/rust/tests/integration/test_api_parity.py (1182 lines)", "shortDescription": {"text": "Very large file: libs/cua-driver/rust/tests/integration/test_api_parity.py (1182 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a2f8de213eb12ac3", "name": "Very large file: libs/cua-driver/rust/crates/platform-linux/src/input/mod.rs (1733 lines)", "shortDescription": {"text": "Very large file: libs/cua-driver/rust/crates/platform-linux/src/input/mod.rs (1733 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-692146fd1b5f74a1", "name": "Very large file: libs/cua-driver/rust/crates/platform-linux/src/tools/impl_.rs (3135 lines)", "shortDescription": {"text": "Very large file: libs/cua-driver/rust/crates/platform-linux/src/tools/impl_.rs (3135 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cb7bec612afb0b95", "name": "Very large file: libs/cua-driver/rust/crates/cua-driver/tests/mcp_protocol_test.rs (3294 lines)", "shortDescription": {"text": "Very large file: libs/cua-driver/rust/crates/cua-driver/tests/mcp_protocol_test.rs (3294 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-832bb09f063e6348", "name": "Very large file: libs/cua-driver/rust/crates/cua-driver/src/cli.rs (2770 lines)", "shortDescription": {"text": "Very large file: libs/cua-driver/rust/crates/cua-driver/src/cli.rs (2770 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cd2f17229a9d9a48", "name": "Very large file: libs/cua-driver/rust/crates/cua-driver/src/serve.rs (1591 lines)", "shortDescription": {"text": "Very large file: libs/cua-driver/rust/crates/cua-driver/src/serve.rs (1591 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f4f3805f992cf06b", "name": "Very large file: libs/cua-driver/rust/crates/platform-windows/src/tools/impl_.rs (5722 lines)", "shortDescription": {"text": "Very large file: libs/cua-driver/rust/crates/platform-windows/src/tools/impl_.rs (5722 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f035187ac87d6429", "name": "Very large file: libs/python/agent/cua_agent/loops/anthropic.py (1959 lines)", "shortDescription": {"text": "Very large file: libs/python/agent/cua_agent/loops/anthropic.py (1959 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b9e0f9425190e0c6", "name": "Very large file: libs/python/computer-server/computer_server/main.py (1433 lines)", "shortDescription": {"text": "Very large file: libs/python/computer-server/computer_server/main.py (1433 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d7302b56ce294bf0", "name": "Very large file: libs/python/computer-server/computer_server/diorama/draw.py (1326 lines)", "shortDescription": {"text": "Very large file: libs/python/computer-server/computer_server/diorama/draw.py (1326 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-da98d4a373fd735c", "name": "Very large file: libs/python/computer-server/computer_server/handlers/macos.py (1450 lines)", "shortDescription": {"text": "Very large file: libs/python/computer-server/computer_server/handlers/macos.py (1450 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-91b396e601b4b981", "name": "Very large file: libs/python/computer-server/computer_server/handlers/_grpc_emulator/emulator_controller_pb2_grpc.py (25", "shortDescription": {"text": "Very large file: libs/python/computer-server/computer_server/handlers/_grpc_emulator/emulator_controller_pb2_grpc.py (2568 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-621730695444c70c", "name": "Very large file: libs/python/computer/computer/computer.py (1884 lines)", "shortDescription": {"text": "Very large file: libs/python/computer/computer/computer.py (1884 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e5ef9afebfd643b3", "name": "Very large file: libs/python/computer/computer/interface/generic.py (1263 lines)", "shortDescription": {"text": "Very large file: libs/python/computer/computer/interface/generic.py (1263 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4231b6877e06806d", "name": "Very large file: libs/python/computer/computer/ui/gradio/app.py (1743 lines)", "shortDescription": {"text": "Very large file: libs/python/computer/computer/ui/gradio/app.py (1743 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4a5df0e232763eac", "name": "Very large file: libs/python/cua-cli/cua_cli/commands/do.py (1843 lines)", "shortDescription": {"text": "Very large file: libs/python/cua-cli/cua_cli/commands/do.py (1843 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-420205062a2edafc", "name": "Very large file: libs/python/cua-sandbox/cua_sandbox/transport/_grpc_emulator/emulator_controller_pb2_grpc.py (2568 line", "shortDescription": {"text": "Very large file: libs/python/cua-sandbox/cua_sandbox/transport/_grpc_emulator/emulator_controller_pb2_grpc.py (2568 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ea3b5e389d8c9c0f", "name": "Low test-to-source ratio", "shortDescription": {"text": "Low test-to-source ratio"}, "fullDescription": {"text": "199 tests / 922 src (ratio 0.22)."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6038b2fdfb9135f6", "name": "58 TODO/FIXME markers", "shortDescription": {"text": "58 TODO/FIXME markers"}, "fullDescription": {"text": "High count of TODO/FIXME/HACK markers \u2014 track them as issues so they're not forgotten."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ad2c9360f6164b07", "name": "Node manifest has dependencies but no lockfile: demo/multi-cursor/electron/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: demo/multi-cursor/electron/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-94c16e8a4a6a1c49", "name": "Node manifest has dependencies but no lockfile: libs/typescript/playground/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: libs/typescript/playground/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9a5be19f87b55e94", "name": "Node manifest has dependencies but no lockfile: libs/typescript/agent/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: libs/typescript/agent/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fbbc494c16fcb771", "name": "Node manifest has dependencies but no lockfile: libs/typescript/core/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: libs/typescript/core/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-26cc1cd1d585e528", "name": "Node manifest has dependencies but no lockfile: libs/cua-driver/test-harness/apps/cross-platform/electron/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: libs/cua-driver/test-harness/apps/cross-platform/electron/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3ab5d313dda8e5f9", "name": "Debug logging residue appears in source files", "shortDescription": {"text": "Debug logging residue appears in source files"}, "fullDescription": {"text": "Found 2545 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-72b2a6250083a784", "name": "Placeholder or mock-heavy implementation detected", "shortDescription": {"text": "Placeholder or mock-heavy implementation detected"}, "fullDescription": {"text": "Found 119 placeholder/mock markers across 53 source files. This often means the repo looks complete while core flows still use generated scaffolding or fake data."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9d79c4077342a7d0", "name": "Runtime service client appears to use placeholder configuration", "shortDescription": {"text": "Runtime service client appears to use placeholder configuration"}, "fullDescription": {"text": "A runtime source file appears to wire Supabase/Firebase/AI/payment-style clients to placeholder URLs, keys, or fallback values. In the Fable corpus this often means the UI/API shape is present while the backend service is not actually configured."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2d0c7b7ab8f8aacf", "name": "Critical user flow still appears backed by mock or placeholder data", "shortDescription": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "fullDescription": {"text": "A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-749d4bc1bd66df5f", "name": "Agent instructions exist but release-hardening basics are missing", "shortDescription": {"text": "Agent instructions exist but release-hardening basics are missing"}, "fullDescription": {"text": "AI-coder instruction files were found, but the repo is missing lockfile. Treat this as a contract gap: the agent is guided, but the generated output is not yet guarded by the controls that make it repeatable."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ea8f3013f588db25", "name": "Shallow git history limits provenance confidence", "shortDescription": {"text": "Shallow git history limits provenance confidence"}, "fullDescription": {"text": "The repository is a shallow clone. Origin/evolution analysis cannot distinguish fresh generation, imported legacy code, or long-lived human code with high confidence."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8424db9c75e04ba4", "name": "Very short observed git history", "shortDescription": {"text": "Very short observed git history"}, "fullDescription": {"text": "The repo has multiple source files but two or fewer visible commits. This is not a failure by itself, but it lowers confidence in evolution-based diagnosis."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c5be555eb09946cf", "name": "Agent authority lacks a verifier contract: libs/cuabot/src/prompts/.mcp.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: libs/cuabot/src/prompts/.mcp.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d044d2108b6cc80a", "name": "Agent authority lacks a verifier contract: libs/cua-bench/datasets/cua-bench-basic/video-player/CLAUDE.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: libs/cua-bench/datasets/cua-bench-basic/video-player/CLAUDE.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8b39f48db06edbd2", "name": "Agent authority lacks a verifier contract: libs/cua-bench/datasets/cua-bench-basic/click-icon/CLAUDE.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: libs/cua-bench/datasets/cua-bench-basic/click-icon/CLAUDE.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-dbc4ce6cb6705699", "name": "Agent authority lacks a verifier contract: libs/cua-bench/datasets/cua-bench-basic/drag-drop/CLAUDE.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: libs/cua-bench/datasets/cua-bench-basic/drag-drop/CLAUDE.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ce939ef724ac896d", "name": "Agent authority lacks a verifier contract: libs/cua-bench/datasets/cua-bench-basic/select-dropdown/CLAUDE.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: libs/cua-bench/datasets/cua-bench-basic/select-dropdown/CLAUDE.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-15cbfb8b94ef154b", "name": "Agent authority lacks a verifier contract: libs/cua-bench/datasets/cua-bench-basic/spreadsheet-cell/CLAUDE.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: libs/cua-bench/datasets/cua-bench-basic/spreadsheet-cell/CLAUDE.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-116481c06df0d916", "name": "Agent authority lacks a verifier contract: libs/cua-bench/datasets/cua-bench-basic/toggle-switch/CLAUDE.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: libs/cua-bench/datasets/cua-bench-basic/toggle-switch/CLAUDE.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5bd66f21c461601e", "name": "Agent authority lacks a verifier contract: libs/cua-bench/datasets/cua-bench-basic/fill-form/CLAUDE.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: libs/cua-bench/datasets/cua-bench-basic/fill-form/CLAUDE.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8bfe2236af545b7a", "name": "Agent authority lacks a verifier contract: libs/cua-bench/datasets/cua-bench-basic/typing-input/CLAUDE.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: libs/cua-bench/datasets/cua-bench-basic/typing-input/CLAUDE.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-037af03156da13c9", "name": "Agent authority lacks a verifier contract: libs/cua-bench/datasets/cua-bench-basic/right-click-menu/CLAUDE.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: libs/cua-bench/datasets/cua-bench-basic/right-click-menu/CLAUDE.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4aa465740de1ff17", "name": "Agent authority lacks a verifier contract: libs/cua-bench/datasets/cua-bench-basic/click-button/CLAUDE.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: libs/cua-bench/datasets/cua-bench-basic/click-button/CLAUDE.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d74ed7f246388638", "name": "Agent authority lacks a verifier contract: libs/cua-bench/datasets/cua-bench-basic/color-picker/CLAUDE.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: libs/cua-bench/datasets/cua-bench-basic/color-picker/CLAUDE.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4c25394d09710dc8", "name": "Agent authority lacks a verifier contract: libs/cua-bench/datasets/cua-bench-basic/drag-slider/CLAUDE.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: libs/cua-bench/datasets/cua-bench-basic/drag-slider/CLAUDE.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-62883dec1b9ee3e9", "name": "Agent authority lacks a verifier contract: libs/cua-bench/datasets/cua-bench-basic/date-picker/CLAUDE.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: libs/cua-bench/datasets/cua-bench-basic/date-picker/CLAUDE.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9f9685937a8275a3", "name": "Agent authority lacks a verifier contract: libs/cua-bench/example_tasks/minesweeper_game_env/CLAUDE.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: libs/cua-bench/example_tasks/minesweeper_game_env/CLAUDE.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a4aa648366979a53", "name": "Commented-code block (6 lines) in docs/scripts/modal_app.py:451", "shortDescription": {"text": "Commented-code block (6 lines) in docs/scripts/modal_app.py:451"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-be100fe9c35d316e", "name": "Network/subprocess call without timeout or try/except \u2014 docs/scripts/modal_app.py:1040", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 docs/scripts/modal_app.py:1040"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3652aecd8c795b96", "name": "`fetch()` without try/.catch or AbortSignal \u2014 docs/src/components/doc-actions-menu.tsx:23", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 docs/src/components/doc-actions-menu.tsx:23"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-68540e5f48aeac75", "name": "`fetch()` without try/.catch or AbortSignal \u2014 docs/src/lib/posthog-query.ts:41", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 docs/src/lib/posthog-query.ts:41"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-782878ee4438696c", "name": "`fetch()` without try/.catch or AbortSignal \u2014 docs/src/lib/slack-reporter.ts:72", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 docs/src/lib/slack-reporter.ts:72"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4db825c05e135987", "name": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/docs-generators/lume.ts:700", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/docs-generators/lume.ts:700"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b68d1bf059c45097", "name": "Commented-code block (5 lines) in scripts/docs-generators/cua-driver.ts:762", "shortDescription": {"text": "Commented-code block (5 lines) in scripts/docs-generators/cua-driver.ts:762"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-188cc081bc7fb81a", "name": "`fetch()` without try/.catch or AbortSignal \u2014 libs/cuabot/src/client.ts:68", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 libs/cuabot/src/client.ts:68"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0973a8549f699e2e", "name": "Commented-code block (7 lines) in libs/cuabot/src/mcp/overlay-cursor.py:286", "shortDescription": {"text": "Commented-code block (7 lines) in libs/cuabot/src/mcp/overlay-cursor.py:286"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-84e156a5b1b739ea", "name": "Legacy-named symbol `batch_v1` in libs/cua-bench/cua_bench/batch/gcp.py:12", "shortDescription": {"text": "Legacy-named symbol `batch_v1` in libs/cua-bench/cua_bench/batch/gcp.py:12"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8f5e10d43ec3c81c", "name": "Commented-code block (5 lines) in libs/cua-bench/cua_bench/batch/gcp.py:488", "shortDescription": {"text": "Commented-code block (5 lines) in libs/cua-bench/cua_bench/batch/gcp.py:488"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ccb09508edf988a5", "name": "Network/subprocess call without timeout or try/except \u2014 libs/cua-bench/cua_bench/batch/gcp.py:122", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/cua-bench/cua_bench/batch/gcp.py:122"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cf626f939d4a5f87", "name": "Legacy-named symbol `create_overlay_copy` in libs/cua-bench/cua_bench/runner/docker_utils.py:13", "shortDescription": {"text": "Legacy-named symbol `create_overlay_copy` in libs/cua-bench/cua_bench/runner/docker_utils.py:13"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-84bb9dcadabb3c20", "name": "Network/subprocess call without timeout or try/except \u2014 libs/cua-bench/cua_bench/runner/docker_utils.py:57", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/cua-bench/cua_bench/runner/docker_utils.py:57"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fdd425974848e2f8", "name": "Legacy-named symbol `create_overlay_copy` in libs/cua-bench/cua_bench/runner/task_runner.py:19", "shortDescription": {"text": "Legacy-named symbol `create_overlay_copy` in libs/cua-bench/cua_bench/runner/task_runner.py:19"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d77f380ce5c85b46", "name": "Commented-code block (5 lines) in libs/cua-bench/cua_bench/runner/task_runner.py:919", "shortDescription": {"text": "Commented-code block (5 lines) in libs/cua-bench/cua_bench/runner/task_runner.py:919"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-9c8500f4802b663e", "name": "Network/subprocess call without timeout or try/except \u2014 libs/cua-bench/cua_bench/apps/kicad.py:317", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/cua-bench/cua_bench/apps/kicad.py:317"}, "fullDescription": {"text": "`subprocess.Popen(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-648f274ad7b83e71", "name": "Blocking `time.sleep(...)` inside `async def _run` \u2014 libs/cua-bench/cua_bench/scripts/benchmark_workers.py:241", "shortDescription": {"text": "Blocking `time.sleep(...)` inside `async def _run` \u2014 libs/cua-bench/cua_bench/scripts/benchmark_workers.py:241"}, "fullDescription": {"text": "Sync I/O inside an async function blocks the event loop. While `time.sleep(...)` is running, *all* other coroutines on this loop are paused \u2014 silent throughput collapse under concurrency. Use the async equivalent (`httpx.AsyncClient`, `asyncio.sleep`, `aiofiles`) or wrap with `await asyncio.to_thread(...)`."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b7de418d3e59ede2", "name": "Commented-code block (7 lines) in libs/cua-bench/cua_bench/scripts/dump_task_registry_mosaic.py:17", "shortDescription": {"text": "Commented-code block (7 lines) in libs/cua-bench/cua_bench/scripts/dump_task_registry_mosaic.py:17"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2c0ca1aa0706641e", "name": "Commented-code block (7 lines) in libs/cua-bench/cua_bench/scripts/dump_task_registry.py:17", "shortDescription": {"text": "Commented-code block (7 lines) in libs/cua-bench/cua_bench/scripts/dump_task_registry.py:17"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8526d1579a784137", "name": "Blocking `urllib.request.urlopen(...)` inside `async def _execute_native_interactive` \u2014 libs/cua-bench/cua_bench/cli/com", "shortDescription": {"text": "Blocking `urllib.request.urlopen(...)` inside `async def _execute_native_interactive` \u2014 libs/cua-bench/cua_bench/cli/commands/interact.py:356"}, "fullDescription": {"text": "Sync I/O inside an async function blocks the event loop. While `urllib.request.urlopen(...)` is running, *all* other coroutines on this loop are paused \u2014 silent throughput collapse under concurrency. Use the async equivalent (`httpx.AsyncClient`, `asyncio.sleep`, `aiofiles`) or wrap with `await asyncio.to_thread(...)`."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "high", "confidence": 1.0}}, {"id": "scanner-5a2613bfbea78809", "name": "Legacy-named symbol `create_overlay_copy` in libs/cua-bench/cua_bench/cli/commands/image.py:26", "shortDescription": {"text": "Legacy-named symbol `create_overlay_copy` in libs/cua-bench/cua_bench/cli/commands/image.py:26"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8d24e43fe90f5eb1", "name": "Network/subprocess call without timeout or try/except \u2014 libs/cua-bench/cua_bench/cli/commands/image.py:237", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/cua-bench/cua_bench/cli/commands/image.py:237"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-60566934709b4643", "name": "Network/subprocess call without timeout or try/except \u2014 libs/cua-bench/cua_bench/cli/commands/agent.py:149", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/cua-bench/cua_bench/cli/commands/agent.py:149"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3d76ce7a32aa672a", "name": "Network/subprocess call without timeout or try/except \u2014 libs/cua-bench/cua_bench/cli/commands/run.py:1354", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/cua-bench/cua_bench/cli/commands/run.py:1354"}, "fullDescription": {"text": "`subprocess.Popen(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6d22fd84bc01a4b7", "name": "Stub function `log_message` (body is just `pass`/`return`) \u2014 libs/cua-bench/cua_bench/cli/commands/trace.py:334", "shortDescription": {"text": "Stub function `log_message` (body is just `pass`/`return`) \u2014 libs/cua-bench/cua_bench/cli/commands/trace.py:334"}, "fullDescription": {"text": "Likely an AI scaffold that was never filled in. Remove or implement."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2bd50ab66f6338ac", "name": "Network/subprocess call without timeout or try/except \u2014 libs/cua-bench/cua_bench/cli/commands/task.py:527", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/cua-bench/cua_bench/cli/commands/task.py:527"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b93e9227e8ae6b5d", "name": "Network/subprocess call without timeout or try/except \u2014 libs/cua-bench/cua_bench/sessions/providers/local_environment.py", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/cua-bench/cua_bench/sessions/providers/local_environment.py:388"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1f2c9a44fe2789d4", "name": "Commented-code block (5 lines) in libs/cua-bench/cua_bench/computers/remote.py:288", "shortDescription": {"text": "Commented-code block (5 lines) in libs/cua-bench/cua_bench/computers/remote.py:288"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-4fe14c6feb5cf62a", "name": "Commented-code block (6 lines) in libs/cua-bench/cua_bench/agents/opencua_agent.py:171", "shortDescription": {"text": "Commented-code block (6 lines) in libs/cua-bench/cua_bench/agents/opencua_agent.py:171"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1d47f342365c8c60", "name": "Commented-code block (5 lines) in libs/cua-bench/cua_bench/trainer/off_policy/tinker/grpo.py:189", "shortDescription": {"text": "Commented-code block (5 lines) in libs/cua-bench/cua_bench/trainer/off_policy/tinker/grpo.py:189"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1d6b78d38d6f528b", "name": "Network/subprocess call without timeout or try/except \u2014 libs/cua-bench/cua_bench/trainer/off_policy/tinker/rollout.py:71", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/cua-bench/cua_bench/trainer/off_policy/tinker/rollout.py:71"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b43af4015f057c36", "name": "Blocking `urllib.request.urlopen(...)` inside `async def test_status` \u2014 libs/cua-bench/scripts/diagnose_daytona.py:45", "shortDescription": {"text": "Blocking `urllib.request.urlopen(...)` inside `async def test_status` \u2014 libs/cua-bench/scripts/diagnose_daytona.py:45"}, "fullDescription": {"text": "Sync I/O inside an async function blocks the event loop. While `urllib.request.urlopen(...)` is running, *all* other coroutines on this loop are paused \u2014 silent throughput collapse under concurrency. Use the async equivalent (`httpx.AsyncClient`, `asyncio.sleep`, `aiofiles`) or wrap with `await asyncio.to_thread(...)`."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "high", "confidence": 1.0}}, {"id": "scanner-292c05a1816fe4bb", "name": "Blocking `urllib.request.urlopen(...)` inside `async def main` \u2014 libs/cua-bench/scripts/diagnose_daytona.py:99", "shortDescription": {"text": "Blocking `urllib.request.urlopen(...)` inside `async def main` \u2014 libs/cua-bench/scripts/diagnose_daytona.py:99"}, "fullDescription": {"text": "Sync I/O inside an async function blocks the event loop. While `urllib.request.urlopen(...)` is running, *all* other coroutines on this loop are paused \u2014 silent throughput collapse under concurrency. Use the async equivalent (`httpx.AsyncClient`, `asyncio.sleep`, `aiofiles`) or wrap with `await asyncio.to_thread(...)`."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "high", "confidence": 1.0}}, {"id": "scanner-df3bb0662c8982eb", "name": "Blocking `time.sleep(...)` inside `async def main` \u2014 libs/cua-bench/scripts/diagnose_daytona.py:105", "shortDescription": {"text": "Blocking `time.sleep(...)` inside `async def main` \u2014 libs/cua-bench/scripts/diagnose_daytona.py:105"}, "fullDescription": {"text": "Sync I/O inside an async function blocks the event loop. While `time.sleep(...)` is running, *all* other coroutines on this loop are paused \u2014 silent throughput collapse under concurrency. Use the async equivalent (`httpx.AsyncClient`, `asyncio.sleep`, `aiofiles`) or wrap with `await asyncio.to_thread(...)`."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "high", "confidence": 1.0}}, {"id": "scanner-56a80efc4ce2696f", "name": "Network/subprocess call without timeout or try/except \u2014 libs/cua-bench/scripts/run_calibration.py:41", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/cua-bench/scripts/run_calibration.py:41"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c64af08efa10f110", "name": "Commented-code block (6 lines) in libs/cua-bench/scripts/calibrate_tasks.py:38", "shortDescription": {"text": "Commented-code block (6 lines) in libs/cua-bench/scripts/calibrate_tasks.py:38"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-08eb06fbd8441b3b", "name": "Network/subprocess call without timeout or try/except \u2014 libs/cua-bench/scripts/calibrate_tasks.py:100", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/cua-bench/scripts/calibrate_tasks.py:100"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3d7e0c8ab05306e3", "name": "Network/subprocess call without timeout or try/except \u2014 libs/cua-bench/tasks/winarena_adapter/cli.py:65", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/cua-bench/tasks/winarena_adapter/cli.py:65"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0db46196e6878960", "name": "Blocking `requests.get(...)` inside `async def _download_setup` \u2014 libs/cua-bench/tasks/winarena_adapter/setup_controller", "shortDescription": {"text": "Blocking `requests.get(...)` inside `async def _download_setup` \u2014 libs/cua-bench/tasks/winarena_adapter/setup_controller.py:88"}, "fullDescription": {"text": "Sync I/O inside an async function blocks the event loop. While `requests.get(...)` is running, *all* other coroutines on this loop are paused \u2014 silent throughput collapse under concurrency. Use the async equivalent (`httpx.AsyncClient`, `asyncio.sleep`, `aiofiles`) or wrap with `await asyncio.to_thread(...)`."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "high", "confidence": 1.0}}, {"id": "scanner-88fb058546741ba8", "name": "Network/subprocess call without timeout or try/except \u2014 libs/cua-bench/tasks/winarena_adapter/evaluators/getters/vlc.py:", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/cua-bench/tasks/winarena_adapter/evaluators/getters/vlc.py:27"}, "fullDescription": {"text": "`requests.get(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-069dbfeb8ebaf242", "name": "Network/subprocess call without timeout or try/except \u2014 libs/cua-bench/tasks/winarena_adapter/evaluators/getters/general", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/cua-bench/tasks/winarena_adapter/evaluators/getters/general.py:19"}, "fullDescription": {"text": "`requests.post(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f703f7daa1420bca", "name": "Commented-code block (11 lines) in libs/cua-bench/tasks/winarena_adapter/evaluators/getters/edge.py:177", "shortDescription": {"text": "Commented-code block (11 lines) in libs/cua-bench/tasks/winarena_adapter/evaluators/getters/edge.py:177"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-5454a41c13cf587f", "name": "Commented-code block (7 lines) in libs/cua-bench/tasks/winarena_adapter/evaluators/getters/impress.py:123", "shortDescription": {"text": "Commented-code block (7 lines) in libs/cua-bench/tasks/winarena_adapter/evaluators/getters/impress.py:123"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8174ebea8746a9ce", "name": "Network/subprocess call without timeout or try/except \u2014 libs/cua-bench/tasks/winarena_adapter/evaluators/getters/file.py", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/cua-bench/tasks/winarena_adapter/evaluators/getters/file.py:63"}, "fullDescription": {"text": "`requests.get(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-157d73b2c6f1e3f4", "name": "Commented-code block (5 lines) in libs/cua-bench/tasks/winarena_adapter/evaluators/getters/settings.py:18", "shortDescription": {"text": "Commented-code block (5 lines) in libs/cua-bench/tasks/winarena_adapter/evaluators/getters/settings.py:18"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e6ee38e1b2bfb28c", "name": "Stub function `compare_audios_by_dl_model` (body is just `pass`/`return`) \u2014 libs/cua-bench/tasks/winarena_adapter/evalua", "shortDescription": {"text": "Stub function `compare_audios_by_dl_model` (body is just `pass`/`return`) \u2014 libs/cua-bench/tasks/winarena_adapter/evaluators/metrics/vlc.py:161"}, "fullDescription": {"text": "Likely an AI scaffold that was never filled in. Remove or implement."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2c0a21e80d955e5a", "name": "Stub function `infeasible` (body is just `pass`/`return`) \u2014 libs/cua-bench/tasks/winarena_adapter/evaluators/metrics/__i", "shortDescription": {"text": "Stub function `infeasible` (body is just `pass`/`return`) \u2014 libs/cua-bench/tasks/winarena_adapter/evaluators/metrics/__init__.py:127"}, "fullDescription": {"text": "Likely an AI scaffold that was never filled in. Remove or implement."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-405cd16fa6cec5f4", "name": "Legacy-named symbol `data_copy` in libs/cua-bench/tasks/winarena_adapter/evaluators/metrics/vscode.py:65", "shortDescription": {"text": "Legacy-named symbol `data_copy` in libs/cua-bench/tasks/winarena_adapter/evaluators/metrics/vscode.py:65"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-05180784b3951192", "name": "Stub function `check_python_file_by_gold_file` (body is just `pass`/`return`) \u2014 libs/cua-bench/tasks/winarena_adapter/ev", "shortDescription": {"text": "Stub function `check_python_file_by_gold_file` (body is just `pass`/`return`) \u2014 libs/cua-bench/tasks/winarena_adapter/evaluators/metrics/vscode.py:236"}, "fullDescription": {"text": "Likely an AI scaffold that was never filled in. Remove or implement."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-993f25adc6fe5bfb", "name": "Commented-code block (12 lines) in libs/cua-bench/tasks/winarena_adapter/evaluators/metrics/table.py:205", "shortDescription": {"text": "Commented-code block (12 lines) in libs/cua-bench/tasks/winarena_adapter/evaluators/metrics/table.py:205"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-31bae7fd39424e38", "name": "Commented-code block (9 lines) in libs/cua-bench/tasks/winarena_adapter/evaluators/metrics/utils.py:96", "shortDescription": {"text": "Commented-code block (9 lines) in libs/cua-bench/tasks/winarena_adapter/evaluators/metrics/utils.py:96"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-5b0ea994da6f1c9f", "name": "Commented-code block (6 lines) in libs/cua-bench/tasks/winarena_adapter/infra/scripts/run_azure_batch.py:189", "shortDescription": {"text": "Commented-code block (6 lines) in libs/cua-bench/tasks/winarena_adapter/infra/scripts/run_azure_batch.py:189"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-533cfe818f571577", "name": "Commented-code block (5 lines) in libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/computer.py:183", "shortDescription": {"text": "Commented-code block (5 lines) in libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/computer.py:183"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-979457f61844b6ea", "name": "Commented-code block (7 lines) in libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:249", "shortDescription": {"text": "Commented-code block (7 lines) in libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:249"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e8d212e444a36c26", "name": "Network/subprocess call without timeout or try/except \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:320"}, "fullDescription": {"text": "`subprocess.Popen(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b94c198a334ed822", "name": "Commented-code block (7 lines) in libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/screen_utils.py:8", "shortDescription": {"text": "Commented-code block (7 lines) in libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/screen_utils.py:8"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-6ad079249795d4f5", "name": "Commented-code block (5 lines) in libs/typescript/playground/src/index.ts:1", "shortDescription": {"text": "Commented-code block (5 lines) in libs/typescript/playground/src/index.ts:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-bb5b7276dba0266f", "name": "`fetch()` without try/.catch or AbortSignal \u2014 libs/typescript/playground/src/adapters/cloud.ts:109", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 libs/typescript/playground/src/adapters/cloud.ts:109"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9e75dbedae23a57b", "name": "Commented-code block (12 lines) in libs/typescript/playground/src/constants/sandboxPresets.ts:30", "shortDescription": {"text": "Commented-code block (12 lines) in libs/typescript/playground/src/constants/sandboxPresets.ts:30"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b68c62181711811a", "name": "Commented-code block (8 lines) in libs/typescript/playground/src/components/TrajectoryViewer/index.tsx:318", "shortDescription": {"text": "Commented-code block (8 lines) in libs/typescript/playground/src/components/TrajectoryViewer/index.tsx:318"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-780305e92c71da2e", "name": "`fetch()` without try/.catch or AbortSignal \u2014 libs/typescript/playground/src/components/TrajectoryViewer/index.tsx:918", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 libs/typescript/playground/src/components/TrajectoryViewer/index.tsx:918"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4d7b80bc538c1525", "name": "`fetch()` without try/.catch or AbortSignal \u2014 libs/typescript/playground/src/components/modals/ReplayTrajectoryModal.tsx", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 libs/typescript/playground/src/components/modals/ReplayTrajectoryModal.tsx:95"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-30307bf31007eb42", "name": "`fetch()` without try/.catch or AbortSignal \u2014 libs/typescript/agent/src/client.ts:148", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 libs/typescript/agent/src/client.ts:148"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2298bc1f6b822439", "name": "`fetch()` without try/.catch or AbortSignal \u2014 libs/typescript/cua-cli/src/auth.ts:25", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 libs/typescript/cua-cli/src/auth.ts:25"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9dd60692c48e3cff", "name": "`fetch()` without try/.catch or AbortSignal \u2014 libs/typescript/cua-cli/src/http.ts:21", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 libs/typescript/cua-cli/src/http.ts:21"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b2b1463b8ad01831", "name": "`fetch()` without try/.catch or AbortSignal \u2014 libs/typescript/cua-cli/src/commands/image.ts:245", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 libs/typescript/cua-cli/src/commands/image.ts:245"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-034500174d3a4a8e", "name": "`fetch()` without try/.catch or AbortSignal \u2014 libs/typescript/cua-cli/src/commands/skills.ts:358", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 libs/typescript/cua-cli/src/commands/skills.ts:358"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a7b72d9914bc2405", "name": "Commented-code block (5 lines) in libs/cua-driver/rust/tests/integration/test_cursor_visibility.py:231", "shortDescription": {"text": "Commented-code block (5 lines) in libs/cua-driver/rust/tests/integration/test_cursor_visibility.py:231"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2f9b6594d989e3eb", "name": "Commented-code block (5 lines) in libs/cua-driver/rust/tests/integration/test_focus_steal_parity.py:153", "shortDescription": {"text": "Commented-code block (5 lines) in libs/cua-driver/rust/tests/integration/test_focus_steal_parity.py:153"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a5b8f4320e447c28", "name": "Commented-code block (6 lines) in libs/cua-driver/rust/tests/integration/test_api_parity.py:83", "shortDescription": {"text": "Commented-code block (6 lines) in libs/cua-driver/rust/tests/integration/test_api_parity.py:83"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-4bf0d62ff4cf1da2", "name": "Network/subprocess call without timeout or try/except \u2014 libs/cua-driver/python/build_wheel.py:236", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/cua-driver/python/build_wheel.py:236"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a24c5d2dc64636aa", "name": "Commented-code block (6 lines) in libs/cua-driver/swift/Tests/integration/test_click_pixel_ax.py:108", "shortDescription": {"text": "Commented-code block (6 lines) in libs/cua-driver/swift/Tests/integration/test_click_pixel_ax.py:108"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-02643a5ec21b3502", "name": "Network/subprocess call without timeout or try/except \u2014 libs/cua-driver/swift/Tests/integration/driver_client.py:158", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/cua-driver/swift/Tests/integration/driver_client.py:158"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a5cf9aca79b1aada", "name": "Commented-code block (6 lines) in libs/cua-driver/swift/Tests/integration/test_hermes_chrome_form_fill.py:306", "shortDescription": {"text": "Commented-code block (6 lines) in libs/cua-driver/swift/Tests/integration/test_hermes_chrome_form_fill.py:306"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-431049ab418a7621", "name": "Commented-code block (13 lines) in libs/python/agent/example.py:101", "shortDescription": {"text": "Commented-code block (13 lines) in libs/python/agent/example.py:101"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-91dc56762c617645", "name": "Legacy-named symbol `_extract_click_coords_old` in libs/python/agent/tests/test_predict_click_zero_coords.py:10", "shortDescription": {"text": "Legacy-named symbol `_extract_click_coords_old` in libs/python/agent/tests/test_predict_click_zero_coords.py:10"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4a94392ca90533a8", "name": "Commented-code block (5 lines) in libs/python/agent/cua_agent/agent.py:745", "shortDescription": {"text": "Commented-code block (5 lines) in libs/python/agent/cua_agent/agent.py:745"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-bbcab8db6a2ebed6", "name": "Legacy-named symbol `messages_copy` in libs/python/agent/cua_agent/adapters/azure_ml_adapter.py:88", "shortDescription": {"text": "Legacy-named symbol `messages_copy` in libs/python/agent/cua_agent/adapters/azure_ml_adapter.py:88"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a377a06ebb2f6269", "name": "Commented-code block (6 lines) in libs/python/agent/cua_agent/ui/gradio/app.py:94", "shortDescription": {"text": "Commented-code block (6 lines) in libs/python/agent/cua_agent/ui/gradio/app.py:94"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-4517eda0a233c04a", "name": "Commented-code block (26 lines) in libs/python/agent/cua_agent/callbacks/operator_validator.py:107", "shortDescription": {"text": "Commented-code block (26 lines) in libs/python/agent/cua_agent/callbacks/operator_validator.py:107"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1a1cfab5887874d0", "name": "Commented-code block (6 lines) in libs/python/agent/cua_agent/loops/anthropic.py:283", "shortDescription": {"text": "Commented-code block (6 lines) in libs/python/agent/cua_agent/loops/anthropic.py:283"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-86f068d2a89f6ac9", "name": "Commented-code block (5 lines) in libs/python/agent/cua_agent/loops/generic_vlm.py:89", "shortDescription": {"text": "Commented-code block (5 lines) in libs/python/agent/cua_agent/loops/generic_vlm.py:89"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-59a7aa795f752e8d", "name": "Commented-code block (47 lines) in libs/python/agent/cua_agent/loops/gemini.py:508", "shortDescription": {"text": "Commented-code block (47 lines) in libs/python/agent/cua_agent/loops/gemini.py:508"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-cffbfdaf6cc99333", "name": "Commented-code block (5 lines) in libs/python/agent/cua_agent/loops/qwen35.py:96", "shortDescription": {"text": "Commented-code block (5 lines) in libs/python/agent/cua_agent/loops/qwen35.py:96"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-72798a4f42c019e4", "name": "Commented-code block (12 lines) in libs/python/agent/cua_agent/loops/uitars.py:545", "shortDescription": {"text": "Commented-code block (12 lines) in libs/python/agent/cua_agent/loops/uitars.py:545"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-0caf40571f07024f", "name": "Legacy-named symbol `msg_copy` in libs/python/agent/cua_agent/loops/moondream3.py:93", "shortDescription": {"text": "Legacy-named symbol `msg_copy` in libs/python/agent/cua_agent/loops/moondream3.py:93"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4e75b7ea8b3ece42", "name": "Commented-code block (7 lines) in libs/python/computer-server/computer_server/main.py:1225", "shortDescription": {"text": "Commented-code block (7 lines) in libs/python/computer-server/computer_server/main.py:1225"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-fb63ff0d885e60d8", "name": "Commented-code block (5 lines) in libs/python/computer-server/computer_server/utils/wallpaper.py:13", "shortDescription": {"text": "Commented-code block (5 lines) in libs/python/computer-server/computer_server/utils/wallpaper.py:13"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f04aa1eb621ec9a4", "name": "Network/subprocess call without timeout or try/except \u2014 libs/python/computer-server/computer_server/utils/wallpaper.py:1", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/python/computer-server/computer_server/utils/wallpaper.py:143"}, "fullDescription": {"text": "`subprocess.Popen(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-286d6b2c6ac6f799", "name": "Network/subprocess call without timeout or try/except \u2014 libs/python/computer-server/computer_server/utils/helpers.py:42", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/python/computer-server/computer_server/utils/helpers.py:42"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-dfdc6b438c300aa9", "name": "Commented-code block (5 lines) in libs/python/computer-server/computer_server/diorama/draw.py:695", "shortDescription": {"text": "Commented-code block (5 lines) in libs/python/computer-server/computer_server/diorama/draw.py:695"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-5f454aa9a497f203", "name": "Blocking `time.sleep(...)` inside `async def main` \u2014 libs/python/computer-server/computer_server/diorama/diorama.py:540", "shortDescription": {"text": "Blocking `time.sleep(...)` inside `async def main` \u2014 libs/python/computer-server/computer_server/diorama/diorama.py:540"}, "fullDescription": {"text": "Sync I/O inside an async function blocks the event loop. While `time.sleep(...)` is running, *all* other coroutines on this loop are paused \u2014 silent throughput collapse under concurrency. Use the async equivalent (`httpx.AsyncClient`, `asyncio.sleep`, `aiofiles`) or wrap with `await asyncio.to_thread(...)`."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ab6dfc901e2e9998", "name": "Commented-code block (5 lines) in libs/python/computer-server/computer_server/handlers/android.py:593", "shortDescription": {"text": "Commented-code block (5 lines) in libs/python/computer-server/computer_server/handlers/android.py:593"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-bb56441ea22e8e12", "name": "Network/subprocess call without timeout or try/except \u2014 libs/python/computer-server/computer_server/handlers/generic.py:", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/python/computer-server/computer_server/handlers/generic.py:98"}, "fullDescription": {"text": "`subprocess.Popen(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e72a541f92a2b910", "name": "Legacy-named symbol `files_to_copy` in libs/python/mcp-server/build-extension.py:39", "shortDescription": {"text": "Legacy-named symbol `files_to_copy` in libs/python/mcp-server/build-extension.py:39"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cbe4f9b4611a2e9b", "name": "Network/subprocess call without timeout or try/except \u2014 libs/python/mcp-server/build-extension.py:129", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/python/mcp-server/build-extension.py:129"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b445d71c87d432de", "name": "Network/subprocess call without timeout or try/except \u2014 libs/python/computer/computer/computer.py:1516", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/python/computer/computer/computer.py:1516"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ee042a6a83db3603", "name": "Commented-code block (6 lines) in libs/python/computer/computer/interface/generic.py:1245", "shortDescription": {"text": "Commented-code block (6 lines) in libs/python/computer/computer/interface/generic.py:1245"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1f26765815e360e3", "name": "Legacy-named symbol `handle_copy` in libs/python/computer/computer/ui/gradio/app.py:755", "shortDescription": {"text": "Legacy-named symbol `handle_copy` in libs/python/computer/computer/ui/gradio/app.py:755"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-01e1d83e7253274f", "name": "Commented-code block (5 lines) in libs/python/computer/computer/providers/lume_api.py:59", "shortDescription": {"text": "Commented-code block (5 lines) in libs/python/computer/computer/providers/lume_api.py:59"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-4ac3301ceb714f71", "name": "Network/subprocess call without timeout or try/except \u2014 libs/python/computer/computer/providers/docker/provider.py:290", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/python/computer/computer/providers/docker/provider.py:290"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-be79960c3986c293", "name": "Network/subprocess call without timeout or try/except \u2014 libs/python/computer/computer/providers/winsandbox/provider.py:4", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/python/computer/computer/providers/winsandbox/provider.py:494"}, "fullDescription": {"text": "`subprocess.Popen(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7240b581ad18bb6d", "name": "Network/subprocess call without timeout or try/except \u2014 libs/python/computer/computer/providers/lumier/provider.py:170", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/python/computer/computer/providers/lumier/provider.py:170"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-244333fc2c1c0d0f", "name": "Network/subprocess call without timeout or try/except \u2014 libs/python/cua-sandbox-apps/cua_sandbox_apps/cli.py:638", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/python/cua-sandbox-apps/cua_sandbox_apps/cli.py:638"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-69a3042c5021291c", "name": "Legacy-named symbol `list_objects_v2` in libs/python/cua-sandbox-apps/cua_sandbox_apps/discovery/batch_enrich.py:512", "shortDescription": {"text": "Legacy-named symbol `list_objects_v2` in libs/python/cua-sandbox-apps/cua_sandbox_apps/discovery/batch_enrich.py:512"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e4c626c05ad705da", "name": "Network/subprocess call without timeout or try/except \u2014 libs/python/cua-cli/cua_cli/auth/browser.py:97", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/python/cua-cli/cua_cli/auth/browser.py:97"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f3d56ff20acb34f7", "name": "Network/subprocess call without timeout or try/except \u2014 libs/python/cua-cli/cua_cli/commands/skills.py:665", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/python/cua-cli/cua_cli/commands/skills.py:665"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ee3bf59378b72c9d", "name": "Network/subprocess call without timeout or try/except \u2014 libs/python/cua-cli/cua_cli/commands/trajectory.py:191", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/python/cua-cli/cua_cli/commands/trajectory.py:191"}, "fullDescription": {"text": "`subprocess.Popen(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b5f5ad6b69441198", "name": "Stub function `log_message` (body is just `pass`/`return`) \u2014 libs/python/cua-cli/cua_cli/commands/trajectory.py:161", "shortDescription": {"text": "Stub function `log_message` (body is just `pass`/`return`) \u2014 libs/python/cua-cli/cua_cli/commands/trajectory.py:161"}, "fullDescription": {"text": "Likely an AI scaffold that was never filled in. Remove or implement."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-95a64056136a10b6", "name": "Legacy-named symbol `create_overlay_copy` in libs/python/cua-cli/cua_cli/commands/local_image.py:32", "shortDescription": {"text": "Legacy-named symbol `create_overlay_copy` in libs/python/cua-cli/cua_cli/commands/local_image.py:32"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-38ee23004bab92d9", "name": "Network/subprocess call without timeout or try/except \u2014 libs/python/cua-cli/cua_cli/commands/local_image.py:81", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/python/cua-cli/cua_cli/commands/local_image.py:81"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fd19ed23efa60b05", "name": "Legacy-named symbol `create_overlay_copy` in libs/python/cua-cli/cua_cli/utils/docker.py:60", "shortDescription": {"text": "Legacy-named symbol `create_overlay_copy` in libs/python/cua-cli/cua_cli/utils/docker.py:60"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-79b9c3a914cedee0", "name": "Network/subprocess call without timeout or try/except \u2014 libs/python/cua-cli/cua_cli/utils/docker.py:99", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/python/cua-cli/cua_cli/utils/docker.py:99"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-54ace7817ee9e04d", "name": "Legacy-named symbol `test_vm_legacy` in libs/python/cua-sandbox/tests/test_oci.py:124", "shortDescription": {"text": "Legacy-named symbol `test_vm_legacy` in libs/python/cua-sandbox/tests/test_oci.py:124"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-82731b7f0c102a4e", "name": "Network/subprocess call without timeout or try/except \u2014 libs/python/cua-sandbox/cua_sandbox/sandbox.py:807", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/python/cua-sandbox/cua_sandbox/sandbox.py:807"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-85ab863de9ccd3ad", "name": "Stub function `record_event` (body is just `pass`/`return`) \u2014 libs/python/cua-sandbox/cua_sandbox/sandbox.py:55", "shortDescription": {"text": "Stub function `record_event` (body is just `pass`/`return`) \u2014 libs/python/cua-sandbox/cua_sandbox/sandbox.py:55"}, "fullDescription": {"text": "Likely an AI scaffold that was never filled in. Remove or implement."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0a65d18df345ea20", "name": "Network/subprocess call without timeout or try/except \u2014 libs/python/cua-sandbox/cua_sandbox/image.py:61", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/python/cua-sandbox/cua_sandbox/image.py:61"}, "fullDescription": {"text": "`urllib.request.urlretrieve(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cd839172eedf854a", "name": "Network/subprocess call without timeout or try/except \u2014 libs/python/cua-sandbox/cua_sandbox/registry/qemu_builder.py:102", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/python/cua-sandbox/cua_sandbox/registry/qemu_builder.py:102"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d40e4b211d78e8db", "name": "Network/subprocess call without timeout or try/except \u2014 libs/python/cua-sandbox/cua_sandbox/transport/adb.py:42", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/python/cua-sandbox/cua_sandbox/transport/adb.py:42"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fdfb90a6d570cc6a", "name": "Stub function `disconnect` (body is just `pass`/`return`) \u2014 libs/python/cua-sandbox/cua_sandbox/transport/adb.py:44", "shortDescription": {"text": "Stub function `disconnect` (body is just `pass`/`return`) \u2014 libs/python/cua-sandbox/cua_sandbox/transport/adb.py:44"}, "fullDescription": {"text": "Likely an AI scaffold that was never filled in. Remove or implement."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5bc3c51dd29f79ee", "name": "Commented-code block (7 lines) in libs/python/cua-sandbox/cua_sandbox/transport/http.py:20", "shortDescription": {"text": "Commented-code block (7 lines) in libs/python/cua-sandbox/cua_sandbox/transport/http.py:20"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b39bea83e9c86b38", "name": "Commented-code block (5 lines) in libs/python/cua-sandbox/cua_sandbox/transport/cloud.py:149", "shortDescription": {"text": "Commented-code block (5 lines) in libs/python/cua-sandbox/cua_sandbox/transport/cloud.py:149"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-bfc38e144194e8cd", "name": "Network/subprocess call without timeout or try/except \u2014 libs/python/cua-sandbox/cua_sandbox/transport/cloud.py:519", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/python/cua-sandbox/cua_sandbox/transport/cloud.py:519"}, "fullDescription": {"text": "`urllib.request.urlretrieve(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b70f44868a8981ec", "name": "Blocking `urllib.request.urlretrieve(...)` inside `async def _install_apk` \u2014 libs/python/cua-sandbox/cua_sandbox/transpo", "shortDescription": {"text": "Blocking `urllib.request.urlretrieve(...)` inside `async def _install_apk` \u2014 libs/python/cua-sandbox/cua_sandbox/transport/cloud.py:519"}, "fullDescription": {"text": "Sync I/O inside an async function blocks the event loop. While `urllib.request.urlretrieve(...)` is running, *all* other coroutines on this loop are paused \u2014 silent throughput collapse under concurrency. Use the async equivalent (`httpx.AsyncClient`, `asyncio.sleep`, `aiofiles`) or wrap with `await asyncio.to_thread(...)`."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "high", "confidence": 1.0}}, {"id": "scanner-5e57cafbd1c4de06", "name": "Network/subprocess call without timeout or try/except \u2014 libs/python/cua-sandbox/cua_sandbox/runtime/hyperv.py:52", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/python/cua-sandbox/cua_sandbox/runtime/hyperv.py:52"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-034a4735075f2c1b", "name": "Network/subprocess call without timeout or try/except \u2014 libs/python/cua-sandbox/cua_sandbox/runtime/docker.py:155", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/python/cua-sandbox/cua_sandbox/runtime/docker.py:155"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7f95435afd941145", "name": "Network/subprocess call without timeout or try/except \u2014 libs/python/cua-sandbox/cua_sandbox/runtime/android_emulator.py:", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/python/cua-sandbox/cua_sandbox/runtime/android_emulator.py:116"}, "fullDescription": {"text": "`urllib.request.urlretrieve(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d6f835eb9f2db310", "name": "Blocking `urllib.request.urlretrieve(...)` inside `async def _resolve_apk` \u2014 libs/python/cua-sandbox/cua_sandbox/runtime", "shortDescription": {"text": "Blocking `urllib.request.urlretrieve(...)` inside `async def _resolve_apk` \u2014 libs/python/cua-sandbox/cua_sandbox/runtime/android_emulator.py:782"}, "fullDescription": {"text": "Sync I/O inside an async function blocks the event loop. While `urllib.request.urlretrieve(...)` is running, *all* other coroutines on this loop are paused \u2014 silent throughput collapse under concurrency. Use the async equivalent (`httpx.AsyncClient`, `asyncio.sleep`, `aiofiles`) or wrap with `await asyncio.to_thread(...)`."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d67e79b3f73e7e2e", "name": "Network/subprocess call without timeout or try/except \u2014 libs/python/cua-sandbox/cua_sandbox/runtime/qemu.py:137", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/python/cua-sandbox/cua_sandbox/runtime/qemu.py:137"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d1d3375440dde40b", "name": "Blocking `time.sleep(...)` inside `async def start` \u2014 libs/python/cua-sandbox/cua_sandbox/runtime/qemu.py:374", "shortDescription": {"text": "Blocking `time.sleep(...)` inside `async def start` \u2014 libs/python/cua-sandbox/cua_sandbox/runtime/qemu.py:374"}, "fullDescription": {"text": "Sync I/O inside an async function blocks the event loop. While `time.sleep(...)` is running, *all* other coroutines on this loop are paused \u2014 silent throughput collapse under concurrency. Use the async equivalent (`httpx.AsyncClient`, `asyncio.sleep`, `aiofiles`) or wrap with `await asyncio.to_thread(...)`."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "high", "confidence": 1.0}}, {"id": "scanner-515b2ab93c54d486", "name": "Blocking `time.sleep(...)` inside `async def resume` \u2014 libs/python/cua-sandbox/cua_sandbox/runtime/qemu.py:693", "shortDescription": {"text": "Blocking `time.sleep(...)` inside `async def resume` \u2014 libs/python/cua-sandbox/cua_sandbox/runtime/qemu.py:693"}, "fullDescription": {"text": "Sync I/O inside an async function blocks the event loop. While `time.sleep(...)` is running, *all* other coroutines on this loop are paused \u2014 silent throughput collapse under concurrency. Use the async equivalent (`httpx.AsyncClient`, `asyncio.sleep`, `aiofiles`) or wrap with `await asyncio.to_thread(...)`."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "high", "confidence": 1.0}}, {"id": "scanner-23e6716b8d064dd1", "name": "Network/subprocess call without timeout or try/except \u2014 libs/python/cua-sandbox/cua_sandbox/builder/overlay.py:54", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/python/cua-sandbox/cua_sandbox/builder/overlay.py:54"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-86113fa4a4c875b6", "name": "Legacy-named symbol `_exec_copy` in libs/python/cua-sandbox/cua_sandbox/builder/executor.py:241", "shortDescription": {"text": "Legacy-named symbol `_exec_copy` in libs/python/cua-sandbox/cua_sandbox/builder/executor.py:241"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-63aa8988b8a66593", "name": "Network/subprocess call without timeout or try/except \u2014 libs/python/cua-auto/cua_auto/window.py:167", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/python/cua-auto/cua_auto/window.py:167"}, "fullDescription": {"text": "`subprocess.Popen(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-41d295c8db24a85a", "name": "97 env vars used in code but missing from .env.example", "shortDescription": {"text": "97 env vars used in code but missing from .env.example"}, "fullDescription": {"text": "Drift between code and config docs. The first few: `ANDROID_GRPC_PORT`, `ANTHROPIC_API_KEY`, `APPDATA`, `AWS_REGION`, `AWS_SESSION_TOKEN`, `AZURE_API_KEY`, `AZURE_ENDPOINT`, `BATCH_TASK_COUNT` + 89 more. Add them (with a placeholder/comment) to .env.example so onboarding doesn't break."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2c04133e54348533", "name": "Near-duplicate function bodies in 2 places", "shortDescription": {"text": "Near-duplicate function bodies in 2 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\ndocs/scripts/generate_sqlite.py:load_crawled_data, docs/scripts/generate_db.py:load_crawled_data\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-46969939caf8120b", "name": "Near-duplicate function bodies in 9 places", "shortDescription": {"text": "Near-duplicate function bodies in 9 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nlibs/cua-bench/datasets/cua-bench-basic/click-icon/main.py:start, libs/cua-bench/datasets/cua-bench-basic/drag-drop/main.py:start, libs/cua-bench/datasets/cua-bench-basic/select-dropdown/main.py:start, libs/cua-bench/datasets/cua-bench-basic/spreadsheet-cell/main.py:start\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9a56cdccce3cabbf", "name": "Near-duplicate function bodies in 50 places", "shortDescription": {"text": "Near-duplicate function bodies in 50 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nlibs/cua-bench/datasets/cua-bench-kicad/5dbc9e02/main.py:start, libs/cua-bench/datasets/cua-bench-kicad/a6dd38a9/main.py:start, libs/cua-bench/datasets/cua-bench-kicad/4c913e30/main.py:start, libs/cua-bench/datasets/cua-bench-kicad/ff6dfdde/main.py:start\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-281911c4b3b188bb", "name": "FastAPI POST `reset` without auth dependency \u2014 libs/cua-bench/cua_bench/workers/worker_server.py:306", "shortDescription": {"text": "FastAPI POST `reset` without auth dependency \u2014 libs/cua-bench/cua_bench/workers/worker_server.py:306"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a9ef5cadd3c1e0f5", "name": "FastAPI POST `step` without auth dependency \u2014 libs/cua-bench/cua_bench/workers/worker_server.py:363", "shortDescription": {"text": "FastAPI POST `step` without auth dependency \u2014 libs/cua-bench/cua_bench/workers/worker_server.py:363"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-7a0ce0c891d1389d", "name": "FastAPI POST `shutdown` without auth dependency \u2014 libs/cua-bench/cua_bench/workers/worker_server.py:433", "shortDescription": {"text": "FastAPI POST `shutdown` without auth dependency \u2014 libs/cua-bench/cua_bench/workers/worker_server.py:433"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-df04c3ea2ba3c8ed", "name": "Flask mutation route `update_computer` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/", "shortDescription": {"text": "Flask mutation route `update_computer` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:138"}, "fullDescription": {"text": "Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-795e8f30e8f0c187", "name": "Flask mutation route `execute_command_windows` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/v", "shortDescription": {"text": "Flask mutation route `execute_command_windows` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:180"}, "fullDescription": {"text": "Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-0bbba7de6f16e21a", "name": "Flask mutation route `execute_command` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/", "shortDescription": {"text": "Flask mutation route `execute_command` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:211"}, "fullDescription": {"text": "Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a581749bd4feb286", "name": "Flask mutation route `execute_command` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/", "shortDescription": {"text": "Flask mutation route `execute_command` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:212"}, "fullDescription": {"text": "Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-77decf2f120bc0f0", "name": "Flask mutation route `shutdown_endpoint` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setu", "shortDescription": {"text": "Flask mutation route `shutdown_endpoint` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:276"}, "fullDescription": {"text": "Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-add7fd393fd71ce6", "name": "Flask mutation route `launch_app` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/serve", "shortDescription": {"text": "Flask mutation route `launch_app` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:290"}, "fullDescription": {"text": "Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-bb087e58ad90705d", "name": "Flask mutation route `get_screen_size` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/", "shortDescription": {"text": "Flask mutation route `get_screen_size` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:1005"}, "fullDescription": {"text": "Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c3fbaff2812e57ed", "name": "Flask mutation route `get_window_size` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/", "shortDescription": {"text": "Flask mutation route `get_window_size` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:1018"}, "fullDescription": {"text": "Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-5fb3f9cc96cb2544", "name": "Flask mutation route `get_desktop_path` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup", "shortDescription": {"text": "Flask mutation route `get_desktop_path` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:1045"}, "fullDescription": {"text": "Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3a4fbc208edda4b1", "name": "Flask mutation route `get_documents_path` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/set", "shortDescription": {"text": "Flask mutation route `get_documents_path` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:1064"}, "fullDescription": {"text": "Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b41a308b0845a06d", "name": "Flask mutation route `create_folder` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/se", "shortDescription": {"text": "Flask mutation route `create_folder` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:1083"}, "fullDescription": {"text": "Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c674c7d7f296522f", "name": "Flask mutation route `create_file` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/serv", "shortDescription": {"text": "Flask mutation route `create_file` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:1100"}, "fullDescription": {"text": "Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d1c9e2ce2d9b3f57", "name": "Flask mutation route `recycle_file` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/ser", "shortDescription": {"text": "Flask mutation route `recycle_file` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:1134"}, "fullDescription": {"text": "Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-9d1dd1df0a68ca78", "name": "Flask mutation route `get_folder_exists` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setu", "shortDescription": {"text": "Flask mutation route `get_folder_exists` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:1146"}, "fullDescription": {"text": "Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-94c0b5854a13bf82", "name": "Flask mutation route `get_file_exists` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/", "shortDescription": {"text": "Flask mutation route `get_file_exists` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:1172"}, "fullDescription": {"text": "Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-36a1e9559c0e1bf1", "name": "Flask mutation route `get_file_explorer_is_details_view` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapt", "shortDescription": {"text": "Flask mutation route `get_file_explorer_is_details_view` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:1192"}, "fullDescription": {"text": "Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-dbb9c10953a94dde", "name": "Flask mutation route `get_wallpaper` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/se", "shortDescription": {"text": "Flask mutation route `get_wallpaper` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:1228"}, "fullDescription": {"text": "Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f6df20cfd37d1f5f", "name": "Flask mutation route `get_directory_tree` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/set", "shortDescription": {"text": "Flask mutation route `get_directory_tree` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:1286"}, "fullDescription": {"text": "Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-2781332087b6f4d9", "name": "Flask mutation route `get_file` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/", "shortDescription": {"text": "Flask mutation route `get_file` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:1325"}, "fullDescription": {"text": "Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f76328b7139af2ea", "name": "Flask mutation route `upload_file` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/serv", "shortDescription": {"text": "Flask mutation route `upload_file` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:1341"}, "fullDescription": {"text": "Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-1456903305f3efc5", "name": "Flask mutation route `change_wallpaper` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup", "shortDescription": {"text": "Flask mutation route `change_wallpaper` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:1363"}, "fullDescription": {"text": "Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-bdbaaec95b748dd9", "name": "Flask mutation route `download_file` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/se", "shortDescription": {"text": "Flask mutation route `download_file` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:1411"}, "fullDescription": {"text": "Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-0edbe86d2b254e7c", "name": "Flask mutation route `open_file` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server", "shortDescription": {"text": "Flask mutation route `open_file` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:1448"}, "fullDescription": {"text": "Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-5945a07c22cb0064", "name": "Flask mutation route `activate_window` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/", "shortDescription": {"text": "Flask mutation route `activate_window` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:1476"}, "fullDescription": {"text": "Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-210454922428c244", "name": "Flask mutation route `clear_task_files` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup", "shortDescription": {"text": "Flask mutation route `clear_task_files` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:1573"}, "fullDescription": {"text": "Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a7e9bd8a0ac7afe4", "name": "Flask mutation route `close_all_windows` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setu", "shortDescription": {"text": "Flask mutation route `close_all_windows` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:1623"}, "fullDescription": {"text": "Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-2216e5ba5f9b7d2d", "name": "Flask mutation route `close_window` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/ser", "shortDescription": {"text": "Flask mutation route `close_window` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:1659"}, "fullDescription": {"text": "Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-5e0240bc95b7baf9", "name": "Flask mutation route `start_recording` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/", "shortDescription": {"text": "Flask mutation route `start_recording` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:1706"}, "fullDescription": {"text": "Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6fe92f70f11560db", "name": "Flask mutation route `end_recording` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/se", "shortDescription": {"text": "Flask mutation route `end_recording` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:1746"}, "fullDescription": {"text": "Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f0481364a304a97f", "name": "Flask mutation route `save_state` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/serve", "shortDescription": {"text": "Flask mutation route `save_state` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:1778"}, "fullDescription": {"text": "Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6e733731515f9d65", "name": "Flask mutation route `revert_to_snapshot` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/set", "shortDescription": {"text": "Flask mutation route `revert_to_snapshot` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:1813"}, "fullDescription": {"text": "Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-bfa88b6b50fdb39f", "name": "Flask mutation route `get_are_files_sorted_by_modified_time` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_a", "shortDescription": {"text": "Flask mutation route `get_are_files_sorted_by_modified_time` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:1841"}, "fullDescription": {"text": "Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-28a77f9e4539a1a6", "name": "Flask mutation route `is_directory_read_only_for_user` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter", "shortDescription": {"text": "Flask mutation route `is_directory_read_only_for_user` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:1901"}, "fullDescription": {"text": "Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-5dc80c871f2635e6", "name": "Flask mutation route `are_all_images_tagged` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/", "shortDescription": {"text": "Flask mutation route `are_all_images_tagged` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:1925"}, "fullDescription": {"text": "Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-2c9ac941522412f0", "name": "Flask mutation route `get_library_folders` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/se", "shortDescription": {"text": "Flask mutation route `get_library_folders` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:1959"}, "fullDescription": {"text": "Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d6812425f9c7f6d9", "name": "Flask mutation route `get_check_if_timer_started` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infr", "shortDescription": {"text": "Flask mutation route `get_check_if_timer_started` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:1976"}, "fullDescription": {"text": "Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3a80ee2fe8b2c227", "name": "Flask mutation route `get_check_if_world_clock_exists` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter", "shortDescription": {"text": "Flask mutation route `get_check_if_world_clock_exists` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:2007"}, "fullDescription": {"text": "Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-de540388b21899f3", "name": "FastAPI POST `queue_completion` without auth dependency \u2014 libs/python/agent/cua_agent/human_tool/server.py:190", "shortDescription": {"text": "FastAPI POST `queue_completion` without auth dependency \u2014 libs/python/agent/cua_agent/human_tool/server.py:190"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a12c89f117a4eb6d", "name": "FastAPI POST `complete_call` without auth dependency \u2014 libs/python/agent/cua_agent/human_tool/server.py:213", "shortDescription": {"text": "FastAPI POST `complete_call` without auth dependency \u2014 libs/python/agent/cua_agent/human_tool/server.py:213"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-de98cf26a206039a", "name": "FastAPI POST `fail_call` without auth dependency \u2014 libs/python/agent/cua_agent/human_tool/server.py:225", "shortDescription": {"text": "FastAPI POST `fail_call` without auth dependency \u2014 libs/python/agent/cua_agent/human_tool/server.py:225"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a708f7e33b60b486", "name": "FastAPI POST `cmd_endpoint` without auth dependency \u2014 libs/python/computer-server/computer_server/main.py:680", "shortDescription": {"text": "FastAPI POST `cmd_endpoint` without auth dependency \u2014 libs/python/computer-server/computer_server/main.py:680"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-2601f3a970eafde1", "name": "FastAPI POST `pty_create` without auth dependency \u2014 libs/python/computer-server/computer_server/main.py:813", "shortDescription": {"text": "FastAPI POST `pty_create` without auth dependency \u2014 libs/python/computer-server/computer_server/main.py:813"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b948fd2f69acf9d0", "name": "FastAPI DELETE `pty_kill` without auth dependency \u2014 libs/python/computer-server/computer_server/main.py:866", "shortDescription": {"text": "FastAPI DELETE `pty_kill` without auth dependency \u2014 libs/python/computer-server/computer_server/main.py:866"}, "fullDescription": {"text": "`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-cc28bf9e09d75fe8", "name": "FastAPI POST `pty_stdin` without auth dependency \u2014 libs/python/computer-server/computer_server/main.py:881", "shortDescription": {"text": "FastAPI POST `pty_stdin` without auth dependency \u2014 libs/python/computer-server/computer_server/main.py:881"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c577d355a3073a1b", "name": "FastAPI POST `pty_resize` without auth dependency \u2014 libs/python/computer-server/computer_server/main.py:899", "shortDescription": {"text": "FastAPI POST `pty_resize` without auth dependency \u2014 libs/python/computer-server/computer_server/main.py:899"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d4c865adf8a510ec", "name": "FastAPI POST `agent_response_endpoint` without auth dependency \u2014 libs/python/computer-server/computer_server/main.py:103", "shortDescription": {"text": "FastAPI POST `agent_response_endpoint` without auth dependency \u2014 libs/python/computer-server/computer_server/main.py:1035"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-cef0ba23a8eafb1d", "name": "FastAPI POST `playwright_exec_endpoint` without auth dependency \u2014 libs/python/computer-server/computer_server/main.py:13", "shortDescription": {"text": "FastAPI POST `playwright_exec_endpoint` without auth dependency \u2014 libs/python/computer-server/computer_server/main.py:1366"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-5f8e820d1bde35e3", "name": "Dangling fetch: POST http://localhost:${port}/stop (libs/cuabot/src/cuabotd.ts:1208)", "shortDescription": {"text": "Dangling fetch: POST http://localhost:${port}/stop (libs/cuabot/src/cuabotd.ts:1208)"}, "fullDescription": {"text": "`libs/cuabot/src/cuabotd.ts:1208` calls `POST http://localhost:${port}/stop` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/http:/localhost:/<p>/stop`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-19dc976b97cb9358", "name": "Dangling fetch: POST http://localhost:${port}/telemetry (libs/cuabot/src/telemetry.ts:291)", "shortDescription": {"text": "Dangling fetch: POST http://localhost:${port}/telemetry (libs/cuabot/src/telemetry.ts:291)"}, "fullDescription": {"text": "`libs/cuabot/src/telemetry.ts:291` calls `POST http://localhost:${port}/telemetry` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/http:/localhost:/<p>/telemetry`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e8927015be375b7d", "name": "Dangling fetch: GET http://localhost:${port}/status (libs/cuabot/src/client.ts:188)", "shortDescription": {"text": "Dangling fetch: GET http://localhost:${port}/status (libs/cuabot/src/client.ts:188)"}, "fullDescription": {"text": "`libs/cuabot/src/client.ts:188` calls `GET http://localhost:${port}/status` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/http:/localhost:/<p>/status`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e04517b1d394319b", "name": "Dangling fetch: GET http://localhost:${port}/status (libs/cuabot/src/client.ts:253)", "shortDescription": {"text": "Dangling fetch: GET http://localhost:${port}/status (libs/cuabot/src/client.ts:253)"}, "fullDescription": {"text": "`libs/cuabot/src/client.ts:253` calls `GET http://localhost:${port}/status` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/http:/localhost:/<p>/status`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-cf841f26c88b2e60", "name": "Dangling fetch: DELETE /v1/playground/chats/${chatId} (libs/typescript/playground/src/adapters/cloud.ts:86)", "shortDescription": {"text": "Dangling fetch: DELETE /v1/playground/chats/${chatId} (libs/typescript/playground/src/adapters/cloud.ts:86)"}, "fullDescription": {"text": "`libs/typescript/playground/src/adapters/cloud.ts:86` calls `DELETE /v1/playground/chats/${chatId}` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/playground/chats/<p>`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d478c40a12ed5780", "name": "Dangling fetch: PUT /v1/playground/chats/${chatId}/messages (libs/typescript/playground/src/adapters/cloud.ts:90)", "shortDescription": {"text": "Dangling fetch: PUT /v1/playground/chats/${chatId}/messages (libs/typescript/playground/src/adapters/cloud.ts:90)"}, "fullDescription": {"text": "`libs/typescript/playground/src/adapters/cloud.ts:90` calls `PUT /v1/playground/chats/${chatId}/messages` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/playground/chats/<p>/messages`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-87b431dbfc3d5335", "name": "Dangling fetch: PUT /v1/playground/settings/${key} (libs/typescript/playground/src/adapters/cloud.ts:109)", "shortDescription": {"text": "Dangling fetch: PUT /v1/playground/settings/${key} (libs/typescript/playground/src/adapters/cloud.ts:109)"}, "fullDescription": {"text": "`libs/typescript/playground/src/adapters/cloud.ts:109` calls `PUT /v1/playground/settings/${key}` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/playground/settings/<p>`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-cd0540401d2a7fb1", "name": "Dangling fetch: GET /v1/vms/${computerId}/health (libs/typescript/playground/src/adapters/cloud.ts:198)", "shortDescription": {"text": "Dangling fetch: GET /v1/vms/${computerId}/health (libs/typescript/playground/src/adapters/cloud.ts:198)"}, "fullDescription": {"text": "`libs/typescript/playground/src/adapters/cloud.ts:198` calls `GET /v1/vms/${computerId}/health` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/vms/<p>/health`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-83bf638d8e1d2631", "name": "Dangling fetch: GET /api/chat/${sessionId}/export (libs/typescript/playground/src/components/modals/ReplayTrajectoryModa", "shortDescription": {"text": "Dangling fetch: GET /api/chat/${sessionId}/export (libs/typescript/playground/src/components/modals/ReplayTrajectoryModal.tsx:95)"}, "fullDescription": {"text": "`libs/typescript/playground/src/components/modals/ReplayTrajectoryModal.tsx:95` calls `GET /api/chat/${sessionId}/export` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/chat/<p>/export`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-1d448c89a96c4306", "name": "Dangling fetch: POST /api/chat/${sessionId}/export (libs/typescript/playground/src/components/modals/ReplayTrajectoryMod", "shortDescription": {"text": "Dangling fetch: POST /api/chat/${sessionId}/export (libs/typescript/playground/src/components/modals/ReplayTrajectoryModal.tsx:142)"}, "fullDescription": {"text": "`libs/typescript/playground/src/components/modals/ReplayTrajectoryModal.tsx:142` calls `POST /api/chat/${sessionId}/export` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/chat/<p>/export`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b02b8663736cea57", "name": "Dangling fetch: GET /api/chat/${sessionId}/export (libs/typescript/playground/src/components/modals/ExportTrajectoryModa", "shortDescription": {"text": "Dangling fetch: GET /api/chat/${sessionId}/export (libs/typescript/playground/src/components/modals/ExportTrajectoryModal.tsx:45)"}, "fullDescription": {"text": "`libs/typescript/playground/src/components/modals/ExportTrajectoryModal.tsx:45` calls `GET /api/chat/${sessionId}/export` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/chat/<p>/export`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3f7b8ddccb7ce1ed", "name": "Dangling fetch: POST /api/chat/${sessionId}/export (libs/typescript/playground/src/components/modals/ExportTrajectoryMod", "shortDescription": {"text": "Dangling fetch: POST /api/chat/${sessionId}/export (libs/typescript/playground/src/components/modals/ExportTrajectoryModal.tsx:93)"}, "fullDescription": {"text": "`libs/typescript/playground/src/components/modals/ExportTrajectoryModal.tsx:93` calls `POST /api/chat/${sessionId}/export` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/chat/<p>/export`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-9830daf8c6fbe405", "name": "Dangling fetch: POST https://api.anthropic.com/v1/messages (libs/typescript/cua-cli/src/commands/skills.ts:358)", "shortDescription": {"text": "Dangling fetch: POST https://api.anthropic.com/v1/messages (libs/typescript/cua-cli/src/commands/skills.ts:358)"}, "fullDescription": {"text": "`libs/typescript/cua-cli/src/commands/skills.ts:358` calls `POST https://api.anthropic.com/v1/messages` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/https:/api.anthropic.com/v1/messages`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-48ef5160a83285af", "name": "Dangling fetch: POST https://api.openai.com/v1/chat/completions (libs/typescript/cua-cli/src/commands/skills.ts:472)", "shortDescription": {"text": "Dangling fetch: POST https://api.openai.com/v1/chat/completions (libs/typescript/cua-cli/src/commands/skills.ts:472)"}, "fullDescription": {"text": "`libs/typescript/cua-cli/src/commands/skills.ts:472` calls `POST https://api.openai.com/v1/chat/completions` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/https:/api.openai.com/v1/chat/completions`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a7a776760f85a3e7", "name": "Unused endpoint: POST /reset", "shortDescription": {"text": "Unused endpoint: POST /reset"}, "fullDescription": {"text": "`libs/cua-bench/cua_bench/workers/worker_server.py` declares `POST /reset` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2e5f7bf1997b085e", "name": "Unused endpoint: POST /step", "shortDescription": {"text": "Unused endpoint: POST /step"}, "fullDescription": {"text": "`libs/cua-bench/cua_bench/workers/worker_server.py` declares `POST /step` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4069bb9c1c1e4187", "name": "Unused endpoint: GET /screenshot", "shortDescription": {"text": "Unused endpoint: GET /screenshot"}, "fullDescription": {"text": "`libs/cua-bench/cua_bench/workers/worker_server.py` declares `GET /screenshot` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c9537c842ba93d4c", "name": "Unused endpoint: POST /shutdown", "shortDescription": {"text": "Unused endpoint: POST /shutdown"}, "fullDescription": {"text": "`libs/cua-bench/cua_bench/workers/worker_server.py` declares `POST /shutdown` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4e6e42aba92073da", "name": "Unused endpoint: ANY /update_computer", "shortDescription": {"text": "Unused endpoint: ANY /update_computer"}, "fullDescription": {"text": "`libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py` declares `ANY /update_computer` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-559e26b4c20f659e", "name": "Unused endpoint: ANY /execute_windows", "shortDescription": {"text": "Unused endpoint: ANY /execute_windows"}, "fullDescription": {"text": "`libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py` declares `ANY /execute_windows` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-75acf0a52d77e2a5", "name": "Unused endpoint: ANY /setup/execute", "shortDescription": {"text": "Unused endpoint: ANY /setup/execute"}, "fullDescription": {"text": "`libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py` declares `ANY /setup/execute` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-731376e048c9753b", "name": "Unused endpoint: ANY /execute", "shortDescription": {"text": "Unused endpoint: ANY /execute"}, "fullDescription": {"text": "`libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py` declares `ANY /execute` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-291097f21b3f70b3", "name": "Unused endpoint: ANY /probe", "shortDescription": {"text": "Unused endpoint: ANY /probe"}, "fullDescription": {"text": "`libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py` declares `ANY /probe` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6fd3d26780417897", "name": "Unused endpoint: ANY /shutdown", "shortDescription": {"text": "Unused endpoint: ANY /shutdown"}, "fullDescription": {"text": "`libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py` declares `ANY /shutdown` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-de0793af71762a23", "name": "Unused endpoint: ANY /setup/launch", "shortDescription": {"text": "Unused endpoint: ANY /setup/launch"}, "fullDescription": {"text": "`libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py` declares `ANY /setup/launch` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-369c2a7e0d383158", "name": "Unused endpoint: ANY /screenshot", "shortDescription": {"text": "Unused endpoint: ANY /screenshot"}, "fullDescription": {"text": "`libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py` declares `ANY /screenshot` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7dac45b0dc465ac5", "name": "Unused endpoint: ANY /terminal", "shortDescription": {"text": "Unused endpoint: ANY /terminal"}, "fullDescription": {"text": "`libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py` declares `ANY /terminal` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4416ae8583dfc7d1", "name": "Unused endpoint: ANY /obs_winagent", "shortDescription": {"text": "Unused endpoint: ANY /obs_winagent"}, "fullDescription": {"text": "`libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py` declares `ANY /obs_winagent` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b41a50a89d45f04a", "name": "Unused endpoint: ANY /accessibility", "shortDescription": {"text": "Unused endpoint: ANY /accessibility"}, "fullDescription": {"text": "`libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py` declares `ANY /accessibility` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5a482d14132b1056", "name": "Unused endpoint: ANY /screen_size", "shortDescription": {"text": "Unused endpoint: ANY /screen_size"}, "fullDescription": {"text": "`libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py` declares `ANY /screen_size` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b10c38a655404ef1", "name": "Unused endpoint: ANY /window_size", "shortDescription": {"text": "Unused endpoint: ANY /window_size"}, "fullDescription": {"text": "`libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py` declares `ANY /window_size` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-60e1d95699c1a64b", "name": "Unused endpoint: ANY /desktop_path", "shortDescription": {"text": "Unused endpoint: ANY /desktop_path"}, "fullDescription": {"text": "`libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py` declares `ANY /desktop_path` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-979c1564a95ef92d", "name": "Unused endpoint: ANY /documents_path", "shortDescription": {"text": "Unused endpoint: ANY /documents_path"}, "fullDescription": {"text": "`libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py` declares `ANY /documents_path` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fb9e0133ab75ebb7", "name": "Unused endpoint: ANY /setup/create_folder", "shortDescription": {"text": "Unused endpoint: ANY /setup/create_folder"}, "fullDescription": {"text": "`libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py` declares `ANY /setup/create_folder` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-02195aef25d9f6ee", "name": "Unused endpoint: ANY /setup/create_file", "shortDescription": {"text": "Unused endpoint: ANY /setup/create_file"}, "fullDescription": {"text": "`libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py` declares `ANY /setup/create_file` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0ce9452c09c55dfb", "name": "Unused endpoint: ANY /setup/recycle", "shortDescription": {"text": "Unused endpoint: ANY /setup/recycle"}, "fullDescription": {"text": "`libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py` declares `ANY /setup/recycle` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d55b288ddb62e206", "name": "Unused endpoint: ANY /folder_exists", "shortDescription": {"text": "Unused endpoint: ANY /folder_exists"}, "fullDescription": {"text": "`libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py` declares `ANY /folder_exists` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6bb5d3b63da1f6fc", "name": "Unused endpoint: ANY /file_exists", "shortDescription": {"text": "Unused endpoint: ANY /file_exists"}, "fullDescription": {"text": "`libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py` declares `ANY /file_exists` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b697df7103a26b4a", "name": "Unused endpoint: ANY /is_details_view", "shortDescription": {"text": "Unused endpoint: ANY /is_details_view"}, "fullDescription": {"text": "`libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py` declares `ANY /is_details_view` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-93e141778e2aec98", "name": "Unused endpoint: ANY /wallpaper", "shortDescription": {"text": "Unused endpoint: ANY /wallpaper"}, "fullDescription": {"text": "`libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py` declares `ANY /wallpaper` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b5234c1642a76622", "name": "Unused endpoint: ANY /list_directory", "shortDescription": {"text": "Unused endpoint: ANY /list_directory"}, "fullDescription": {"text": "`libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py` declares `ANY /list_directory` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-69162b07b57b4e3d", "name": "Unused endpoint: ANY /file", "shortDescription": {"text": "Unused endpoint: ANY /file"}, "fullDescription": {"text": "`libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py` declares `ANY /file` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-542e3444c6ca5fb1", "name": "Unused endpoint: ANY /setup/upload", "shortDescription": {"text": "Unused endpoint: ANY /setup/upload"}, "fullDescription": {"text": "`libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py` declares `ANY /setup/upload` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9238f1f9b28ba361", "name": "Unused endpoint: ANY /platform", "shortDescription": {"text": "Unused endpoint: ANY /platform"}, "fullDescription": {"text": "`libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py` declares `ANY /platform` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-68b2bc2d66966ff0", "name": "Unused endpoint: ANY /cursor_position", "shortDescription": {"text": "Unused endpoint: ANY /cursor_position"}, "fullDescription": {"text": "`libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py` declares `ANY /cursor_position` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5e8799c34e50eaca", "name": "Unused endpoint: ANY /setup/change_wallpaper", "shortDescription": {"text": "Unused endpoint: ANY /setup/change_wallpaper"}, "fullDescription": {"text": "`libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py` declares `ANY /setup/change_wallpaper` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ac4882770e15b9b9", "name": "Unused endpoint: ANY /setup/download_file", "shortDescription": {"text": "Unused endpoint: ANY /setup/download_file"}, "fullDescription": {"text": "`libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py` declares `ANY /setup/download_file` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f7b94914e11338b8", "name": "Unused endpoint: ANY /setup/open_file", "shortDescription": {"text": "Unused endpoint: ANY /setup/open_file"}, "fullDescription": {"text": "`libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py` declares `ANY /setup/open_file` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-69e6fc2bf9388bc6", "name": "Unused endpoint: ANY /setup/activate_window", "shortDescription": {"text": "Unused endpoint: ANY /setup/activate_window"}, "fullDescription": {"text": "`libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py` declares `ANY /setup/activate_window` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-73c202b26048e770", "name": "Unused endpoint: ANY /setup/clear_task_files", "shortDescription": {"text": "Unused endpoint: ANY /setup/clear_task_files"}, "fullDescription": {"text": "`libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py` declares `ANY /setup/clear_task_files` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4304a497c6e2da87", "name": "Unused endpoint: ANY /setup/close_all", "shortDescription": {"text": "Unused endpoint: ANY /setup/close_all"}, "fullDescription": {"text": "`libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py` declares `ANY /setup/close_all` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b700689eefc683a3", "name": "Unused endpoint: ANY /setup/close_window", "shortDescription": {"text": "Unused endpoint: ANY /setup/close_window"}, "fullDescription": {"text": "`libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py` declares `ANY /setup/close_window` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0f37f868e89682f5", "name": "Unused endpoint: ANY /start_recording", "shortDescription": {"text": "Unused endpoint: ANY /start_recording"}, "fullDescription": {"text": "`libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py` declares `ANY /start_recording` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d9f6cff17870c4aa", "name": "Unused endpoint: ANY /end_recording", "shortDescription": {"text": "Unused endpoint: ANY /end_recording"}, "fullDescription": {"text": "`libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py` declares `ANY /end_recording` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-10b675eed73be2a2", "name": "Unused endpoint: ANY /save_state", "shortDescription": {"text": "Unused endpoint: ANY /save_state"}, "fullDescription": {"text": "`libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py` declares `ANY /save_state` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4fe973c51f3547e5", "name": "Unused endpoint: ANY /revert_to_snapshot", "shortDescription": {"text": "Unused endpoint: ANY /revert_to_snapshot"}, "fullDescription": {"text": "`libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py` declares `ANY /revert_to_snapshot` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-869c9a64e4a17555", "name": "Unused endpoint: ANY /are_files_sorted_by_modified_time", "shortDescription": {"text": "Unused endpoint: ANY /are_files_sorted_by_modified_time"}, "fullDescription": {"text": "`libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py` declares `ANY /are_files_sorted_by_modified_time` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1a4c19a1260890e9", "name": "Unused endpoint: ANY /is_directory_read_only_for_user", "shortDescription": {"text": "Unused endpoint: ANY /is_directory_read_only_for_user"}, "fullDescription": {"text": "`libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py` declares `ANY /is_directory_read_only_for_user` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7e6500f960ba808c", "name": "Unused endpoint: ANY /are_all_images_tagged", "shortDescription": {"text": "Unused endpoint: ANY /are_all_images_tagged"}, "fullDescription": {"text": "`libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py` declares `ANY /are_all_images_tagged` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9cedf57a7ebdeb07", "name": "Unused endpoint: ANY /library_folders", "shortDescription": {"text": "Unused endpoint: ANY /library_folders"}, "fullDescription": {"text": "`libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py` declares `ANY /library_folders` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-efc05ffb5c1239df", "name": "Unused endpoint: ANY /check_if_timer_started", "shortDescription": {"text": "Unused endpoint: ANY /check_if_timer_started"}, "fullDescription": {"text": "`libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py` declares `ANY /check_if_timer_started` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4151db9034df50a4", "name": "Unused endpoint: ANY /check_if_world_clock_exists", "shortDescription": {"text": "Unused endpoint: ANY /check_if_world_clock_exists"}, "fullDescription": {"text": "`libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py` declares `ANY /check_if_world_clock_exists` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-44b54c0dbf8a4905", "name": "Unused endpoint: POST /queue", "shortDescription": {"text": "Unused endpoint: POST /queue"}, "fullDescription": {"text": "`libs/python/agent/cua_agent/human_tool/server.py` declares `POST /queue` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9de4cecd0e235584", "name": "Unused endpoint: GET /pending", "shortDescription": {"text": "Unused endpoint: GET /pending"}, "fullDescription": {"text": "`libs/python/agent/cua_agent/human_tool/server.py` declares `GET /pending` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/21718"}, "properties": {"repository": "trycua/cua", "repoUrl": "https://github.com/trycua/cua", "branch": "main"}, "results": [{"ruleId": "scanner-4af986425089d076", "level": "note", "message": {"text": "Possibly dead Python function: animation_tick"}, "properties": {"repobilityId": "805653e89f4760f6", "scanner": "scanner-primary", "fingerprint": "4af986425089d076", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cuabot/src/mcp/overlay-cursor.py:357"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-370fb12846b55bc6", "level": "note", "message": {"text": "Possibly dead Python function: check_fade"}, "properties": {"repobilityId": "6f509ae6bef78b36", "scanner": "scanner-primary", "fingerprint": "370fb12846b55bc6", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cuabot/src/mcp/overlay-cursor.py:414"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1912bedb041ce4ee", "level": "note", "message": {"text": "Possibly dead Python function: play_click"}, "properties": {"repobilityId": "1b7f50a474a74ea4", "scanner": "scanner-primary", "fingerprint": "1912bedb041ce4ee", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cuabot/src/mcp/overlay-cursor.py:451"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c6233c11f872e460", "level": "note", "message": {"text": "Possibly dead Python function: hide_cursor"}, "properties": {"repobilityId": "dc6917548544d60d", "scanner": "scanner-primary", "fingerprint": "c6233c11f872e460", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cuabot/src/mcp/overlay-cursor.py:458"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e696b8ec7fdebad1", "level": "note", "message": {"text": "Possibly dead Python function: set_masked"}, "properties": {"repobilityId": "0b66e99b1eb7c92c", "scanner": "scanner-primary", "fingerprint": "e696b8ec7fdebad1", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cuabot/src/mcp/overlay-cursor.py:465"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-96f8ad9a5253e5ff", "level": "note", "message": {"text": "Possibly dead Python function: replace_iconify_element"}, "properties": {"repobilityId": "83e9bbdf6e99a692", "scanner": "scanner-primary", "fingerprint": "96f8ad9a5253e5ff", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/cua_bench/iconify.py:58"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bdbdcb9e8c09df78", "level": "note", "message": {"text": "Possibly dead Python function: right_click_element"}, "properties": {"repobilityId": "28c359efc6972330", "scanner": "scanner-primary", "fingerprint": "bdbdcb9e8c09df78", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/cua_bench/bot.py:27"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-de05ae39bf66f8f7", "level": "note", "message": {"text": "Possibly dead Python function: render_snapshot"}, "properties": {"repobilityId": "8fa05ee4cfd431a8", "scanner": "scanner-primary", "fingerprint": "de05ae39bf66f8f7", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/cua_bench/utils.py:180"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9c119a1e4497a009", "level": "note", "message": {"text": "Possibly dead Python function: parse_action_string"}, "properties": {"repobilityId": "a2dfc00255ec4fb8", "scanner": "scanner-primary", "fingerprint": "9c119a1e4497a009", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/cua_bench/actions.py:162"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-660b5717a1f764d1", "level": "note", "message": {"text": "Possibly dead Python function: dict_to_action"}, "properties": {"repobilityId": "200cd71b3e27792a", "scanner": "scanner-primary", "fingerprint": "660b5717a1f764d1", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/cua_bench/actions.py:246"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5ddda2ab654ca003", "level": "note", "message": {"text": "Possibly dead Python function: compare_schematic_to_netlist"}, "properties": {"repobilityId": "6c04213878d59034", "scanner": "scanner-primary", "fingerprint": "5ddda2ab654ca003", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/cua_bench/netlist_compare.py:380"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b9f25870aaf8f9d2", "level": "note", "message": {"text": "Possibly dead Python function: handle_root"}, "properties": {"repobilityId": "2d5aa1e344d1b09b", "scanner": "scanner-primary", "fingerprint": "b9f25870aaf8f9d2", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/cua_bench/desktop.py:305"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-54187acc3778dd7c", "level": "note", "message": {"text": "Possibly dead Python function: container_is_running"}, "properties": {"repobilityId": "0cdd517045211b91", "scanner": "scanner-primary", "fingerprint": "54187acc3778dd7c", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/cua_bench/runner/docker_utils.py:426"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-eccb27038fbf0e42", "level": "note", "message": {"text": "Possibly dead Python function: prune_unused_images"}, "properties": {"repobilityId": "0f9e2a49e7fc5f2a", "scanner": "scanner-primary", "fingerprint": "eccb27038fbf0e42", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/cua_bench/runner/docker_utils.py:551"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bd06fc508de1956f", "level": "note", "message": {"text": "Possibly dead Python function: create_event"}, "properties": {"repobilityId": "7693b1f2fdf90ac5", "scanner": "scanner-primary", "fingerprint": "bd06fc508de1956f", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/cua_bench/apps/calendar.py:196"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1df880950370c990", "level": "note", "message": {"text": "Possibly dead Python function: delete_event"}, "properties": {"repobilityId": "3d87606f55e8539f", "scanner": "scanner-primary", "fingerprint": "1df880950370c990", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/cua_bench/apps/calendar.py:232"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e8f4a9c19896404b", "level": "note", "message": {"text": "Possibly dead Python function: bound_method"}, "properties": {"repobilityId": "5e62452697882f45", "scanner": "scanner-primary", "fingerprint": "e8f4a9c19896404b", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/cua_bench/apps/registry.py:242"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4b5018bbfc025723", "level": "note", "message": {"text": "Possibly dead Python function: export_netlist"}, "properties": {"repobilityId": "d0102245d19ee39e", "scanner": "scanner-primary", "fingerprint": "4b5018bbfc025723", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/cua_bench/apps/kicad.py:420"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b1ee79761e900f56", "level": "note", "message": {"text": "Possibly dead Python function: simulate_operating_point"}, "properties": {"repobilityId": "de67f3664a4217be", "scanner": "scanner-primary", "fingerprint": "b1ee79761e900f56", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/cua_bench/apps/kicad.py:523"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d37335f95fe51d3b", "level": "note", "message": {"text": "Possibly dead Python function: simulate_transient"}, "properties": {"repobilityId": "0558d0efdf9ca73f", "scanner": "scanner-primary", "fingerprint": "d37335f95fe51d3b", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/cua_bench/apps/kicad.py:550"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e9b78868d4bc1a60", "level": "warning", "message": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 docs/src/components/mermaid.tsx:43"}, "properties": {"repobilityId": "7408e9ba056c477c", "scanner": "scanner-primary", "fingerprint": "e9b78868d4bc1a60", "layer": "frontend", "severity": "medium", "confidence": 1.0, "tags": ["frontend-quality", "fq.dangerous-html"]}}, {"ruleId": "scanner-d21d52f33f199592", "level": "warning", "message": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 docs/src/app/layout.tsx:39"}, "properties": {"repobilityId": "e2d724fafc8b8379", "scanner": "scanner-primary", "fingerprint": "d21d52f33f199592", "layer": "frontend", "severity": "medium", "confidence": 1.0, "tags": ["frontend-quality", "fq.dangerous-html"]}}, {"ruleId": "scanner-3bda0537ef6fcf13", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 docs/src/app/api/copilotkit/route.ts:301"}, "properties": {"repobilityId": "84b60e5f6c2066cc", "scanner": "scanner-primary", "fingerprint": "3bda0537ef6fcf13", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-07947fd1419e1196", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 docs/src/lib/posthog-query.ts:37"}, "properties": {"repobilityId": "a4d6225b3c4f1f46", "scanner": "scanner-primary", "fingerprint": "07947fd1419e1196", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-821ff2c2184afbde", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/docs-generators/lume.ts:203"}, "properties": {"repobilityId": "9410acf37cdab2fd", "scanner": "scanner-primary", "fingerprint": "821ff2c2184afbde", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-f616052e2f15e3f5", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/docs-generators/typescript-sdk.ts:134"}, "properties": {"repobilityId": "f654d1ed04b95b79", "scanner": "scanner-primary", "fingerprint": "f616052e2f15e3f5", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-77d4e15bc51e9a1a", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/docs-generators/cua-driver.ts:211"}, "properties": {"repobilityId": "d77edb361ee37826", "scanner": "scanner-primary", "fingerprint": "77d4e15bc51e9a1a", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-d363f530911883d4", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/docs-generators/generate-versioned-docs.ts:117"}, "properties": {"repobilityId": "9156b05736966d43", "scanner": "scanner-primary", "fingerprint": "d363f530911883d4", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-25cb9840685a18dc", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/docs-generators/python-sdk.ts:180"}, "properties": {"repobilityId": "9546fea0d537b2c4", "scanner": "scanner-primary", "fingerprint": "25cb9840685a18dc", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-8652358a2c59568f", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/docs-generators/generate-changelog.ts:91"}, "properties": {"repobilityId": "e7049c728c9fa558", "scanner": "scanner-primary", "fingerprint": "8652358a2c59568f", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-d2d340ba2f62454e", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/docs-generators/runner.ts:72"}, "properties": {"repobilityId": "3bd2c22e01dbd7e9", "scanner": "scanner-primary", "fingerprint": "d2d340ba2f62454e", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-99d0d5448ab2b7cd", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 libs/cuabot/src/cuabotd.ts:169"}, "properties": {"repobilityId": "1d7ca3d89e0bb29b", "scanner": "scanner-primary", "fingerprint": "99d0d5448ab2b7cd", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-2b397dd9c84519d6", "level": "none", "message": {"text": "TODO/FIXME marker in shipping code \u2014 libs/cuabot/src/utils.ts:124"}, "properties": {"repobilityId": "3c41131e900ed293", "scanner": "scanner-primary", "fingerprint": "2b397dd9c84519d6", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.todo-marker"]}}, {"ruleId": "scanner-674f968666f0313b", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 libs/cuabot/src/client.ts:214"}, "properties": {"repobilityId": "70d8e0dd336b7b00", "scanner": "scanner-primary", "fingerprint": "674f968666f0313b", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-eb3017639b7d2b24", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 libs/cuabot/src/cuabot.tsx:196"}, "properties": {"repobilityId": "9f4f7c9d92d5b604", "scanner": "scanner-primary", "fingerprint": "eb3017639b7d2b24", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-378d2994d5e7cec4", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 libs/cuabot/src/onboarding.tsx:383"}, "properties": {"repobilityId": "7279a9dd91e7bb72", "scanner": "scanner-primary", "fingerprint": "378d2994d5e7cec4", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-519b186e367ee827", "level": "none", "message": {"text": "TODO/FIXME marker in shipping code \u2014 libs/typescript/playground/src/constants/sandboxPresets.ts:28"}, "properties": {"repobilityId": "29f5b8997b6a736f", "scanner": "scanner-primary", "fingerprint": "519b186e367ee827", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.todo-marker"]}}, {"ruleId": "scanner-9306f7ed3445710a", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 libs/typescript/playground/src/components/modals/ReplayTrajectoryModal.tsx:266"}, "properties": {"repobilityId": "2c8dc35f4a2bb730", "scanner": "scanner-primary", "fingerprint": "9306f7ed3445710a", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-b1400580523d9c7e", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 libs/typescript/playground/src/components/modals/ExportTrajectoryModal.tsx:183"}, "properties": {"repobilityId": "134cb32782ba14a5", "scanner": "scanner-primary", "fingerprint": "b1400580523d9c7e", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-9b35dbe16596cd78", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 libs/typescript/playground/src/components/ui/select.tsx:116"}, "properties": {"repobilityId": "a7d83631ddbc0f22", "scanner": "scanner-primary", "fingerprint": "9b35dbe16596cd78", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-7a5786ca8e67e23d", "level": "none", "message": {"text": "TODO/FIXME marker in shipping code \u2014 libs/typescript/playground/src/components/primitives/ChatMessage.tsx:75"}, "properties": {"repobilityId": "175ce5f015e17cb2", "scanner": "scanner-primary", "fingerprint": "7a5786ca8e67e23d", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.todo-marker"]}}, {"ruleId": "scanner-b4ec6817471732a5", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 libs/typescript/playground/src/components/composed/ChatList.tsx:238"}, "properties": {"repobilityId": "0c64e2dec8fcd7e3", "scanner": "scanner-primary", "fingerprint": "b4ec6817471732a5", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-5a671b553393acda", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 libs/typescript/playground/src/components/composed/ComputerList.tsx:180"}, "properties": {"repobilityId": "08e6cd04b73af6b3", "scanner": "scanner-primary", "fingerprint": "5a671b553393acda", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-65b7636895950806", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 libs/typescript/playground/src/components/composed/ChatSidebar.tsx:246"}, "properties": {"repobilityId": "b42cf89de6c5c8cb", "scanner": "scanner-primary", "fingerprint": "65b7636895950806", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-60f1858d46a72f8c", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 libs/typescript/computer/src/interface/base.ts:109"}, "properties": {"repobilityId": "0557f36ec05baba4", "scanner": "scanner-primary", "fingerprint": "60f1858d46a72f8c", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-f51ce5cdceb9ed70", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 libs/typescript/cua-cli/src/auth.ts:42"}, "properties": {"repobilityId": "fcefc26e3fa3b9dd", "scanner": "scanner-primary", "fingerprint": "f51ce5cdceb9ed70", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-58785b5c9d41fa15", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 libs/typescript/cua-cli/src/util.ts:55"}, "properties": {"repobilityId": "bf39565f13d90f98", "scanner": "scanner-primary", "fingerprint": "58785b5c9d41fa15", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-92d3a0cdf573dddb", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 libs/typescript/cua-cli/src/cli.ts:177"}, "properties": {"repobilityId": "c90c40cb3d1264cd", "scanner": "scanner-primary", "fingerprint": "92d3a0cdf573dddb", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-ec566b3ef10841ed", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 libs/typescript/cua-cli/src/commands/auth.ts:10"}, "properties": {"repobilityId": "6457d2a326fc8a0f", "scanner": "scanner-primary", "fingerprint": "ec566b3ef10841ed", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-049486bc5a013ce1", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 libs/typescript/cua-cli/src/commands/sandbox.ts:197"}, "properties": {"repobilityId": "5a0d5fd51a0c5c78", "scanner": "scanner-primary", "fingerprint": "049486bc5a013ce1", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-1f773a7b9005a617", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 libs/typescript/cua-cli/src/commands/image.ts:70"}, "properties": {"repobilityId": "50a17c9ea123c846", "scanner": "scanner-primary", "fingerprint": "1f773a7b9005a617", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-0e04832fcad5d022", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 libs/typescript/cua-cli/src/commands/skills.ts:1027"}, "properties": {"repobilityId": "b3554fefe400a069", "scanner": "scanner-primary", "fingerprint": "0e04832fcad5d022", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-9fa7a734ee59c865", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 libs/python/cua-sandbox/cua_sandbox/runtime/_bw_init.js:57"}, "properties": {"repobilityId": "b6f4636b18694ae3", "scanner": "scanner-primary", "fingerprint": "9fa7a734ee59c865", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-59cc5688025f3000", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 examples/computer-example-ts/src/index.ts:61"}, "properties": {"repobilityId": "7e232e5e588c6abb", "scanner": "scanner-primary", "fingerprint": "59cc5688025f3000", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-fc45330b6f2fe459", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 examples/computer-example-ts/src/helpers.ts:11"}, "properties": {"repobilityId": "6044e955ca507c51", "scanner": "scanner-primary", "fingerprint": "fc45330b6f2fe459", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-783841ec2c6dcf2e", "level": "warning", "message": {"text": "Privileged port 1000 in use"}, "properties": {"repobilityId": "5ac9fc9372cfe169", "scanner": "scanner-primary", "fingerprint": "783841ec2c6dcf2e", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/kasm/src/ubuntu/install/firefox/install_firefox.sh"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d63da3583b14afc0", "level": "warning", "message": {"text": "Dockerfile runs as root: Dockerfile"}, "properties": {"repobilityId": "a2ed1bd120e507db", "scanner": "scanner-primary", "fingerprint": "d63da3583b14afc0", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-de3c1f217d72a063", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "properties": {"repobilityId": "1de0ecd007803dbd", "scanner": "scanner-primary", "fingerprint": "de3c1f217d72a063", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-29c3f5f8786ec40e", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "properties": {"repobilityId": "021f94de04af9613", "scanner": "scanner-primary", "fingerprint": "29c3f5f8786ec40e", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/scripts/docs-mcp-server/Dockerfile"}, "region": {"startLine": 2}}}]}, {"ruleId": "scanner-29c3f5f8786ec40e", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "properties": {"repobilityId": "b60014c50ae09863", "scanner": "scanner-primary", "fingerprint": "29c3f5f8786ec40e", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/scripts/docs-mcp-server/Dockerfile"}, "region": {"startLine": 25}}}]}, {"ruleId": "scanner-f5786914277ba7de", "level": "warning", "message": {"text": "Dockerfile runs as root: libs/kasm/Dockerfile"}, "properties": {"repobilityId": "5d0a3c5a43e8a0f5", "scanner": "scanner-primary", "fingerprint": "f5786914277ba7de", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-0f1325f4b2a2ffb0", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: kasmweb/core-ubuntu-jammy:1.17.0"}, "properties": {"repobilityId": "e6a65ef802c9d334", "scanner": "scanner-primary", "fingerprint": "0f1325f4b2a2ffb0", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/kasm/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-59939ad8f5c121ed", "level": "warning", "message": {"text": "Dockerfile runs as root: libs/xfce/Dockerfile"}, "properties": {"repobilityId": "adc5d0bd272d975d", "scanner": "scanner-primary", "fingerprint": "59939ad8f5c121ed", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-1a704897a6034b23", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: kicad/kicad:9.0"}, "properties": {"repobilityId": "c9ef97da0ffa3ed8", "scanner": "scanner-primary", "fingerprint": "1a704897a6034b23", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/xfce/Dockerfile"}, "region": {"startLine": 4}}}]}, {"ruleId": "scanner-a7142264efe702f3", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: ubuntu:22.04"}, "properties": {"repobilityId": "a561a248a25bdd8f", "scanner": "scanner-primary", "fingerprint": "a7142264efe702f3", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cuabot/Dockerfile"}, "region": {"startLine": 2}}}]}, {"ruleId": "scanner-ad7a39001f822300", "level": "error", "message": {"text": "Dockerfile pipes a remote installer into a shell"}, "properties": {"repobilityId": "3b5964e571724036", "scanner": "scanner-primary", "fingerprint": "ad7a39001f822300", "layer": "hardware", "severity": "high", "confidence": 1.0, "tags": ["supply-chain", "docker", "remote-installer"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cuabot/Dockerfile"}, "region": {"startLine": 143}}}]}, {"ruleId": "scanner-ad7a39001f822300", "level": "error", "message": {"text": "Dockerfile pipes a remote installer into a shell"}, "properties": {"repobilityId": "55e253f5b4bd44ad", "scanner": "scanner-primary", "fingerprint": "ad7a39001f822300", "layer": "hardware", "severity": "high", "confidence": 1.0, "tags": ["supply-chain", "docker", "remote-installer"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cuabot/Dockerfile"}, "region": {"startLine": 146}}}]}, {"ruleId": "scanner-babddbbf708b16b5", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.12-slim"}, "properties": {"repobilityId": "898f88fb7b70956d", "scanner": "scanner-primary", "fingerprint": "babddbbf708b16b5", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/Dockerfile"}, "region": {"startLine": 2}}}]}, {"ruleId": "scanner-b6bf63d7995d1ad8", "level": "warning", "message": {"text": "Dockerfile runs as root: libs/lumier/Dockerfile"}, "properties": {"repobilityId": "c3bc85500d9a712c", "scanner": "scanner-primary", "fingerprint": "b6bf63d7995d1ad8", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-6b858541dddc62df", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: debian:bullseye-slim"}, "properties": {"repobilityId": "72af4a8c81c9224d", "scanner": "scanner-primary", "fingerprint": "6b858541dddc62df", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/lumier/Dockerfile"}, "region": {"startLine": 2}}}]}, {"ruleId": "scanner-e02bf0cbd03a912e", "level": "warning", "message": {"text": "Dockerfile runs as root: libs/qemu-docker/android/Dockerfile"}, "properties": {"repobilityId": "841a82ee76f224de", "scanner": "scanner-primary", "fingerprint": "e02bf0cbd03a912e", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-183decdb0fbc9935", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: eclipse-temurin:17-jdk"}, "properties": {"repobilityId": "d412bfca4b8f59c2", "scanner": "scanner-primary", "fingerprint": "183decdb0fbc9935", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/qemu-docker/android/Dockerfile"}, "region": {"startLine": 4}}}]}, {"ruleId": "scanner-80501bd68237b24a", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: budtmo/docker-android:emulator_11.0"}, "properties": {"repobilityId": "8409f8da8227d6a4", "scanner": "scanner-primary", "fingerprint": "80501bd68237b24a", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/qemu-docker/android/Dockerfile"}, "region": {"startLine": 33}}}]}, {"ruleId": "scanner-5924bfbe87f2e2d6", "level": "error", "message": {"text": "Dockerfile pipes a remote installer into a shell"}, "properties": {"repobilityId": "8230d3491bb1e260", "scanner": "scanner-primary", "fingerprint": "5924bfbe87f2e2d6", "layer": "hardware", "severity": "high", "confidence": 1.0, "tags": ["supply-chain", "docker", "remote-installer"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/qemu-docker/android/Dockerfile"}, "region": {"startLine": 59}}}]}, {"ruleId": "scanner-2fe07073265e21e7", "level": "warning", "message": {"text": "Dockerfile runs as root: libs/qemu-docker/windows/Dockerfile"}, "properties": {"repobilityId": "43351874505cf63a", "scanner": "scanner-primary", "fingerprint": "2fe07073265e21e7", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-57cd18160922cda9", "level": "warning", "message": {"text": "Docker base image uses a mutable or implicit tag: trycua/windows-local:latest"}, "properties": {"repobilityId": "8554b614e4dd749b", "scanner": "scanner-primary", "fingerprint": "57cd18160922cda9", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/qemu-docker/windows/Dockerfile"}, "region": {"startLine": 13}}}]}, {"ruleId": "scanner-51871cb296973c0d", "level": "warning", "message": {"text": "Dockerfile runs as root: libs/qemu-docker/linux/Dockerfile"}, "properties": {"repobilityId": "c1ef6daa7de97737", "scanner": "scanner-primary", "fingerprint": "51871cb296973c0d", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-eac947f9a5daf6e6", "level": "warning", "message": {"text": "Docker base image uses a mutable or implicit tag: trycua/qemu-local:latest"}, "properties": {"repobilityId": "11b9566078e04adf", "scanner": "scanner-primary", "fingerprint": "eac947f9a5daf6e6", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/qemu-docker/linux/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-aa5acaa49eb8315b", "level": "note", "message": {"text": "Containers defined but no K8s/orchestration manifest found"}, "properties": {"repobilityId": "b230ea9b68736081", "scanner": "scanner-primary", "fingerprint": "aa5acaa49eb8315b", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["coverage", "deployment"]}}, {"ruleId": "scanner-92867aa4ad98ab27", "level": "warning", "message": {"text": "Insecure pattern 'cors_wildcard' in docs/scripts/modal_app.py:1970"}, "properties": {"repobilityId": "97efd63207216bef", "scanner": "scanner-primary", "fingerprint": "92867aa4ad98ab27", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "cors_wildcard"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/scripts/modal_app.py"}, "region": {"startLine": 1970}}}]}, {"ruleId": "scanner-2e68b9355cb162be", "level": "warning", "message": {"text": "Insecure pattern 'cors_wildcard' in docs/scripts/docs-mcp-server/main.py:506"}, "properties": {"repobilityId": "c8f6d070e6c09e17", "scanner": "scanner-primary", "fingerprint": "2e68b9355cb162be", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "cors_wildcard"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/scripts/docs-mcp-server/main.py"}, "region": {"startLine": 506}}}]}, {"ruleId": "scanner-80037c4c837ca683", "level": "warning", "message": {"text": "Insecure pattern 'dangerous_innerhtml' in docs/src/components/mermaid.tsx:43"}, "properties": {"repobilityId": "de4d5534cbae20e8", "scanner": "scanner-primary", "fingerprint": "80037c4c837ca683", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "dangerous_innerhtml"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/src/components/mermaid.tsx"}, "region": {"startLine": 43}}}]}, {"ruleId": "scanner-6195cce07499b94c", "level": "warning", "message": {"text": "Insecure pattern 'dangerous_innerhtml' in docs/src/app/layout.tsx:39"}, "properties": {"repobilityId": "9d95ede695f9de8b", "scanner": "scanner-primary", "fingerprint": "6195cce07499b94c", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "dangerous_innerhtml"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/src/app/layout.tsx"}, "region": {"startLine": 39}}}]}, {"ruleId": "scanner-8e020eb7776b8b74", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in scripts/typescript-typecheck.js:2"}, "properties": {"repobilityId": "ccae3b00b1cdb8d4", "scanner": "scanner-primary", "fingerprint": "8e020eb7776b8b74", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/typescript-typecheck.js"}, "region": {"startLine": 2}}}]}, {"ruleId": "scanner-65251aa027b32684", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in scripts/docs-generators/lume.ts:14"}, "properties": {"repobilityId": "6f47eccf074951fd", "scanner": "scanner-primary", "fingerprint": "65251aa027b32684", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/docs-generators/lume.ts"}, "region": {"startLine": 14}}}]}, {"ruleId": "scanner-b62dc865b28e817f", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in scripts/docs-generators/typescript-sdk.ts:17"}, "properties": {"repobilityId": "81e2cd36ba8536af", "scanner": "scanner-primary", "fingerprint": "b62dc865b28e817f", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/docs-generators/typescript-sdk.ts"}, "region": {"startLine": 17}}}]}, {"ruleId": "scanner-feb58064765d8eff", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in scripts/docs-generators/cua-driver.ts:14"}, "properties": {"repobilityId": "21c4c8b37f3d9f9f", "scanner": "scanner-primary", "fingerprint": "feb58064765d8eff", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/docs-generators/cua-driver.ts"}, "region": {"startLine": 14}}}]}, {"ruleId": "scanner-1be795e53d11fef6", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in scripts/docs-generators/generate-versioned-docs.ts:15"}, "properties": {"repobilityId": "31ad66b2847a9d4b", "scanner": "scanner-primary", "fingerprint": "1be795e53d11fef6", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/docs-generators/generate-versioned-docs.ts"}, "region": {"startLine": 15}}}]}, {"ruleId": "scanner-ef182317b3233830", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in scripts/docs-generators/extract_python_docs.py:202"}, "properties": {"repobilityId": "e298e2d1217cc73a", "scanner": "scanner-primary", "fingerprint": "ef182317b3233830", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/docs-generators/extract_python_docs.py"}, "region": {"startLine": 202}}}]}, {"ruleId": "scanner-7b7696b0fbb6fc17", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in scripts/docs-generators/python-sdk.ts:15"}, "properties": {"repobilityId": "9521b3ecfb99f7d5", "scanner": "scanner-primary", "fingerprint": "7b7696b0fbb6fc17", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/docs-generators/python-sdk.ts"}, "region": {"startLine": 15}}}]}, {"ruleId": "scanner-669b0312e68b9496", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in scripts/docs-generators/generate-changelog.ts:16"}, "properties": {"repobilityId": "b9c04717602cb446", "scanner": "scanner-primary", "fingerprint": "669b0312e68b9496", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/docs-generators/generate-changelog.ts"}, "region": {"startLine": 16}}}]}, {"ruleId": "scanner-9b9cc8df9aa1df97", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in scripts/docs-generators/runner.ts:17"}, "properties": {"repobilityId": "ac68a61ee05c4f4b", "scanner": "scanner-primary", "fingerprint": "9b9cc8df9aa1df97", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/docs-generators/runner.ts"}, "region": {"startLine": 17}}}]}, {"ruleId": "scanner-377a0d4d05f6e8ec", "level": "error", "message": {"text": "Insecure pattern 'exec_used' in libs/cuabot/src/cuabotd.ts:172"}, "properties": {"repobilityId": "d300464540f382c6", "scanner": "scanner-primary", "fingerprint": "377a0d4d05f6e8ec", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "exec_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cuabot/src/cuabotd.ts"}, "region": {"startLine": 172}}}]}, {"ruleId": "scanner-62a4e922ae41e480", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in libs/cuabot/src/cuabotd.ts:10"}, "properties": {"repobilityId": "29adf4c63b994b80", "scanner": "scanner-primary", "fingerprint": "62a4e922ae41e480", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cuabot/src/cuabotd.ts"}, "region": {"startLine": 10}}}]}, {"ruleId": "scanner-bc29b71556d0b614", "level": "warning", "message": {"text": "Insecure pattern 'cors_wildcard' in libs/cuabot/src/cuabotd.ts:966"}, "properties": {"repobilityId": "5ee777d05d3d1e3c", "scanner": "scanner-primary", "fingerprint": "bc29b71556d0b614", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "cors_wildcard"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cuabot/src/cuabotd.ts"}, "region": {"startLine": 966}}}]}, {"ruleId": "scanner-6f7c1a67030abef9", "level": "error", "message": {"text": "Insecure pattern 'exec_used' in libs/cuabot/src/utils.ts:262"}, "properties": {"repobilityId": "1f9afa064cdc04c8", "scanner": "scanner-primary", "fingerprint": "6f7c1a67030abef9", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "exec_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cuabot/src/utils.ts"}, "region": {"startLine": 262}}}]}, {"ruleId": "scanner-2b31abd9093706ec", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in libs/cuabot/src/utils.ts:6"}, "properties": {"repobilityId": "4b120b65281d4527", "scanner": "scanner-primary", "fingerprint": "2b31abd9093706ec", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cuabot/src/utils.ts"}, "region": {"startLine": 6}}}]}, {"ruleId": "scanner-c95edecb08bc7b95", "level": "error", "message": {"text": "Possible secret in libs/cuabot/src/telemetry.ts"}, "properties": {"repobilityId": "d496ede6571f0426", "scanner": "scanner-primary", "fingerprint": "c95edecb08bc7b95", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cuabot/src/telemetry.ts"}, "region": {"startLine": 16}}}]}, {"ruleId": "scanner-9a338fecec6ea1aa", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in libs/cuabot/src/client.ts:6"}, "properties": {"repobilityId": "408c7460a2bcba50", "scanner": "scanner-primary", "fingerprint": "9a338fecec6ea1aa", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cuabot/src/client.ts"}, "region": {"startLine": 6}}}]}, {"ruleId": "scanner-a9e4d0afe71a275c", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in libs/cuabot/src/cuabot.tsx:23"}, "properties": {"repobilityId": "3f2c318fd9602b82", "scanner": "scanner-primary", "fingerprint": "a9e4d0afe71a275c", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cuabot/src/cuabot.tsx"}, "region": {"startLine": 23}}}]}, {"ruleId": "scanner-b2f6a404d8f2e17f", "level": "error", "message": {"text": "Insecure pattern 'exec_used' in libs/cuabot/src/onboarding.tsx:401"}, "properties": {"repobilityId": "ebc4be3c11a9aaf8", "scanner": "scanner-primary", "fingerprint": "b2f6a404d8f2e17f", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "exec_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cuabot/src/onboarding.tsx"}, "region": {"startLine": 401}}}]}, {"ruleId": "scanner-47290cfee8dc9074", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in libs/cuabot/src/onboarding.tsx:25"}, "properties": {"repobilityId": "4b36e4382b373ffd", "scanner": "scanner-primary", "fingerprint": "47290cfee8dc9074", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cuabot/src/onboarding.tsx"}, "region": {"startLine": 25}}}]}, {"ruleId": "scanner-02462ef6a24e7f39", "level": "warning", "message": {"text": "Insecure pattern 'cors_wildcard' in libs/cua-bench/cua_bench/cli/commands/trace.py:466"}, "properties": {"repobilityId": "2e4451b8b2238943", "scanner": "scanner-primary", "fingerprint": "02462ef6a24e7f39", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "cors_wildcard"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/cua_bench/cli/commands/trace.py"}, "region": {"startLine": 466}}}]}, {"ruleId": "scanner-b772e48b46773dfb", "level": "error", "message": {"text": "Insecure pattern 'exec_used' in libs/cua-bench/cua_bench/computers/webtop.py:301"}, "properties": {"repobilityId": "56636219c8fe846b", "scanner": "scanner-primary", "fingerprint": "b772e48b46773dfb", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "exec_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/cua_bench/computers/webtop.py"}, "region": {"startLine": 301}}}]}, {"ruleId": "scanner-a169cc96ef816f5f", "level": "warning", "message": {"text": "Insecure pattern 'cors_wildcard' in libs/cua-bench/cua_bench/workers/worker_server.py:75"}, "properties": {"repobilityId": "a5d722ba70577ff7", "scanner": "scanner-primary", "fingerprint": "a169cc96ef816f5f", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "cors_wildcard"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/cua_bench/workers/worker_server.py"}, "region": {"startLine": 75}}}]}, {"ruleId": "scanner-a9bf98a08288942d", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/cua-bench/cua_bench/www/trace_viewer.html:599"}, "properties": {"repobilityId": "21ee3c9c484813df", "scanner": "scanner-primary", "fingerprint": "a9bf98a08288942d", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/cua_bench/www/trace_viewer.html"}, "region": {"startLine": 599}}}]}, {"ruleId": "scanner-b62c5f02ce3e898a", "level": "warning", "message": {"text": "Insecure pattern 'domparser_html_parse' in libs/cua-bench/cua_bench/www/trace_viewer.html:320"}, "properties": {"repobilityId": "a4b02989deef6e6c", "scanner": "scanner-primary", "fingerprint": "b62c5f02ce3e898a", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "domparser_html_parse"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/cua_bench/www/trace_viewer.html"}, "region": {"startLine": 320}}}]}, {"ruleId": "scanner-118aafc0c005d508", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/cua-bench/cua_bench/www/environments.html:306"}, "properties": {"repobilityId": "c2ea3c4e9f30a4a0", "scanner": "scanner-primary", "fingerprint": "118aafc0c005d508", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/cua_bench/www/environments.html"}, "region": {"startLine": 306}}}]}, {"ruleId": "scanner-6378cfbaa46a6c5f", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/cua-bench/cua_bench/www/generate.html:486"}, "properties": {"repobilityId": "0469f9759960bc59", "scanner": "scanner-primary", "fingerprint": "6378cfbaa46a6c5f", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/cua_bench/www/generate.html"}, "region": {"startLine": 486}}}]}, {"ruleId": "scanner-6d709a8a53e3f92f", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/cua-bench/cua_bench/www/environment-detail.html:416"}, "properties": {"repobilityId": "2f56ecb2001935e5", "scanner": "scanner-primary", "fingerprint": "6d709a8a53e3f92f", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/cua_bench/www/environment-detail.html"}, "region": {"startLine": 416}}}]}, {"ruleId": "scanner-e36783adc3136b32", "level": "error", "message": {"text": "Possible secret in libs/cua-bench/tasks/winarena_adapter/evaluators/getters/vlc.py"}, "properties": {"repobilityId": "c614176c13548a17", "scanner": "scanner-primary", "fingerprint": "e36783adc3136b32", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/tasks/winarena_adapter/evaluators/getters/vlc.py"}, "region": {"startLine": 20}}}]}, {"ruleId": "scanner-3a8677e6188f61d7", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in libs/cua-bench/tasks/winarena_adapter/evaluators/getters/fileexplorer.py:96"}, "properties": {"repobilityId": "cf7c8347144b02cd", "scanner": "scanner-primary", "fingerprint": "3a8677e6188f61d7", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/tasks/winarena_adapter/evaluators/getters/fileexplorer.py"}, "region": {"startLine": 96}}}]}, {"ruleId": "scanner-423e4105aee270ca", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in libs/cua-bench/tasks/winarena_adapter/evaluators/metrics/basic_os.py:4"}, "properties": {"repobilityId": "fafd2060aa305f9c", "scanner": "scanner-primary", "fingerprint": "423e4105aee270ca", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/tasks/winarena_adapter/evaluators/metrics/basic_os.py"}, "region": {"startLine": 4}}}]}, {"ruleId": "scanner-5947182575beeb1b", "level": "error", "message": {"text": "Insecure pattern 'exec_used' in libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:194"}, "properties": {"repobilityId": "65c808994816c4f9", "scanner": "scanner-primary", "fingerprint": "5947182575beeb1b", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "exec_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py"}, "region": {"startLine": 194}}}]}, {"ruleId": "scanner-c2c589cf79df603b", "level": "warning", "message": {"text": "Insecure pattern 'subprocess_shell_true' in libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:297"}, "properties": {"repobilityId": "f95d92e5feb241a6", "scanner": "scanner-primary", "fingerprint": "c2c589cf79df603b", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "subprocess_shell_true"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py"}, "region": {"startLine": 297}}}]}, {"ruleId": "scanner-ef20c16609a31466", "level": "note", "message": {"text": "Insecure pattern 'debug_true' in libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:2030"}, "properties": {"repobilityId": "1aaec4cd720b11e8", "scanner": "scanner-primary", "fingerprint": "ef20c16609a31466", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "debug_true"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py"}, "region": {"startLine": 2030}}}]}, {"ruleId": "scanner-59e535d5f13e2c44", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/cua-bench/tasks/slack_env/gui/index.html:2003"}, "properties": {"repobilityId": "674ebc365d0891fc", "scanner": "scanner-primary", "fingerprint": "59e535d5f13e2c44", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/tasks/slack_env/gui/index.html"}, "region": {"startLine": 2003}}}]}, {"ruleId": "scanner-5e40df8557361f18", "level": "error", "message": {"text": "Possible secret in libs/typescript/core/src/telemetry/clients/posthog.ts"}, "properties": {"repobilityId": "aecc790797ce2b57", "scanner": "scanner-primary", "fingerprint": "5e40df8557361f18", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/typescript/core/src/telemetry/clients/posthog.ts"}, "region": {"startLine": 18}}}]}, {"ruleId": "scanner-824a03f193635a24", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in libs/typescript/cua-cli/src/commands/serve-mcp.ts:10"}, "properties": {"repobilityId": "c0a61c3e8a6d2776", "scanner": "scanner-primary", "fingerprint": "824a03f193635a24", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/typescript/cua-cli/src/commands/serve-mcp.ts"}, "region": {"startLine": 10}}}]}, {"ruleId": "scanner-488c0a7c6529ddf7", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in libs/cua-driver/rust/crates/platform-windows/src/tools/page_bookmark.rs:165"}, "properties": {"repobilityId": "acc6cc3fd656febc", "scanner": "scanner-primary", "fingerprint": "488c0a7c6529ddf7", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-driver/rust/crates/platform-windows/src/tools/page_bookmark.rs"}, "region": {"startLine": 165}}}]}, {"ruleId": "scanner-f27eb64f343ae123", "level": "error", "message": {"text": "Possible secret in libs/lumier/src/lib/utils.sh"}, "properties": {"repobilityId": "d9244c652c43c6fa", "scanner": "scanner-primary", "fingerprint": "f27eb64f343ae123", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/lumier/src/lib/utils.sh"}, "region": {"startLine": 81}}}]}, {"ruleId": "scanner-6d6832e5b13f9cdf", "level": "warning", "message": {"text": "Insecure pattern 'cors_wildcard' in libs/python/agent/cua_agent/playground/server.py:46"}, "properties": {"repobilityId": "da8af766243140a5", "scanner": "scanner-primary", "fingerprint": "6d6832e5b13f9cdf", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "cors_wildcard"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/agent/cua_agent/playground/server.py"}, "region": {"startLine": 46}}}]}, {"ruleId": "scanner-902b1a341b527947", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in libs/python/agent/cua_agent/loops/uitars.py:306"}, "properties": {"repobilityId": "72406a1779bc9b9a", "scanner": "scanner-primary", "fingerprint": "902b1a341b527947", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/agent/cua_agent/loops/uitars.py"}, "region": {"startLine": 306}}}]}, {"ruleId": "scanner-141ffe9972662c11", "level": "warning", "message": {"text": "Insecure pattern 'cors_wildcard' in libs/python/computer-server/computer_server/main.py:182"}, "properties": {"repobilityId": "dbaa928070af08f8", "scanner": "scanner-primary", "fingerprint": "141ffe9972662c11", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "cors_wildcard"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/computer-server/computer_server/main.py"}, "region": {"startLine": 182}}}]}, {"ruleId": "scanner-b1c6a7adc352dfd9", "level": "warning", "message": {"text": "Insecure pattern 'subprocess_shell_true' in libs/python/computer-server/computer_server/handlers/generic.py:115"}, "properties": {"repobilityId": "aa10912cfb243003", "scanner": "scanner-primary", "fingerprint": "b1c6a7adc352dfd9", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "subprocess_shell_true"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/computer-server/computer_server/handlers/generic.py"}, "region": {"startLine": 115}}}]}, {"ruleId": "scanner-30d13f66951b200d", "level": "error", "message": {"text": "Insecure pattern 'exec_used' in libs/python/computer/computer/computer.py:1404"}, "properties": {"repobilityId": "3e4291fc0739826f", "scanner": "scanner-primary", "fingerprint": "30d13f66951b200d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "exec_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/computer/computer/computer.py"}, "region": {"startLine": 1404}}}]}, {"ruleId": "scanner-3306b98d1b80ebbb", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in libs/python/computer/computer/ui/gradio/app.py:497"}, "properties": {"repobilityId": "026db28a9380d495", "scanner": "scanner-primary", "fingerprint": "3306b98d1b80ebbb", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/computer/computer/ui/gradio/app.py"}, "region": {"startLine": 497}}}]}, {"ruleId": "scanner-fe7a00ad89082b51", "level": "warning", "message": {"text": "Insecure pattern 'subprocess_shell_true' in libs/python/computer/computer/providers/lume_api.py:77"}, "properties": {"repobilityId": "f2e7b4af40e518c3", "scanner": "scanner-primary", "fingerprint": "fe7a00ad89082b51", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "subprocess_shell_true"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/computer/computer/providers/lume_api.py"}, "region": {"startLine": 77}}}]}, {"ruleId": "scanner-a23d25dc976ceab3", "level": "error", "message": {"text": "Possible secret in libs/python/core/cua_core/telemetry/posthog.py"}, "properties": {"repobilityId": "755e8017850bcf69", "scanner": "scanner-primary", "fingerprint": "a23d25dc976ceab3", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/core/cua_core/telemetry/posthog.py"}, "region": {"startLine": 20}}}]}, {"ruleId": "scanner-98f841ffda4f698e", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/openshot/linux/logs/transcript/index.html:321"}, "properties": {"repobilityId": "fb37773a31fd9e50", "scanner": "scanner-primary", "fingerprint": "98f841ffda4f698e", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/openshot/linux/logs/transcript/index.html"}, "region": {"startLine": 321}}}]}, {"ruleId": "scanner-a6d07b823bcf8d1b", "level": "warning", "message": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/openshot/linux/logs/transcript/index.html:387"}, "properties": {"repobilityId": "6112989dca941e58", "scanner": "scanner-primary", "fingerprint": "a6d07b823bcf8d1b", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "domparser_html_parse"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/openshot/linux/logs/transcript/index.html"}, "region": {"startLine": 387}}}]}, {"ruleId": "scanner-60028212dc21a261", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/openshot/linux/logs/transcript/page-001.html:936"}, "properties": {"repobilityId": "3e5fd4be816ca5a1", "scanner": "scanner-primary", "fingerprint": "60028212dc21a261", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/openshot/linux/logs/transcript/page-001.html"}, "region": {"startLine": 936}}}]}, {"ruleId": "scanner-ddb1223d72d902ec", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/genie3/linux/logs/transcript/index.html:288"}, "properties": {"repobilityId": "da652fe11701b53b", "scanner": "scanner-primary", "fingerprint": "ddb1223d72d902ec", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/genie3/linux/logs/transcript/index.html"}, "region": {"startLine": 288}}}]}, {"ruleId": "scanner-201d3871f8b6a418", "level": "warning", "message": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/genie3/linux/logs/transcript/index.html:354"}, "properties": {"repobilityId": "35359c5540b26104", "scanner": "scanner-primary", "fingerprint": "201d3871f8b6a418", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "domparser_html_parse"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/genie3/linux/logs/transcript/index.html"}, "region": {"startLine": 354}}}]}, {"ruleId": "scanner-650748f0a0b2ed40", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/genie3/linux/logs/transcript/page-001.html:276"}, "properties": {"repobilityId": "1b34fba92fb0681a", "scanner": "scanner-primary", "fingerprint": "650748f0a0b2ed40", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/genie3/linux/logs/transcript/page-001.html"}, "region": {"startLine": 276}}}]}, {"ruleId": "scanner-274ce0df5b91ece5", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/nmap/linux/logs/transcript/index.html:314"}, "properties": {"repobilityId": "a9e07e8ed202521e", "scanner": "scanner-primary", "fingerprint": "274ce0df5b91ece5", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/nmap/linux/logs/transcript/index.html"}, "region": {"startLine": 314}}}]}, {"ruleId": "scanner-5d21cda50328f81e", "level": "warning", "message": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/nmap/linux/logs/transcript/index.html:380"}, "properties": {"repobilityId": "4e4afee3121bcbfe", "scanner": "scanner-primary", "fingerprint": "5d21cda50328f81e", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "domparser_html_parse"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/nmap/linux/logs/transcript/index.html"}, "region": {"startLine": 380}}}]}, {"ruleId": "scanner-179e00242e35994e", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/nmap/linux/logs/transcript/page-001.html:750"}, "properties": {"repobilityId": "9148cab0d1d973cc", "scanner": "scanner-primary", "fingerprint": "179e00242e35994e", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/nmap/linux/logs/transcript/page-001.html"}, "region": {"startLine": 750}}}]}, {"ruleId": "scanner-62d0a13326cb5a77", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/docker/linux/logs/transcript/index.html:311"}, "properties": {"repobilityId": "0ad1934775244f91", "scanner": "scanner-primary", "fingerprint": "62d0a13326cb5a77", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/docker/linux/logs/transcript/index.html"}, "region": {"startLine": 311}}}]}, {"ruleId": "scanner-f0b794eb75c70379", "level": "warning", "message": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/docker/linux/logs/transcript/index.html:377"}, "properties": {"repobilityId": "8f280f2d0f64adab", "scanner": "scanner-primary", "fingerprint": "f0b794eb75c70379", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "domparser_html_parse"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/docker/linux/logs/transcript/index.html"}, "region": {"startLine": 377}}}]}, {"ruleId": "scanner-ccda15761c1d9fc3", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/docker/linux/logs/transcript/page-001.html:1631"}, "properties": {"repobilityId": "6cf4f995b9fd1933", "scanner": "scanner-primary", "fingerprint": "ccda15761c1d9fc3", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/docker/linux/logs/transcript/page-001.html"}, "region": {"startLine": 1631}}}]}, {"ruleId": "scanner-2f86b30e4bf67d48", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/eclipse-ide/linux/logs/transcript/index.html:319"}, "properties": {"repobilityId": "08cf568d7af44860", "scanner": "scanner-primary", "fingerprint": "2f86b30e4bf67d48", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/eclipse-ide/linux/logs/transcript/index.html"}, "region": {"startLine": 319}}}]}, {"ruleId": "scanner-e49674d1a577542f", "level": "warning", "message": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/eclipse-ide/linux/logs/transcript/index.html:385"}, "properties": {"repobilityId": "930f4a3d70f60d71", "scanner": "scanner-primary", "fingerprint": "e49674d1a577542f", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "domparser_html_parse"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/eclipse-ide/linux/logs/transcript/index.html"}, "region": {"startLine": 385}}}]}, {"ruleId": "scanner-f1e57377d317cd06", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/eclipse-ide/linux/logs/transcript/page-001.html:996"}, "properties": {"repobilityId": "7361da44f0c291e0", "scanner": "scanner-primary", "fingerprint": "f1e57377d317cd06", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/eclipse-ide/linux/logs/transcript/page-001.html"}, "region": {"startLine": 996}}}]}, {"ruleId": "scanner-3c7a6ef18a9df1c4", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/metasploit/linux/logs/transcript/index.html:335"}, "properties": {"repobilityId": "ac859ad347243f55", "scanner": "scanner-primary", "fingerprint": "3c7a6ef18a9df1c4", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/metasploit/linux/logs/transcript/index.html"}, "region": {"startLine": 335}}}]}, {"ruleId": "scanner-06b088e4eefbb129", "level": "warning", "message": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/metasploit/linux/logs/transcript/index.html:401"}, "properties": {"repobilityId": "68542c203bc72c8f", "scanner": "scanner-primary", "fingerprint": "06b088e4eefbb129", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "domparser_html_parse"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/metasploit/linux/logs/transcript/index.html"}, "region": {"startLine": 401}}}]}, {"ruleId": "scanner-9af0daf52d83323c", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/metasploit/linux/logs/transcript/page-001.html:2548"}, "properties": {"repobilityId": "fcf3e71a056a256b", "scanner": "scanner-primary", "fingerprint": "9af0daf52d83323c", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/metasploit/linux/logs/transcript/page-001.html"}, "region": {"startLine": 2548}}}]}, {"ruleId": "scanner-f10cfca557f29280", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/featurewiz/linux/logs/transcript/index.html:284"}, "properties": {"repobilityId": "56eb756e88e67e9e", "scanner": "scanner-primary", "fingerprint": "f10cfca557f29280", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/featurewiz/linux/logs/transcript/index.html"}, "region": {"startLine": 284}}}]}, {"ruleId": "scanner-766979045c03624d", "level": "warning", "message": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/featurewiz/linux/logs/transcript/index.html:350"}, "properties": {"repobilityId": "4bbbe193624c7ce9", "scanner": "scanner-primary", "fingerprint": "766979045c03624d", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "domparser_html_parse"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/featurewiz/linux/logs/transcript/index.html"}, "region": {"startLine": 350}}}]}, {"ruleId": "scanner-2887d978c4a0bd02", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/featurewiz/linux/logs/transcript/page-001.html:239"}, "properties": {"repobilityId": "c76219cf6528b478", "scanner": "scanner-primary", "fingerprint": "2887d978c4a0bd02", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/featurewiz/linux/logs/transcript/page-001.html"}, "region": {"startLine": 239}}}]}, {"ruleId": "scanner-a07e5fdaecd81b15", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/mysql/linux/logs/transcript/index.html:312"}, "properties": {"repobilityId": "48821ca412a7ec3c", "scanner": "scanner-primary", "fingerprint": "a07e5fdaecd81b15", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/mysql/linux/logs/transcript/index.html"}, "region": {"startLine": 312}}}]}, {"ruleId": "scanner-e525542023fdf624", "level": "warning", "message": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/mysql/linux/logs/transcript/index.html:378"}, "properties": {"repobilityId": "de5c92604d039975", "scanner": "scanner-primary", "fingerprint": "e525542023fdf624", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "domparser_html_parse"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/mysql/linux/logs/transcript/index.html"}, "region": {"startLine": 378}}}]}, {"ruleId": "scanner-afb4fa6bca5849ce", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/mysql/linux/logs/transcript/page-001.html:2165"}, "properties": {"repobilityId": "a6d8927983263544", "scanner": "scanner-primary", "fingerprint": "afb4fa6bca5849ce", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/mysql/linux/logs/transcript/page-001.html"}, "region": {"startLine": 2165}}}]}, {"ruleId": "scanner-6ccca27186c78791", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/gawk/linux/logs/transcript/index.html:322"}, "properties": {"repobilityId": "23fd608a0e3fc1e9", "scanner": "scanner-primary", "fingerprint": "6ccca27186c78791", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/gawk/linux/logs/transcript/index.html"}, "region": {"startLine": 322}}}]}, {"ruleId": "scanner-9aa6116dc6a05daf", "level": "warning", "message": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/gawk/linux/logs/transcript/index.html:388"}, "properties": {"repobilityId": "3505c8a06e0653c4", "scanner": "scanner-primary", "fingerprint": "9aa6116dc6a05daf", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "domparser_html_parse"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/gawk/linux/logs/transcript/index.html"}, "region": {"startLine": 388}}}]}, {"ruleId": "scanner-7701c6297a524439", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/gawk/linux/logs/transcript/page-001.html:1106"}, "properties": {"repobilityId": "d798323ecf2043cb", "scanner": "scanner-primary", "fingerprint": "7701c6297a524439", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/gawk/linux/logs/transcript/page-001.html"}, "region": {"startLine": 1106}}}]}, {"ruleId": "scanner-8edecedd878ff8df", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/systemd-hostnamed/linux/logs/transcript/index.html:309"}, "properties": {"repobilityId": "c41373a684b1d631", "scanner": "scanner-primary", "fingerprint": "8edecedd878ff8df", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/systemd-hostnamed/linux/logs/transcript/index.html"}, "region": {"startLine": 309}}}]}, {"ruleId": "scanner-5f4b77e886a32569", "level": "warning", "message": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/systemd-hostnamed/linux/logs/transcript/index.html:375"}, "properties": {"repobilityId": "f582bd60c5401360", "scanner": "scanner-primary", "fingerprint": "5f4b77e886a32569", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "domparser_html_parse"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/systemd-hostnamed/linux/logs/transcript/index.html"}, "region": {"startLine": 375}}}]}, {"ruleId": "scanner-e3cba6fc79d09539", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/systemd-hostnamed/linux/logs/transcript/page-001.html:1234"}, "properties": {"repobilityId": "cae8b44e218957b0", "scanner": "scanner-primary", "fingerprint": "e3cba6fc79d09539", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/systemd-hostnamed/linux/logs/transcript/page-001.html"}, "region": {"startLine": 1234}}}]}, {"ruleId": "scanner-4803b04da2731428", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/torch-points3d/linux/logs/transcript/index.html:295"}, "properties": {"repobilityId": "943fb5ebb06d659f", "scanner": "scanner-primary", "fingerprint": "4803b04da2731428", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/torch-points3d/linux/logs/transcript/index.html"}, "region": {"startLine": 295}}}]}, {"ruleId": "scanner-1fcb2e3038b5b419", "level": "warning", "message": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/torch-points3d/linux/logs/transcript/index.html:361"}, "properties": {"repobilityId": "045817ca4000993d", "scanner": "scanner-primary", "fingerprint": "1fcb2e3038b5b419", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "domparser_html_parse"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/torch-points3d/linux/logs/transcript/index.html"}, "region": {"startLine": 361}}}]}, {"ruleId": "scanner-6c08070bdf501628", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/torch-points3d/linux/logs/transcript/page-001.html:289"}, "properties": {"repobilityId": "f51a3f1938bbde8f", "scanner": "scanner-primary", "fingerprint": "6c08070bdf501628", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/torch-points3d/linux/logs/transcript/page-001.html"}, "region": {"startLine": 289}}}]}, {"ruleId": "scanner-dfc0e04c7a3e8d63", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/unity/linux/logs/transcript/index.html:306"}, "properties": {"repobilityId": "3ce65bd869459264", "scanner": "scanner-primary", "fingerprint": "dfc0e04c7a3e8d63", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/unity/linux/logs/transcript/index.html"}, "region": {"startLine": 306}}}]}, {"ruleId": "scanner-ef7a0e51a53f0fb8", "level": "warning", "message": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/unity/linux/logs/transcript/index.html:372"}, "properties": {"repobilityId": "9fed4ad70252f99e", "scanner": "scanner-primary", "fingerprint": "ef7a0e51a53f0fb8", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "domparser_html_parse"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/unity/linux/logs/transcript/index.html"}, "region": {"startLine": 372}}}]}, {"ruleId": "scanner-87080e5e2d74d301", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/unity/linux/logs/transcript/page-001.html:2363"}, "properties": {"repobilityId": "abba841995f97830", "scanner": "scanner-primary", "fingerprint": "87080e5e2d74d301", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/unity/linux/logs/transcript/page-001.html"}, "region": {"startLine": 2363}}}]}, {"ruleId": "scanner-545b07eecbf99e3b", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/wireshark/linux/logs/transcript/index.html:312"}, "properties": {"repobilityId": "214cb2065e07edab", "scanner": "scanner-primary", "fingerprint": "545b07eecbf99e3b", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/wireshark/linux/logs/transcript/index.html"}, "region": {"startLine": 312}}}]}, {"ruleId": "scanner-76d88060a560d6f3", "level": "warning", "message": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/wireshark/linux/logs/transcript/index.html:378"}, "properties": {"repobilityId": "aa2512fd947cf03d", "scanner": "scanner-primary", "fingerprint": "76d88060a560d6f3", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "domparser_html_parse"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/wireshark/linux/logs/transcript/index.html"}, "region": {"startLine": 378}}}]}, {"ruleId": "scanner-211434d7bb50a17f", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/wireshark/linux/logs/transcript/page-001.html:867"}, "properties": {"repobilityId": "f1a89f91b0bb1afd", "scanner": "scanner-primary", "fingerprint": "211434d7bb50a17f", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/wireshark/linux/logs/transcript/page-001.html"}, "region": {"startLine": 867}}}]}, {"ruleId": "scanner-94f1bc219fd0b1bf", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/visual-studio-code/linux/logs/transcript/index.html:313"}, "properties": {"repobilityId": "3593fddd62139e18", "scanner": "scanner-primary", "fingerprint": "94f1bc219fd0b1bf", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/visual-studio-code/linux/logs/transcript/index.html"}, "region": {"startLine": 313}}}]}, {"ruleId": "scanner-f0e1dddebda04dc4", "level": "warning", "message": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/visual-studio-code/linux/logs/transcript/index.html:379"}, "properties": {"repobilityId": "f14da2c5011a5041", "scanner": "scanner-primary", "fingerprint": "f0e1dddebda04dc4", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "domparser_html_parse"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/visual-studio-code/linux/logs/transcript/index.html"}, "region": {"startLine": 379}}}]}, {"ruleId": "scanner-06d9d4a0c1c7de28", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/visual-studio-code/linux/logs/transcript/page-001.html:1565"}, "properties": {"repobilityId": "04f3f2432659a36d", "scanner": "scanner-primary", "fingerprint": "06d9d4a0c1c7de28", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/visual-studio-code/linux/logs/transcript/page-001.html"}, "region": {"startLine": 1565}}}]}, {"ruleId": "scanner-e52a4d3a758e04e0", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/wazuh/linux/logs/transcript/index.html:327"}, "properties": {"repobilityId": "43f24e86a4522734", "scanner": "scanner-primary", "fingerprint": "e52a4d3a758e04e0", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/wazuh/linux/logs/transcript/index.html"}, "region": {"startLine": 327}}}]}, {"ruleId": "scanner-0c60a7a892a6a5c2", "level": "warning", "message": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/wazuh/linux/logs/transcript/index.html:393"}, "properties": {"repobilityId": "8b0a3efe0b5d3859", "scanner": "scanner-primary", "fingerprint": "0c60a7a892a6a5c2", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "domparser_html_parse"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/wazuh/linux/logs/transcript/index.html"}, "region": {"startLine": 393}}}]}, {"ruleId": "scanner-a034105f3a25b504", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/jenkins/linux/logs/transcript/index.html:313"}, "properties": {"repobilityId": "fc0d43078fa2d150", "scanner": "scanner-primary", "fingerprint": "a034105f3a25b504", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/jenkins/linux/logs/transcript/index.html"}, "region": {"startLine": 313}}}]}, {"ruleId": "scanner-2f62aecfd9cedede", "level": "warning", "message": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/jenkins/linux/logs/transcript/index.html:379"}, "properties": {"repobilityId": "abec669034285ae8", "scanner": "scanner-primary", "fingerprint": "2f62aecfd9cedede", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "domparser_html_parse"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/jenkins/linux/logs/transcript/index.html"}, "region": {"startLine": 379}}}]}, {"ruleId": "scanner-ea1ca9e102987af9", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/jenkins/linux/logs/transcript/page-001.html:1877"}, "properties": {"repobilityId": "f79c8fe45b4239ab", "scanner": "scanner-primary", "fingerprint": "ea1ca9e102987af9", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/jenkins/linux/logs/transcript/page-001.html"}, "region": {"startLine": 1877}}}]}, {"ruleId": "scanner-985c5e466b7b1895", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/neovim/linux/logs/transcript/index.html:301"}, "properties": {"repobilityId": "6864b1171a02f3ff", "scanner": "scanner-primary", "fingerprint": "985c5e466b7b1895", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/neovim/linux/logs/transcript/index.html"}, "region": {"startLine": 301}}}]}, {"ruleId": "scanner-915645918c390698", "level": "warning", "message": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/neovim/linux/logs/transcript/index.html:367"}, "properties": {"repobilityId": "7beb37a1cdf86fb1", "scanner": "scanner-primary", "fingerprint": "915645918c390698", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "domparser_html_parse"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/neovim/linux/logs/transcript/index.html"}, "region": {"startLine": 367}}}]}, {"ruleId": "scanner-0b4ce1f839ab0cc0", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/neovim/linux/logs/transcript/page-001.html:894"}, "properties": {"repobilityId": "6d95a1336a96014e", "scanner": "scanner-primary", "fingerprint": "0b4ce1f839ab0cc0", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/neovim/linux/logs/transcript/page-001.html"}, "region": {"startLine": 894}}}]}, {"ruleId": "scanner-2a6126b60d6310a8", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/apache-cassandra/linux/logs/transcript/index.html:324"}, "properties": {"repobilityId": "33aa865540ca015e", "scanner": "scanner-primary", "fingerprint": "2a6126b60d6310a8", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/apache-cassandra/linux/logs/transcript/index.html"}, "region": {"startLine": 324}}}]}, {"ruleId": "scanner-8c83129d45e11aad", "level": "warning", "message": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/apache-cassandra/linux/logs/transcript/index.html:390"}, "properties": {"repobilityId": "b42f7ce7caa8e501", "scanner": "scanner-primary", "fingerprint": "8c83129d45e11aad", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "domparser_html_parse"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/apache-cassandra/linux/logs/transcript/index.html"}, "region": {"startLine": 390}}}]}, {"ruleId": "scanner-2750a16f47bbf4de", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/apache-cassandra/linux/logs/transcript/page-001.html:1456"}, "properties": {"repobilityId": "c81ceb5820844de0", "scanner": "scanner-primary", "fingerprint": "2750a16f47bbf4de", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/apache-cassandra/linux/logs/transcript/page-001.html"}, "region": {"startLine": 1456}}}]}, {"ruleId": "scanner-b4151a3d0b1d1f36", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/puppet/linux/logs/transcript/index.html:314"}, "properties": {"repobilityId": "a292294447e988e1", "scanner": "scanner-primary", "fingerprint": "b4151a3d0b1d1f36", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/puppet/linux/logs/transcript/index.html"}, "region": {"startLine": 314}}}]}, {"ruleId": "scanner-2865ad3076407c02", "level": "warning", "message": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/puppet/linux/logs/transcript/index.html:380"}, "properties": {"repobilityId": "a79a7ceaa2ba93c3", "scanner": "scanner-primary", "fingerprint": "2865ad3076407c02", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "domparser_html_parse"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/puppet/linux/logs/transcript/index.html"}, "region": {"startLine": 380}}}]}, {"ruleId": "scanner-8d9e66c8217443e2", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/puppet/linux/logs/transcript/page-001.html:967"}, "properties": {"repobilityId": "664f60d1eb9e8835", "scanner": "scanner-primary", "fingerprint": "8d9e66c8217443e2", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/puppet/linux/logs/transcript/page-001.html"}, "region": {"startLine": 967}}}]}, {"ruleId": "scanner-b1f78fc85784e628", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/git/linux/logs/transcript/index.html:339"}, "properties": {"repobilityId": "1dd58991e077db89", "scanner": "scanner-primary", "fingerprint": "b1f78fc85784e628", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/git/linux/logs/transcript/index.html"}, "region": {"startLine": 339}}}]}, {"ruleId": "scanner-c734267c4dd04ae3", "level": "warning", "message": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/git/linux/logs/transcript/index.html:405"}, "properties": {"repobilityId": "3713f313f57db8e6", "scanner": "scanner-primary", "fingerprint": "c734267c4dd04ae3", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "domparser_html_parse"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/git/linux/logs/transcript/index.html"}, "region": {"startLine": 405}}}]}, {"ruleId": "scanner-08ca41e9c5352eeb", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/git/linux/logs/transcript/page-001.html:774"}, "properties": {"repobilityId": "7fc30c68cf9876d7", "scanner": "scanner-primary", "fingerprint": "08ca41e9c5352eeb", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/git/linux/logs/transcript/page-001.html"}, "region": {"startLine": 774}}}]}, {"ruleId": "scanner-d5a8e97e38509af3", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/redis/linux/logs/transcript/index.html:305"}, "properties": {"repobilityId": "2a707e426df0798c", "scanner": "scanner-primary", "fingerprint": "d5a8e97e38509af3", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/redis/linux/logs/transcript/index.html"}, "region": {"startLine": 305}}}]}, {"ruleId": "scanner-05cd356ddcbaa3be", "level": "warning", "message": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/redis/linux/logs/transcript/index.html:371"}, "properties": {"repobilityId": "a7953d8d36b440f1", "scanner": "scanner-primary", "fingerprint": "05cd356ddcbaa3be", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "domparser_html_parse"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/redis/linux/logs/transcript/index.html"}, "region": {"startLine": 371}}}]}, {"ruleId": "scanner-a15aaf931c628b6d", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/redis/linux/logs/transcript/page-001.html:1113"}, "properties": {"repobilityId": "0dcda7e9782635ff", "scanner": "scanner-primary", "fingerprint": "a15aaf931c628b6d", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/redis/linux/logs/transcript/page-001.html"}, "region": {"startLine": 1113}}}]}, {"ruleId": "scanner-4795738b4d0e004b", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/kubernetes/linux/logs/transcript/index.html:330"}, "properties": {"repobilityId": "e0cda4a472c90c4f", "scanner": "scanner-primary", "fingerprint": "4795738b4d0e004b", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/kubernetes/linux/logs/transcript/index.html"}, "region": {"startLine": 330}}}]}, {"ruleId": "scanner-f127bf43447140d8", "level": "warning", "message": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/kubernetes/linux/logs/transcript/index.html:396"}, "properties": {"repobilityId": "9800ab1989597502", "scanner": "scanner-primary", "fingerprint": "f127bf43447140d8", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "domparser_html_parse"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/kubernetes/linux/logs/transcript/index.html"}, "region": {"startLine": 396}}}]}, {"ruleId": "scanner-3bbd01c0df7ed5d7", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/kubernetes/linux/logs/transcript/page-001.html:2140"}, "properties": {"repobilityId": "c842a584b791a4f0", "scanner": "scanner-primary", "fingerprint": "3bbd01c0df7ed5d7", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/kubernetes/linux/logs/transcript/page-001.html"}, "region": {"startLine": 2140}}}]}, {"ruleId": "scanner-b07582f10ac39c49", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/gitlab/linux/logs/transcript/index.html:377"}, "properties": {"repobilityId": "9f1f574c2312d57a", "scanner": "scanner-primary", "fingerprint": "b07582f10ac39c49", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/gitlab/linux/logs/transcript/index.html"}, "region": {"startLine": 377}}}]}, {"ruleId": "scanner-80818f3023cf426c", "level": "warning", "message": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/gitlab/linux/logs/transcript/index.html:443"}, "properties": {"repobilityId": "d9af1d7c1bed35f4", "scanner": "scanner-primary", "fingerprint": "80818f3023cf426c", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "domparser_html_parse"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/gitlab/linux/logs/transcript/index.html"}, "region": {"startLine": 443}}}]}, {"ruleId": "scanner-6d7ac47f60ee4d71", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/gitlab/linux/logs/transcript/page-001.html:4931"}, "properties": {"repobilityId": "d8580afe9a084eed", "scanner": "scanner-primary", "fingerprint": "6d7ac47f60ee4d71", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/gitlab/linux/logs/transcript/page-001.html"}, "region": {"startLine": 4931}}}]}, {"ruleId": "scanner-07bff925187b313f", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/gitlab/linux/logs/transcript/page-001.html:660"}, "properties": {"repobilityId": "33e4913bdb6fcd72", "scanner": "scanner-primary", "fingerprint": "07bff925187b313f", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/gitlab/linux/logs/transcript/page-001.html"}, "region": {"startLine": 660}}}]}, {"ruleId": "scanner-f371f06fd5429d83", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/azure-data-studio/linux/logs/transcript/index.html:309"}, "properties": {"repobilityId": "e6e6d2e097e87d80", "scanner": "scanner-primary", "fingerprint": "f371f06fd5429d83", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/azure-data-studio/linux/logs/transcript/index.html"}, "region": {"startLine": 309}}}]}, {"ruleId": "scanner-96c221d31139b474", "level": "warning", "message": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/azure-data-studio/linux/logs/transcript/index.html:375"}, "properties": {"repobilityId": "4a20e549c637e789", "scanner": "scanner-primary", "fingerprint": "96c221d31139b474", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "domparser_html_parse"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/azure-data-studio/linux/logs/transcript/index.html"}, "region": {"startLine": 375}}}]}, {"ruleId": "scanner-fef94a3569cd8730", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/azure-data-studio/linux/logs/transcript/page-001.html:1991"}, "properties": {"repobilityId": "f155e5bd56ae890a", "scanner": "scanner-primary", "fingerprint": "fef94a3569cd8730", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/azure-data-studio/linux/logs/transcript/page-001.html"}, "region": {"startLine": 1991}}}]}, {"ruleId": "scanner-cedc897f71e49c20", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/ansible/linux/logs/transcript/index.html:318"}, "properties": {"repobilityId": "65b0633e1e5dba84", "scanner": "scanner-primary", "fingerprint": "cedc897f71e49c20", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/ansible/linux/logs/transcript/index.html"}, "region": {"startLine": 318}}}]}, {"ruleId": "scanner-5d47059f33aa251b", "level": "warning", "message": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/ansible/linux/logs/transcript/index.html:384"}, "properties": {"repobilityId": "08f123bfec8d2afa", "scanner": "scanner-primary", "fingerprint": "5d47059f33aa251b", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "domparser_html_parse"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/ansible/linux/logs/transcript/index.html"}, "region": {"startLine": 384}}}]}, {"ruleId": "scanner-14ff2b824853a678", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/ansible/linux/logs/transcript/page-001.html:1133"}, "properties": {"repobilityId": "26432477bc831877", "scanner": "scanner-primary", "fingerprint": "14ff2b824853a678", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/ansible/linux/logs/transcript/page-001.html"}, "region": {"startLine": 1133}}}]}, {"ruleId": "scanner-3be6e547364e9430", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/lit/linux/logs/transcript/index.html:286"}, "properties": {"repobilityId": "5026f9e39758bc87", "scanner": "scanner-primary", "fingerprint": "3be6e547364e9430", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/lit/linux/logs/transcript/index.html"}, "region": {"startLine": 286}}}]}, {"ruleId": "scanner-bef1488919289611", "level": "warning", "message": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/lit/linux/logs/transcript/index.html:352"}, "properties": {"repobilityId": "1c5c864a7120b721", "scanner": "scanner-primary", "fingerprint": "bef1488919289611", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "domparser_html_parse"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/lit/linux/logs/transcript/index.html"}, "region": {"startLine": 352}}}]}, {"ruleId": "scanner-0614429c30c9f164", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/lit/linux/logs/transcript/page-001.html:224"}, "properties": {"repobilityId": "da246262d4a9b895", "scanner": "scanner-primary", "fingerprint": "0614429c30c9f164", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/lit/linux/logs/transcript/page-001.html"}, "region": {"startLine": 224}}}]}, {"ruleId": "scanner-4c09fd636feb8b99", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/pycharm/linux/logs/transcript/index.html:313"}, "properties": {"repobilityId": "a07e8805da55bd6d", "scanner": "scanner-primary", "fingerprint": "4c09fd636feb8b99", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/pycharm/linux/logs/transcript/index.html"}, "region": {"startLine": 313}}}]}, {"ruleId": "scanner-54f0fc8e3fc05ef7", "level": "warning", "message": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/pycharm/linux/logs/transcript/index.html:379"}, "properties": {"repobilityId": "f87e3a843986beec", "scanner": "scanner-primary", "fingerprint": "54f0fc8e3fc05ef7", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "domparser_html_parse"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/pycharm/linux/logs/transcript/index.html"}, "region": {"startLine": 379}}}]}, {"ruleId": "scanner-9232015ce658fecc", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/netbeans/linux/logs/transcript/index.html:315"}, "properties": {"repobilityId": "20ec831b21ecdf88", "scanner": "scanner-primary", "fingerprint": "9232015ce658fecc", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/netbeans/linux/logs/transcript/index.html"}, "region": {"startLine": 315}}}]}, {"ruleId": "scanner-262b4ddcb6ab719b", "level": "warning", "message": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/netbeans/linux/logs/transcript/index.html:381"}, "properties": {"repobilityId": "99f85a7bcfda07ff", "scanner": "scanner-primary", "fingerprint": "262b4ddcb6ab719b", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "domparser_html_parse"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/netbeans/linux/logs/transcript/index.html"}, "region": {"startLine": 381}}}]}, {"ruleId": "scanner-b26619b3255ca72a", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/netbeans/linux/logs/transcript/page-001.html:2876"}, "properties": {"repobilityId": "203e74a74a71696b", "scanner": "scanner-primary", "fingerprint": "b26619b3255ca72a", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/netbeans/linux/logs/transcript/page-001.html"}, "region": {"startLine": 2876}}}]}, {"ruleId": "scanner-480afaecf01eed38", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/postgresql/linux/logs/transcript/index.html:307"}, "properties": {"repobilityId": "4a80138a70acb6bf", "scanner": "scanner-primary", "fingerprint": "480afaecf01eed38", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/postgresql/linux/logs/transcript/index.html"}, "region": {"startLine": 307}}}]}, {"ruleId": "scanner-0f4207e354b888cb", "level": "warning", "message": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/postgresql/linux/logs/transcript/index.html:373"}, "properties": {"repobilityId": "8f0cf26e089e56ef", "scanner": "scanner-primary", "fingerprint": "0f4207e354b888cb", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "domparser_html_parse"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/postgresql/linux/logs/transcript/index.html"}, "region": {"startLine": 373}}}]}, {"ruleId": "scanner-299b9d1211437983", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/postgresql/linux/logs/transcript/page-001.html:1479"}, "properties": {"repobilityId": "915df7aa1617f18e", "scanner": "scanner-primary", "fingerprint": "299b9d1211437983", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/postgresql/linux/logs/transcript/page-001.html"}, "region": {"startLine": 1479}}}]}, {"ruleId": "scanner-8927d400caa186d5", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/pgadmin/linux/logs/transcript/index.html:315"}, "properties": {"repobilityId": "42e28ebc3fa912b3", "scanner": "scanner-primary", "fingerprint": "8927d400caa186d5", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/pgadmin/linux/logs/transcript/index.html"}, "region": {"startLine": 315}}}]}, {"ruleId": "scanner-9d087b4e4fcdeb15", "level": "warning", "message": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/pgadmin/linux/logs/transcript/index.html:381"}, "properties": {"repobilityId": "e8ef85d725af1c91", "scanner": "scanner-primary", "fingerprint": "9d087b4e4fcdeb15", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "domparser_html_parse"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/pgadmin/linux/logs/transcript/index.html"}, "region": {"startLine": 381}}}]}, {"ruleId": "scanner-50d800eddb900f25", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/mariadb/linux/logs/transcript/index.html:311"}, "properties": {"repobilityId": "9511b1b5eb4b28a4", "scanner": "scanner-primary", "fingerprint": "50d800eddb900f25", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/mariadb/linux/logs/transcript/index.html"}, "region": {"startLine": 311}}}]}, {"ruleId": "scanner-1ba16515427b3512", "level": "warning", "message": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/mariadb/linux/logs/transcript/index.html:377"}, "properties": {"repobilityId": "4a99b0aed3524ee1", "scanner": "scanner-primary", "fingerprint": "1ba16515427b3512", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "domparser_html_parse"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/mariadb/linux/logs/transcript/index.html"}, "region": {"startLine": 377}}}]}, {"ruleId": "scanner-8d3c361b0517bb80", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/mariadb/linux/logs/transcript/page-001.html:1070"}, "properties": {"repobilityId": "8097abf4ae88378e", "scanner": "scanner-primary", "fingerprint": "8d3c361b0517bb80", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/mariadb/linux/logs/transcript/page-001.html"}, "region": {"startLine": 1070}}}]}, {"ruleId": "scanner-50789fed72f7b5c9", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/vim/linux/logs/transcript/index.html:303"}, "properties": {"repobilityId": "747a9a738803cbf1", "scanner": "scanner-primary", "fingerprint": "50789fed72f7b5c9", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/vim/linux/logs/transcript/index.html"}, "region": {"startLine": 303}}}]}, {"ruleId": "scanner-1e0dc24dbae25aed", "level": "warning", "message": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/vim/linux/logs/transcript/index.html:369"}, "properties": {"repobilityId": "307238eca747feb7", "scanner": "scanner-primary", "fingerprint": "1e0dc24dbae25aed", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "domparser_html_parse"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/vim/linux/logs/transcript/index.html"}, "region": {"startLine": 369}}}]}, {"ruleId": "scanner-4b82b637f320a664", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/vim/linux/logs/transcript/page-001.html:878"}, "properties": {"repobilityId": "4c44d56740ba6723", "scanner": "scanner-primary", "fingerprint": "4b82b637f320a664", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/vim/linux/logs/transcript/page-001.html"}, "region": {"startLine": 878}}}]}, {"ruleId": "scanner-a1489b3686f34066", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/gin/linux/logs/transcript/index.html:286"}, "properties": {"repobilityId": "92ef0b5a6c2410bf", "scanner": "scanner-primary", "fingerprint": "a1489b3686f34066", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/gin/linux/logs/transcript/index.html"}, "region": {"startLine": 286}}}]}, {"ruleId": "scanner-b057ae9ba9c893fd", "level": "warning", "message": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/gin/linux/logs/transcript/index.html:352"}, "properties": {"repobilityId": "04ccdfbc3e8deb31", "scanner": "scanner-primary", "fingerprint": "b057ae9ba9c893fd", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "domparser_html_parse"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/gin/linux/logs/transcript/index.html"}, "region": {"startLine": 352}}}]}, {"ruleId": "scanner-ebf1fb01fb84f25e", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/gin/linux/logs/transcript/page-001.html:251"}, "properties": {"repobilityId": "433722b7a70abe9b", "scanner": "scanner-primary", "fingerprint": "ebf1fb01fb84f25e", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/gin/linux/logs/transcript/page-001.html"}, "region": {"startLine": 251}}}]}, {"ruleId": "scanner-df1bb809a2845c1d", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/emacs/linux/logs/transcript/index.html:309"}, "properties": {"repobilityId": "dd3516dd724e5195", "scanner": "scanner-primary", "fingerprint": "df1bb809a2845c1d", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/emacs/linux/logs/transcript/index.html"}, "region": {"startLine": 309}}}]}, {"ruleId": "scanner-86a8ee4c1c35eaf0", "level": "warning", "message": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/emacs/linux/logs/transcript/index.html:375"}, "properties": {"repobilityId": "dd6c6ab3487e2779", "scanner": "scanner-primary", "fingerprint": "86a8ee4c1c35eaf0", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "domparser_html_parse"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/emacs/linux/logs/transcript/index.html"}, "region": {"startLine": 375}}}]}, {"ruleId": "scanner-f59e9cadb5168e5a", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/emacs/linux/logs/transcript/page-001.html:697"}, "properties": {"repobilityId": "1fa64e9c3d8bad81", "scanner": "scanner-primary", "fingerprint": "f59e9cadb5168e5a", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/emacs/linux/logs/transcript/page-001.html"}, "region": {"startLine": 697}}}]}, {"ruleId": "scanner-0dea1a4a842bd7ad", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/dbeaver/linux/logs/transcript/index.html:319"}, "properties": {"repobilityId": "1e645a8b65a6eee3", "scanner": "scanner-primary", "fingerprint": "0dea1a4a842bd7ad", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/dbeaver/linux/logs/transcript/index.html"}, "region": {"startLine": 319}}}]}, {"ruleId": "scanner-f2361fb5ee71762b", "level": "warning", "message": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/dbeaver/linux/logs/transcript/index.html:385"}, "properties": {"repobilityId": "9391b59862ccfa7b", "scanner": "scanner-primary", "fingerprint": "f2361fb5ee71762b", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "domparser_html_parse"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/dbeaver/linux/logs/transcript/index.html"}, "region": {"startLine": 385}}}]}, {"ruleId": "scanner-0841d374d2e1ed76", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/dbeaver/linux/logs/transcript/page-001.html:2101"}, "properties": {"repobilityId": "57cd495cc1abdab6", "scanner": "scanner-primary", "fingerprint": "0841d374d2e1ed76", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/dbeaver/linux/logs/transcript/page-001.html"}, "region": {"startLine": 2101}}}]}, {"ruleId": "scanner-4fc188a47203c27a", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/godot-engine/linux/logs/transcript/index.html:300"}, "properties": {"repobilityId": "ae408461b1db6f82", "scanner": "scanner-primary", "fingerprint": "4fc188a47203c27a", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/godot-engine/linux/logs/transcript/index.html"}, "region": {"startLine": 300}}}]}, {"ruleId": "scanner-ff60088b703da87e", "level": "warning", "message": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/godot-engine/linux/logs/transcript/index.html:366"}, "properties": {"repobilityId": "74ff850216f4a4ff", "scanner": "scanner-primary", "fingerprint": "ff60088b703da87e", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "domparser_html_parse"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/godot-engine/linux/logs/transcript/index.html"}, "region": {"startLine": 366}}}]}, {"ruleId": "scanner-5ef5b42b72296ded", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/godot-engine/linux/logs/transcript/page-001.html:1072"}, "properties": {"repobilityId": "4fbb2e0d0539c330", "scanner": "scanner-primary", "fingerprint": "5ef5b42b72296ded", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/godot-engine/linux/logs/transcript/page-001.html"}, "region": {"startLine": 1072}}}]}, {"ruleId": "scanner-20c32a46797caf14", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/elasticsearch/linux/logs/transcript/index.html:315"}, "properties": {"repobilityId": "bc85681f1861cc7f", "scanner": "scanner-primary", "fingerprint": "20c32a46797caf14", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/elasticsearch/linux/logs/transcript/index.html"}, "region": {"startLine": 315}}}]}, {"ruleId": "scanner-041cbd213f3dd457", "level": "warning", "message": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/elasticsearch/linux/logs/transcript/index.html:381"}, "properties": {"repobilityId": "e1f66103dde9d929", "scanner": "scanner-primary", "fingerprint": "041cbd213f3dd457", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "domparser_html_parse"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/elasticsearch/linux/logs/transcript/index.html"}, "region": {"startLine": 381}}}]}, {"ruleId": "scanner-758f5c972aaa16ca", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/elasticsearch/linux/logs/transcript/page-001.html:2035"}, "properties": {"repobilityId": "b50c4e28617e6235", "scanner": "scanner-primary", "fingerprint": "758f5c972aaa16ca", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/elasticsearch/linux/logs/transcript/page-001.html"}, "region": {"startLine": 2035}}}]}, {"ruleId": "scanner-69ab55d307b00c9d", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/intellij-idea/linux/logs/transcript/index.html:335"}, "properties": {"repobilityId": "50a54b2ad822dd5e", "scanner": "scanner-primary", "fingerprint": "69ab55d307b00c9d", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/intellij-idea/linux/logs/transcript/index.html"}, "region": {"startLine": 335}}}]}, {"ruleId": "scanner-0316041d84c72098", "level": "warning", "message": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/intellij-idea/linux/logs/transcript/index.html:401"}, "properties": {"repobilityId": "e0361a73e312bd4a", "scanner": "scanner-primary", "fingerprint": "0316041d84c72098", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "domparser_html_parse"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/intellij-idea/linux/logs/transcript/index.html"}, "region": {"startLine": 401}}}]}, {"ruleId": "scanner-8e526f258894c25c", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/intellij-idea/linux/logs/transcript/page-001.html:2498"}, "properties": {"repobilityId": "cdf13eea9343043b", "scanner": "scanner-primary", "fingerprint": "8e526f258894c25c", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/intellij-idea/linux/logs/transcript/page-001.html"}, "region": {"startLine": 2498}}}]}, {"ruleId": "scanner-ffd92899b6029572", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/chef/linux/logs/transcript/index.html:319"}, "properties": {"repobilityId": "e16301a7ca1c6ceb", "scanner": "scanner-primary", "fingerprint": "ffd92899b6029572", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/chef/linux/logs/transcript/index.html"}, "region": {"startLine": 319}}}]}, {"ruleId": "scanner-e97506cac0d85488", "level": "warning", "message": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/chef/linux/logs/transcript/index.html:385"}, "properties": {"repobilityId": "1d15db37a36071f7", "scanner": "scanner-primary", "fingerprint": "e97506cac0d85488", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "domparser_html_parse"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/chef/linux/logs/transcript/index.html"}, "region": {"startLine": 385}}}]}, {"ruleId": "scanner-737be9bad3500d99", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/chef/linux/logs/transcript/page-001.html:1609"}, "properties": {"repobilityId": "041af44ab92cf04c", "scanner": "scanner-primary", "fingerprint": "737be9bad3500d99", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/chef/linux/logs/transcript/page-001.html"}, "region": {"startLine": 1609}}}]}, {"ruleId": "scanner-c107670c31f33915", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/raneto/linux/logs/transcript/index.html:332"}, "properties": {"repobilityId": "d8484cca8e7232ab", "scanner": "scanner-primary", "fingerprint": "c107670c31f33915", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/raneto/linux/logs/transcript/index.html"}, "region": {"startLine": 332}}}]}, {"ruleId": "scanner-0195ead2ffc56e0f", "level": "warning", "message": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/raneto/linux/logs/transcript/index.html:398"}, "properties": {"repobilityId": "7ae45443c047850d", "scanner": "scanner-primary", "fingerprint": "0195ead2ffc56e0f", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "domparser_html_parse"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/raneto/linux/logs/transcript/index.html"}, "region": {"startLine": 398}}}]}, {"ruleId": "scanner-9d4ffd1d8892bc0e", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/raneto/linux/logs/transcript/page-001.html:1950"}, "properties": {"repobilityId": "1b5c7a5efd91f122", "scanner": "scanner-primary", "fingerprint": "9d4ffd1d8892bc0e", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/raneto/linux/logs/transcript/page-001.html"}, "region": {"startLine": 1950}}}]}, {"ruleId": "scanner-60820b50ae2abe11", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/sqlite/linux/logs/transcript/index.html:324"}, "properties": {"repobilityId": "52921c5a9d701516", "scanner": "scanner-primary", "fingerprint": "60820b50ae2abe11", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/sqlite/linux/logs/transcript/index.html"}, "region": {"startLine": 324}}}]}, {"ruleId": "scanner-0d9e1b30f9f776e0", "level": "warning", "message": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/sqlite/linux/logs/transcript/index.html:390"}, "properties": {"repobilityId": "4cf5490bcb4279df", "scanner": "scanner-primary", "fingerprint": "0d9e1b30f9f776e0", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "domparser_html_parse"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/sqlite/linux/logs/transcript/index.html"}, "region": {"startLine": 390}}}]}, {"ruleId": "scanner-3b0fb8172fc7ea2d", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/sqlite/linux/logs/transcript/page-001.html:1435"}, "properties": {"repobilityId": "b44bfc5afc6af28f", "scanner": "scanner-primary", "fingerprint": "3b0fb8172fc7ea2d", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/sqlite/linux/logs/transcript/page-001.html"}, "region": {"startLine": 1435}}}]}, {"ruleId": "scanner-eae47f1e74e99c0c", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/github-actions/linux/logs/transcript/index.html:332"}, "properties": {"repobilityId": "95b1a8496bf5ba12", "scanner": "scanner-primary", "fingerprint": "eae47f1e74e99c0c", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/github-actions/linux/logs/transcript/index.html"}, "region": {"startLine": 332}}}]}, {"ruleId": "scanner-9fbb2b3b7d746a27", "level": "warning", "message": {"text": "Insecure pattern 'domparser_html_parse' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/github-actions/linux/logs/transcript/index.html:398"}, "properties": {"repobilityId": "84bf416dacb26d28", "scanner": "scanner-primary", "fingerprint": "9fbb2b3b7d746a27", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "domparser_html_parse"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/github-actions/linux/logs/transcript/index.html"}, "region": {"startLine": 398}}}]}, {"ruleId": "scanner-f696db7db7fa3b25", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/github-actions/linux/logs/transcript/page-001.html:1416"}, "properties": {"repobilityId": "9c1c7a279c37cace", "scanner": "scanner-primary", "fingerprint": "f696db7db7fa3b25", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox-apps/cua_sandbox_apps/apps/github-actions/linux/logs/transcript/page-001.html"}, "region": {"startLine": 1416}}}]}, {"ruleId": "scanner-c0a036fc5e33b7e4", "level": "warning", "message": {"text": "Insecure pattern 'subprocess_shell_true' in libs/python/cua-cli/cua_cli/auth/browser.py:95"}, "properties": {"repobilityId": "62398e688493ad27", "scanner": "scanner-primary", "fingerprint": "c0a036fc5e33b7e4", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "subprocess_shell_true"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-cli/cua_cli/auth/browser.py"}, "region": {"startLine": 95}}}]}, {"ruleId": "scanner-f2fa4da1b17e03ed", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in libs/python/cua-sandbox/cua_sandbox/runtime/_bw_init.js:20"}, "properties": {"repobilityId": "57e2f0f3b726457c", "scanner": "scanner-primary", "fingerprint": "f2fa4da1b17e03ed", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox/cua_sandbox/runtime/_bw_init.js"}, "region": {"startLine": 20}}}]}, {"ruleId": "scanner-a31b4028f375d332", "level": "warning", "message": {"text": "Insecure pattern 'subprocess_shell_true' in libs/python/cua-auto/cua_auto/window.py:187"}, "properties": {"repobilityId": "f94dfb62487a81ba", "scanner": "scanner-primary", "fingerprint": "a31b4028f375d332", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "subprocess_shell_true"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-auto/cua_auto/window.py"}, "region": {"startLine": 187}}}]}, {"ruleId": "scanner-9a9e5d32856e39b6", "level": "warning", "message": {"text": "Insecure pattern 'subprocess_shell_true' in libs/python/cua-auto/cua_auto/shell.py:38"}, "properties": {"repobilityId": "c8f00ea88d2cd953", "scanner": "scanner-primary", "fingerprint": "9a9e5d32856e39b6", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "subprocess_shell_true"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-auto/cua_auto/shell.py"}, "region": {"startLine": 38}}}]}, {"ruleId": "scanner-6ba3436f70c3f5b7", "level": "error", "message": {"text": "Possible secret in .github/workflows/cd-swift-cua-driver.yml"}, "properties": {"repobilityId": "22de9d1443a5849a", "scanner": "scanner-primary", "fingerprint": "6ba3436f70c3f5b7", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/cd-swift-cua-driver.yml"}, "region": {"startLine": 99}}}]}, {"ruleId": "scanner-76f1bda3fe2c8594", "level": "error", "message": {"text": "Possible secret in .github/workflows/cd-swift-lume.yml"}, "properties": {"repobilityId": "2b5322b3e0107be8", "scanner": "scanner-primary", "fingerprint": "76f1bda3fe2c8594", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/cd-swift-lume.yml"}, "region": {"startLine": 101}}}]}, {"ruleId": "scanner-a42ac57523b50d6b", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "adfc8da6b0efc250", "scanner": "scanner-primary", "fingerprint": "a42ac57523b50d6b", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/nix-screenshot.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fc2e4ca7d5e933e9", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "9bfd50a0d78a1e3a", "scanner": "scanner-primary", "fingerprint": "fc2e4ca7d5e933e9", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/claude-auto-fix.yml"}, "region": {"startLine": 26}}}]}, {"ruleId": "scanner-fc2e4ca7d5e933e9", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "9bfd50a0d78a1e3a", "scanner": "scanner-primary", "fingerprint": "fc2e4ca7d5e933e9", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/claude-auto-fix.yml"}, "region": {"startLine": 111}}}]}, {"ruleId": "scanner-fc2e4ca7d5e933e9", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "c76a2483ea81947b", "scanner": "scanner-primary", "fingerprint": "fc2e4ca7d5e933e9", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/claude-auto-fix.yml"}, "region": {"startLine": 139}}}]}, {"ruleId": "scanner-fc2e4ca7d5e933e9", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "9535909d7b41eb20", "scanner": "scanner-primary", "fingerprint": "fc2e4ca7d5e933e9", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/claude-auto-fix.yml"}, "region": {"startLine": 159}}}]}, {"ruleId": "scanner-fc2e4ca7d5e933e9", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "6783e5523634cd4e", "scanner": "scanner-primary", "fingerprint": "fc2e4ca7d5e933e9", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/claude-auto-fix.yml"}, "region": {"startLine": 166}}}]}, {"ruleId": "scanner-fc2e4ca7d5e933e9", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "b080f48ddc215b3d", "scanner": "scanner-primary", "fingerprint": "fc2e4ca7d5e933e9", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/claude-auto-fix.yml"}, "region": {"startLine": 172}}}]}, {"ruleId": "scanner-fc2e4ca7d5e933e9", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "3a3f5cf0da304db9", "scanner": "scanner-primary", "fingerprint": "fc2e4ca7d5e933e9", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/claude-auto-fix.yml"}, "region": {"startLine": 196}}}]}, {"ruleId": "scanner-fc2e4ca7d5e933e9", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "9bfd50a0d78a1e3a", "scanner": "scanner-primary", "fingerprint": "fc2e4ca7d5e933e9", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/claude-auto-fix.yml"}, "region": {"startLine": 361}}}]}, {"ruleId": "scanner-37256797d4a79cb0", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "3c0247656049db3b", "scanner": "scanner-primary", "fingerprint": "37256797d4a79cb0", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/claude-auto-fix.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-73b7ed975b3d1e53", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "2b999ee0b800dcbb", "scanner": "scanner-primary", "fingerprint": "73b7ed975b3d1e53", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/cd-ts-cuabot.yml"}, "region": {"startLine": 33}}}]}, {"ruleId": "scanner-33a2498b600ca2ad", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "c6cd0ef3aff6247f", "scanner": "scanner-primary", "fingerprint": "33a2498b600ca2ad", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/cd-ts-cuabot.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c94fbd68c5976008", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "3d600e83909da922", "scanner": "scanner-primary", "fingerprint": "c94fbd68c5976008", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ts-reusable-build.yml"}, "region": {"startLine": 26}}}]}, {"ruleId": "scanner-c94fbd68c5976008", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "cf06cf647e6759fb", "scanner": "scanner-primary", "fingerprint": "c94fbd68c5976008", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ts-reusable-build.yml"}, "region": {"startLine": 32}}}]}, {"ruleId": "scanner-c94fbd68c5976008", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "17e5ee3c2006310f", "scanner": "scanner-primary", "fingerprint": "c94fbd68c5976008", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ts-reusable-build.yml"}, "region": {"startLine": 38}}}]}, {"ruleId": "scanner-684e16fc71374e78", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "86fec4be4c47df5b", "scanner": "scanner-primary", "fingerprint": "684e16fc71374e78", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/cd-py-core.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b3b20013dba3748f", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "0b3dae778756a030", "scanner": "scanner-primary", "fingerprint": "b3b20013dba3748f", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/docker-reusable-publish.yml"}, "region": {"startLine": 57}}}]}, {"ruleId": "scanner-b3b20013dba3748f", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "a0b04a10c68878be", "scanner": "scanner-primary", "fingerprint": "b3b20013dba3748f", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/docker-reusable-publish.yml"}, "region": {"startLine": 66}}}]}, {"ruleId": "scanner-b3b20013dba3748f", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "3ce0687ebbae3fb8", "scanner": "scanner-primary", "fingerprint": "b3b20013dba3748f", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/docker-reusable-publish.yml"}, "region": {"startLine": 69}}}]}, {"ruleId": "scanner-b3b20013dba3748f", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "d7823f9c6839ebe3", "scanner": "scanner-primary", "fingerprint": "b3b20013dba3748f", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/docker-reusable-publish.yml"}, "region": {"startLine": 77}}}]}, {"ruleId": "scanner-b3b20013dba3748f", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "6aeef522016b136a", "scanner": "scanner-primary", "fingerprint": "b3b20013dba3748f", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/docker-reusable-publish.yml"}, "region": {"startLine": 89}}}]}, {"ruleId": "scanner-b3b20013dba3748f", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "d7823f9c6839ebe3", "scanner": "scanner-primary", "fingerprint": "b3b20013dba3748f", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/docker-reusable-publish.yml"}, "region": {"startLine": 99}}}]}, {"ruleId": "scanner-b3b20013dba3748f", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "6aeef522016b136a", "scanner": "scanner-primary", "fingerprint": "b3b20013dba3748f", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/docker-reusable-publish.yml"}, "region": {"startLine": 114}}}]}, {"ruleId": "scanner-b3b20013dba3748f", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "d7823f9c6839ebe3", "scanner": "scanner-primary", "fingerprint": "b3b20013dba3748f", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/docker-reusable-publish.yml"}, "region": {"startLine": 127}}}]}, {"ruleId": "scanner-b3b20013dba3748f", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "e0a1f6fa83f2807d", "scanner": "scanner-primary", "fingerprint": "b3b20013dba3748f", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/docker-reusable-publish.yml"}, "region": {"startLine": 158}}}]}, {"ruleId": "scanner-b3b20013dba3748f", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "a0b04a10c68878be", "scanner": "scanner-primary", "fingerprint": "b3b20013dba3748f", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/docker-reusable-publish.yml"}, "region": {"startLine": 172}}}]}, {"ruleId": "scanner-b3b20013dba3748f", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "3ce0687ebbae3fb8", "scanner": "scanner-primary", "fingerprint": "b3b20013dba3748f", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/docker-reusable-publish.yml"}, "region": {"startLine": 175}}}]}, {"ruleId": "scanner-b3b20013dba3748f", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "6aeef522016b136a", "scanner": "scanner-primary", "fingerprint": "b3b20013dba3748f", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/docker-reusable-publish.yml"}, "region": {"startLine": 182}}}]}, {"ruleId": "scanner-b3b20013dba3748f", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "6aeef522016b136a", "scanner": "scanner-primary", "fingerprint": "b3b20013dba3748f", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/docker-reusable-publish.yml"}, "region": {"startLine": 190}}}]}, {"ruleId": "scanner-b3b20013dba3748f", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "06df1e1fab0db8b9", "scanner": "scanner-primary", "fingerprint": "b3b20013dba3748f", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/docker-reusable-publish.yml"}, "region": {"startLine": 200}}}]}, {"ruleId": "scanner-373db48671ab0f3e", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "aff3f01a64a3a47b", "scanner": "scanner-primary", "fingerprint": "373db48671ab0f3e", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/cd-ts-core.yml"}, "region": {"startLine": 33}}}]}, {"ruleId": "scanner-054f68ccf2ac565f", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "f516b9f869227be8", "scanner": "scanner-primary", "fingerprint": "054f68ccf2ac565f", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/cd-ts-core.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-834274c534bccf90", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "ebf0c3d45c13a760", "scanner": "scanner-primary", "fingerprint": "834274c534bccf90", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/cd-py-mcp-server.yml"}, "region": {"startLine": 63}}}]}, {"ruleId": "scanner-ccf383199750f7b2", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "e41e7a0d3f8e305a", "scanner": "scanner-primary", "fingerprint": "ccf383199750f7b2", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/cd-py-mcp-server.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e6595c785434e38e", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "3796729afed697b4", "scanner": "scanner-primary", "fingerprint": "e6595c785434e38e", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/py-reusable-publish.yml"}, "region": {"startLine": 51}}}]}, {"ruleId": "scanner-e6595c785434e38e", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "67a6fb1237226ea1", "scanner": "scanner-primary", "fingerprint": "e6595c785434e38e", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/py-reusable-publish.yml"}, "region": {"startLine": 61}}}]}, {"ruleId": "scanner-c89d5ebfbb0231a3", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "4c0e4915e4764d94", "scanner": "scanner-primary", "fingerprint": "c89d5ebfbb0231a3", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/cd-swift-cua-driver.yml"}, "region": {"startLine": 239}}}]}, {"ruleId": "scanner-c89d5ebfbb0231a3", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "4c0e4915e4764d94", "scanner": "scanner-primary", "fingerprint": "c89d5ebfbb0231a3", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/cd-swift-cua-driver.yml"}, "region": {"startLine": 303}}}]}, {"ruleId": "scanner-c89d5ebfbb0231a3", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "4c0e4915e4764d94", "scanner": "scanner-primary", "fingerprint": "c89d5ebfbb0231a3", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/cd-swift-cua-driver.yml"}, "region": {"startLine": 315}}}]}, {"ruleId": "scanner-c89d5ebfbb0231a3", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "4c0e4915e4764d94", "scanner": "scanner-primary", "fingerprint": "c89d5ebfbb0231a3", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/cd-swift-cua-driver.yml"}, "region": {"startLine": 322}}}]}, {"ruleId": "scanner-c89d5ebfbb0231a3", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "faebb5f50a7dd8de", "scanner": "scanner-primary", "fingerprint": "c89d5ebfbb0231a3", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/cd-swift-cua-driver.yml"}, "region": {"startLine": 360}}}]}, {"ruleId": "scanner-c89d5ebfbb0231a3", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "87113673ad447882", "scanner": "scanner-primary", "fingerprint": "c89d5ebfbb0231a3", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/cd-swift-cua-driver.yml"}, "region": {"startLine": 388}}}]}, {"ruleId": "scanner-d9d7a56d872045f6", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "a9f6330568af43e1", "scanner": "scanner-primary", "fingerprint": "d9d7a56d872045f6", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/cd-swift-cua-driver.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e569de407dd451f7", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "e67cacbfd40ffce6", "scanner": "scanner-primary", "fingerprint": "e569de407dd451f7", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/cd-py-cli.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8a017062abd77e4f", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "a916d31c80c69855", "scanner": "scanner-primary", "fingerprint": "8a017062abd77e4f", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/cd-py-som.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-984d23acbe98cbc5", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "ddba1522a2426604", "scanner": "scanner-primary", "fingerprint": "984d23acbe98cbc5", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/cd-py-auto.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e69711486dd5b0a4", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "c8bd78dd0e3a5b6f", "scanner": "scanner-primary", "fingerprint": "e69711486dd5b0a4", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci-lint-python.yml"}, "region": {"startLine": 17}}}]}, {"ruleId": "scanner-e69711486dd5b0a4", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "78bb633083ecbdbc", "scanner": "scanner-primary", "fingerprint": "e69711486dd5b0a4", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci-lint-python.yml"}, "region": {"startLine": 20}}}]}, {"ruleId": "scanner-c7514ca92e6df234", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "842ca773d5e78fd3", "scanner": "scanner-primary", "fingerprint": "c7514ca92e6df234", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/cd-ts-cli.yml"}, "region": {"startLine": 34}}}]}, {"ruleId": "scanner-c7514ca92e6df234", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "842ca773d5e78fd3", "scanner": "scanner-primary", "fingerprint": "c7514ca92e6df234", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/cd-ts-cli.yml"}, "region": {"startLine": 82}}}]}, {"ruleId": "scanner-c7514ca92e6df234", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "fddbb2939bdd7bc7", "scanner": "scanner-primary", "fingerprint": "c7514ca92e6df234", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/cd-ts-cli.yml"}, "region": {"startLine": 87}}}]}, {"ruleId": "scanner-c7514ca92e6df234", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "10711335073810c6", "scanner": "scanner-primary", "fingerprint": "c7514ca92e6df234", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/cd-ts-cli.yml"}, "region": {"startLine": 103}}}]}, {"ruleId": "scanner-732fa889e549a619", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "ee3532d8493a7d04", "scanner": "scanner-primary", "fingerprint": "732fa889e549a619", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/cd-ts-cli.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-063a47f8ac0dc739", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "a9928bdbba432995", "scanner": "scanner-primary", "fingerprint": "063a47f8ac0dc739", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci-spdx-headers.yml"}, "region": {"startLine": 28}}}]}, {"ruleId": "scanner-2da2960774a62aba", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "676f425f455e6573", "scanner": "scanner-primary", "fingerprint": "2da2960774a62aba", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/cd-py-cua.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1e4d0c643b84ea07", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "0ada1f9741e4272b", "scanner": "scanner-primary", "fingerprint": "1e4d0c643b84ea07", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci-lint-typescript.yml"}, "region": {"startLine": 16}}}]}, {"ruleId": "scanner-1e4d0c643b84ea07", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "3890ca58b72987ab", "scanner": "scanner-primary", "fingerprint": "1e4d0c643b84ea07", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci-lint-typescript.yml"}, "region": {"startLine": 19}}}]}, {"ruleId": "scanner-1e4d0c643b84ea07", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "7a1e0edd8bac274f", "scanner": "scanner-primary", "fingerprint": "1e4d0c643b84ea07", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci-lint-typescript.yml"}, "region": {"startLine": 24}}}]}, {"ruleId": "scanner-513e2630b87283f5", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "e43a8999634899df", "scanner": "scanner-primary", "fingerprint": "513e2630b87283f5", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci-test-scripts.yml"}, "region": {"startLine": 15}}}]}, {"ruleId": "scanner-513e2630b87283f5", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "fb2bce19c807bda4", "scanner": "scanner-primary", "fingerprint": "513e2630b87283f5", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci-test-scripts.yml"}, "region": {"startLine": 18}}}]}, {"ruleId": "scanner-79690ceaf542de7f", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "d102d7d2831c18af", "scanner": "scanner-primary", "fingerprint": "79690ceaf542de7f", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci-check-links.yml"}, "region": {"startLine": 16}}}]}, {"ruleId": "scanner-79690ceaf542de7f", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "b2e06874d939d2b6", "scanner": "scanner-primary", "fingerprint": "79690ceaf542de7f", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci-check-links.yml"}, "region": {"startLine": 19}}}]}, {"ruleId": "scanner-79690ceaf542de7f", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "53701fa111123759", "scanner": "scanner-primary", "fingerprint": "79690ceaf542de7f", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci-check-links.yml"}, "region": {"startLine": 86}}}]}, {"ruleId": "scanner-1cb2066b52a03d3b", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "c4eb22a69c55140b", "scanner": "scanner-primary", "fingerprint": "1cb2066b52a03d3b", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/nix-build.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-deddfa43b3584a26", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "7c2c95c38c66466b", "scanner": "scanner-primary", "fingerprint": "deddfa43b3584a26", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci-check-docs-links.yml"}, "region": {"startLine": 16}}}]}, {"ruleId": "scanner-deddfa43b3584a26", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "05aedb4c083c82d0", "scanner": "scanner-primary", "fingerprint": "deddfa43b3584a26", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci-check-docs-links.yml"}, "region": {"startLine": 19}}}]}, {"ruleId": "scanner-deddfa43b3584a26", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "d9c3a933da38c152", "scanner": "scanner-primary", "fingerprint": "deddfa43b3584a26", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci-check-docs-links.yml"}, "region": {"startLine": 24}}}]}, {"ruleId": "scanner-deddfa43b3584a26", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "7c2c95c38c66466b", "scanner": "scanner-primary", "fingerprint": "deddfa43b3584a26", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci-check-docs-links.yml"}, "region": {"startLine": 55}}}]}, {"ruleId": "scanner-deddfa43b3584a26", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "9e0fcbe4fd1bb41d", "scanner": "scanner-primary", "fingerprint": "deddfa43b3584a26", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci-check-docs-links.yml"}, "region": {"startLine": 58}}}]}, {"ruleId": "scanner-e418a2d69fc5131d", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "9b62f5673feea68b", "scanner": "scanner-primary", "fingerprint": "e418a2d69fc5131d", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release-on-merge.yml"}, "region": {"startLine": 19}}}]}, {"ruleId": "scanner-b722330fc5eee7c3", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "f7d601faac20274c", "scanner": "scanner-primary", "fingerprint": "b722330fc5eee7c3", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/docs-mcp-server-build-push.yml"}, "region": {"startLine": 47}}}]}, {"ruleId": "scanner-b722330fc5eee7c3", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "0018d2f28666bf6f", "scanner": "scanner-primary", "fingerprint": "b722330fc5eee7c3", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/docs-mcp-server-build-push.yml"}, "region": {"startLine": 56}}}]}, {"ruleId": "scanner-b722330fc5eee7c3", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "7d875be823cd1a9e", "scanner": "scanner-primary", "fingerprint": "b722330fc5eee7c3", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/docs-mcp-server-build-push.yml"}, "region": {"startLine": 63}}}]}, {"ruleId": "scanner-b722330fc5eee7c3", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "eb8b97b7ea3e7a61", "scanner": "scanner-primary", "fingerprint": "b722330fc5eee7c3", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/docs-mcp-server-build-push.yml"}, "region": {"startLine": 66}}}]}, {"ruleId": "scanner-b722330fc5eee7c3", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "030acd43849fbb77", "scanner": "scanner-primary", "fingerprint": "b722330fc5eee7c3", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/docs-mcp-server-build-push.yml"}, "region": {"startLine": 74}}}]}, {"ruleId": "scanner-b722330fc5eee7c3", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "a7157e2a4b9408d8", "scanner": "scanner-primary", "fingerprint": "b722330fc5eee7c3", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/docs-mcp-server-build-push.yml"}, "region": {"startLine": 99}}}]}, {"ruleId": "scanner-b722330fc5eee7c3", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "a7157e2a4b9408d8", "scanner": "scanner-primary", "fingerprint": "b722330fc5eee7c3", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/docs-mcp-server-build-push.yml"}, "region": {"startLine": 111}}}]}, {"ruleId": "scanner-b722330fc5eee7c3", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "0b5d6ce969198b3f", "scanner": "scanner-primary", "fingerprint": "b722330fc5eee7c3", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/docs-mcp-server-build-push.yml"}, "region": {"startLine": 137}}}]}, {"ruleId": "scanner-b722330fc5eee7c3", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "0018d2f28666bf6f", "scanner": "scanner-primary", "fingerprint": "b722330fc5eee7c3", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/docs-mcp-server-build-push.yml"}, "region": {"startLine": 152}}}]}, {"ruleId": "scanner-b722330fc5eee7c3", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "7d875be823cd1a9e", "scanner": "scanner-primary", "fingerprint": "b722330fc5eee7c3", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/docs-mcp-server-build-push.yml"}, "region": {"startLine": 158}}}]}, {"ruleId": "scanner-b722330fc5eee7c3", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "eb8b97b7ea3e7a61", "scanner": "scanner-primary", "fingerprint": "b722330fc5eee7c3", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/docs-mcp-server-build-push.yml"}, "region": {"startLine": 161}}}]}, {"ruleId": "scanner-b722330fc5eee7c3", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "030acd43849fbb77", "scanner": "scanner-primary", "fingerprint": "b722330fc5eee7c3", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/docs-mcp-server-build-push.yml"}, "region": {"startLine": 165}}}]}, {"ruleId": "scanner-b722330fc5eee7c3", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "954e5b46911d6266", "scanner": "scanner-primary", "fingerprint": "b722330fc5eee7c3", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/docs-mcp-server-build-push.yml"}, "region": {"startLine": 175}}}]}, {"ruleId": "scanner-9159caac854e5e03", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "1b4c1465682b7a1f", "scanner": "scanner-primary", "fingerprint": "9159caac854e5e03", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/docs-mcp-server-build-push.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-779c500f07b65023", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "5e31003b5b948611", "scanner": "scanner-primary", "fingerprint": "779c500f07b65023", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/cd-py-computer-server.yml"}, "region": {"startLine": 61}}}]}, {"ruleId": "scanner-779c500f07b65023", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "b3f04533c29a1734", "scanner": "scanner-primary", "fingerprint": "779c500f07b65023", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/cd-py-computer-server.yml"}, "region": {"startLine": 94}}}]}, {"ruleId": "scanner-779c500f07b65023", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "81b8fb3b31c88cff", "scanner": "scanner-primary", "fingerprint": "779c500f07b65023", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/cd-py-computer-server.yml"}, "region": {"startLine": 121}}}]}, {"ruleId": "scanner-85606ad8a03ff0db", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "077f94f74104b70f", "scanner": "scanner-primary", "fingerprint": "85606ad8a03ff0db", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/cd-py-computer-server.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6fcf5e9bf8c87c1d", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "5ad1f9cdf37adbe6", "scanner": "scanner-primary", "fingerprint": "6fcf5e9bf8c87c1d", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release-github-reusable.yml"}, "region": {"startLine": 53}}}]}, {"ruleId": "scanner-6fcf5e9bf8c87c1d", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "e037f03eb298c797", "scanner": "scanner-primary", "fingerprint": "6fcf5e9bf8c87c1d", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release-github-reusable.yml"}, "region": {"startLine": 126}}}]}, {"ruleId": "scanner-6fcf5e9bf8c87c1d", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "249b5e0b84935a9d", "scanner": "scanner-primary", "fingerprint": "6fcf5e9bf8c87c1d", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release-github-reusable.yml"}, "region": {"startLine": 169}}}]}, {"ruleId": "scanner-edc8be4548b7d09f", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "1fec52d0725a13a6", "scanner": "scanner-primary", "fingerprint": "edc8be4548b7d09f", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release-github-reusable.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-dd9debeb69ad754b", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "83903a4f96adbb81", "scanner": "scanner-primary", "fingerprint": "dd9debeb69ad754b", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release-unreleased-digest.yml"}, "region": {"startLine": 14}}}]}, {"ruleId": "scanner-13e085ab62ca4e6d", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "e2616a5fe3c513dd", "scanner": "scanner-primary", "fingerprint": "13e085ab62ca4e6d", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/docker-reusable-build.yml"}, "region": {"startLine": 49}}}]}, {"ruleId": "scanner-13e085ab62ca4e6d", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "d9a83c7e8fd9071b", "scanner": "scanner-primary", "fingerprint": "13e085ab62ca4e6d", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/docker-reusable-build.yml"}, "region": {"startLine": 58}}}]}, {"ruleId": "scanner-13e085ab62ca4e6d", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "c271426a9ebc41ed", "scanner": "scanner-primary", "fingerprint": "13e085ab62ca4e6d", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/docker-reusable-build.yml"}, "region": {"startLine": 61}}}]}, {"ruleId": "scanner-fbf6c8e7ff8e6c8a", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "47d1547d6ec3fdd1", "scanner": "scanner-primary", "fingerprint": "fbf6c8e7ff8e6c8a", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/cd-py-bench.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d66a8ca9b280b721", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "88027b03ac718b2a", "scanner": "scanner-primary", "fingerprint": "d66a8ca9b280b721", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci-test-python.yml"}, "region": {"startLine": 29}}}]}, {"ruleId": "scanner-d66a8ca9b280b721", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "56d8f5674ae9274d", "scanner": "scanner-primary", "fingerprint": "d66a8ca9b280b721", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci-test-python.yml"}, "region": {"startLine": 32}}}]}, {"ruleId": "scanner-d66a8ca9b280b721", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "09fd65fe70bfb440", "scanner": "scanner-primary", "fingerprint": "d66a8ca9b280b721", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci-test-python.yml"}, "region": {"startLine": 71}}}]}, {"ruleId": "scanner-7e42f7f257b9aa1c", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "ea62c514a6192377", "scanner": "scanner-primary", "fingerprint": "7e42f7f257b9aa1c", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ts-reusable-publish.yml"}, "region": {"startLine": 39}}}]}, {"ruleId": "scanner-7e42f7f257b9aa1c", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "5b1a06e86580e3bc", "scanner": "scanner-primary", "fingerprint": "7e42f7f257b9aa1c", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ts-reusable-publish.yml"}, "region": {"startLine": 46}}}]}, {"ruleId": "scanner-7e42f7f257b9aa1c", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "da48eade0d98c0cb", "scanner": "scanner-primary", "fingerprint": "7e42f7f257b9aa1c", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ts-reusable-publish.yml"}, "region": {"startLine": 52}}}]}, {"ruleId": "scanner-7e42f7f257b9aa1c", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "0d56ae7ec33ccd95", "scanner": "scanner-primary", "fingerprint": "7e42f7f257b9aa1c", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ts-reusable-publish.yml"}, "region": {"startLine": 76}}}]}, {"ruleId": "scanner-793f3b6c0793639f", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "b6baae85c66ac9c6", "scanner": "scanner-primary", "fingerprint": "793f3b6c0793639f", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ts-reusable-publish.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4f64a2fa79b6d54a", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "c94e353aeecfdd62", "scanner": "scanner-primary", "fingerprint": "4f64a2fa79b6d54a", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/cd-py-computer.yml"}, "region": {"startLine": 73}}}]}, {"ruleId": "scanner-26582fc4a9289214", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "81e026d652d1b5de", "scanner": "scanner-primary", "fingerprint": "26582fc4a9289214", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/cd-py-computer.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-afdf443a3485a8cc", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "e09b673ef3a7f1a6", "scanner": "scanner-primary", "fingerprint": "afdf443a3485a8cc", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/cd-ts-playground.yml"}, "region": {"startLine": 33}}}]}, {"ruleId": "scanner-d43ee6848a061d86", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "7a909552c1d4b4ee", "scanner": "scanner-primary", "fingerprint": "d43ee6848a061d86", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/cd-ts-playground.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-44c24b7afc7a6a4a", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "7930e42d2872cfb0", "scanner": "scanner-primary", "fingerprint": "44c24b7afc7a6a4a", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/cd-rust-cua-driver.yml"}, "region": {"startLine": 396}}}]}, {"ruleId": "scanner-44c24b7afc7a6a4a", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "bd41954ee68f173f", "scanner": "scanner-primary", "fingerprint": "44c24b7afc7a6a4a", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/cd-rust-cua-driver.yml"}, "region": {"startLine": 531}}}]}, {"ruleId": "scanner-44c24b7afc7a6a4a", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "d15cdd30fac317f7", "scanner": "scanner-primary", "fingerprint": "44c24b7afc7a6a4a", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/cd-rust-cua-driver.yml"}, "region": {"startLine": 606}}}]}, {"ruleId": "scanner-009f47c2229018a3", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "087de56f58a0d2cf", "scanner": "scanner-primary", "fingerprint": "009f47c2229018a3", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/cd-rust-cua-driver.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-063f28aa56dd38f8", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "e43527377148ac60", "scanner": "scanner-primary", "fingerprint": "063f28aa56dd38f8", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/py-reusable-build.yml"}, "region": {"startLine": 22}}}]}, {"ruleId": "scanner-063f28aa56dd38f8", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "725b89beb3fc27b5", "scanner": "scanner-primary", "fingerprint": "063f28aa56dd38f8", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/py-reusable-build.yml"}, "region": {"startLine": 30}}}]}, {"ruleId": "scanner-2894f3060fe2f74a", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "c48c9090a5aee335", "scanner": "scanner-primary", "fingerprint": "2894f3060fe2f74a", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/cd-ts-computer.yml"}, "region": {"startLine": 33}}}]}, {"ruleId": "scanner-4d184fe377812054", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "044e65c312fcd10d", "scanner": "scanner-primary", "fingerprint": "4d184fe377812054", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/cd-ts-computer.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1a62894214708773", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "7ce3787a4ed1837b", "scanner": "scanner-primary", "fingerprint": "1a62894214708773", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci-test-models.yml"}, "region": {"startLine": 84}}}]}, {"ruleId": "scanner-1a62894214708773", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "f4ff757d312c56f4", "scanner": "scanner-primary", "fingerprint": "1a62894214708773", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci-test-models.yml"}, "region": {"startLine": 87}}}]}, {"ruleId": "scanner-1a62894214708773", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "b8207193bd734f54", "scanner": "scanner-primary", "fingerprint": "1a62894214708773", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci-test-models.yml"}, "region": {"startLine": 92}}}]}, {"ruleId": "scanner-1a62894214708773", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "b8207193bd734f54", "scanner": "scanner-primary", "fingerprint": "1a62894214708773", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci-test-models.yml"}, "region": {"startLine": 106}}}]}, {"ruleId": "scanner-1a62894214708773", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "b8207193bd734f54", "scanner": "scanner-primary", "fingerprint": "1a62894214708773", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci-test-models.yml"}, "region": {"startLine": 126}}}]}, {"ruleId": "scanner-1a62894214708773", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "809fc975e657a14b", "scanner": "scanner-primary", "fingerprint": "1a62894214708773", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci-test-models.yml"}, "region": {"startLine": 224}}}]}, {"ruleId": "scanner-1a62894214708773", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "809fc975e657a14b", "scanner": "scanner-primary", "fingerprint": "1a62894214708773", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci-test-models.yml"}, "region": {"startLine": 235}}}]}, {"ruleId": "scanner-1a62894214708773", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "a25c4492d72fbce3", "scanner": "scanner-primary", "fingerprint": "1a62894214708773", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci-test-models.yml"}, "region": {"startLine": 270}}}]}, {"ruleId": "scanner-1a62894214708773", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "556a46013d0014ea", "scanner": "scanner-primary", "fingerprint": "1a62894214708773", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci-test-models.yml"}, "region": {"startLine": 379}}}]}, {"ruleId": "scanner-3458107a1cf9010d", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "989d23167772b70a", "scanner": "scanner-primary", "fingerprint": "3458107a1cf9010d", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci-cold-start-benchmark.yml"}, "region": {"startLine": 11}}}]}, {"ruleId": "scanner-3458107a1cf9010d", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "1ff483fb344df80e", "scanner": "scanner-primary", "fingerprint": "3458107a1cf9010d", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci-cold-start-benchmark.yml"}, "region": {"startLine": 14}}}]}, {"ruleId": "scanner-3458107a1cf9010d", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "3aeeb06b4c3ebbae", "scanner": "scanner-primary", "fingerprint": "3458107a1cf9010d", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci-cold-start-benchmark.yml"}, "region": {"startLine": 34}}}]}, {"ruleId": "scanner-7ce4cbc61b59cdbf", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "51f9635dbc4cf958", "scanner": "scanner-primary", "fingerprint": "7ce4cbc61b59cdbf", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/cd-py-sandbox.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6cb328ad310a26a3", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "95d8ba3cfe6c023a", "scanner": "scanner-primary", "fingerprint": "6cb328ad310a26a3", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/cd-py-agent.yml"}, "region": {"startLine": 70}}}]}, {"ruleId": "scanner-ae446606d3decfb8", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "17b4ed983e6749bf", "scanner": "scanner-primary", "fingerprint": "ae446606d3decfb8", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/cd-py-agent.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-43c3e255582de081", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "14502f74d8d64948", "scanner": "scanner-primary", "fingerprint": "43c3e255582de081", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci-check-docs.yml"}, "region": {"startLine": 37}}}]}, {"ruleId": "scanner-43c3e255582de081", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "2f38cbc5c29c524d", "scanner": "scanner-primary", "fingerprint": "43c3e255582de081", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci-check-docs.yml"}, "region": {"startLine": 42}}}]}, {"ruleId": "scanner-43c3e255582de081", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "1a25e9dfccbab428", "scanner": "scanner-primary", "fingerprint": "43c3e255582de081", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci-check-docs.yml"}, "region": {"startLine": 47}}}]}, {"ruleId": "scanner-43c3e255582de081", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "7e7946b3eb54b38c", "scanner": "scanner-primary", "fingerprint": "43c3e255582de081", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci-check-docs.yml"}, "region": {"startLine": 54}}}]}, {"ruleId": "scanner-9527e609a238c364", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "24ffbe8a89b601e2", "scanner": "scanner-primary", "fingerprint": "9527e609a238c364", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/cd-py-sandbox-apps.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-85eb4e2ead48d790", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "48de5ce65f60c05b", "scanner": "scanner-primary", "fingerprint": "85eb4e2ead48d790", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release-bump-version.yml"}, "region": {"startLine": 184}}}]}, {"ruleId": "scanner-85eb4e2ead48d790", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "b163fdd6c51899c9", "scanner": "scanner-primary", "fingerprint": "85eb4e2ead48d790", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release-bump-version.yml"}, "region": {"startLine": 191}}}]}, {"ruleId": "scanner-85eb4e2ead48d790", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "aca2b7ec4aa0c1e7", "scanner": "scanner-primary", "fingerprint": "85eb4e2ead48d790", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release-bump-version.yml"}, "region": {"startLine": 425}}}]}, {"ruleId": "scanner-1fa773e572861170", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "aa738db4ae700b58", "scanner": "scanner-primary", "fingerprint": "1fa773e572861170", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release-bump-version.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-dec588d6b2e87be3", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "ccd13ff7d9fd9e84", "scanner": "scanner-primary", "fingerprint": "dec588d6b2e87be3", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/cd-swift-lume.yml"}, "region": {"startLine": 199}}}]}, {"ruleId": "scanner-dec588d6b2e87be3", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "ccd13ff7d9fd9e84", "scanner": "scanner-primary", "fingerprint": "dec588d6b2e87be3", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/cd-swift-lume.yml"}, "region": {"startLine": 249}}}]}, {"ruleId": "scanner-dec588d6b2e87be3", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "ccd13ff7d9fd9e84", "scanner": "scanner-primary", "fingerprint": "dec588d6b2e87be3", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/cd-swift-lume.yml"}, "region": {"startLine": 256}}}]}, {"ruleId": "scanner-dec588d6b2e87be3", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "a0bc619908a3bcfe", "scanner": "scanner-primary", "fingerprint": "dec588d6b2e87be3", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/cd-swift-lume.yml"}, "region": {"startLine": 294}}}]}, {"ruleId": "scanner-46e22360cfe8b5ea", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "648a8b2eb6ac629e", "scanner": "scanner-primary", "fingerprint": "46e22360cfe8b5ea", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/cd-swift-lume.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b8a2774e3f184a7e", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "cf92b5812dde30cc", "scanner": "scanner-primary", "fingerprint": "b8a2774e3f184a7e", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/cd-py-bench-ui.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-529d9f2b5dd1170d", "level": "note", "message": {"text": "package.json defines install-time lifecycle scripts"}, "properties": {"repobilityId": "2439334d3cfe9a0e", "scanner": "scanner-primary", "fingerprint": "529d9f2b5dd1170d", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "npm", "install-scripts"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3cbbbac6cb75e549", "level": "note", "message": {"text": "Very large file: docs/scripts/modal_app.py (2031 lines)"}, "properties": {"repobilityId": "a002284f17d5a94e", "scanner": "scanner-primary", "fingerprint": "3cbbbac6cb75e549", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-c3ac4259576e1ad1", "level": "note", "message": {"text": "Very large file: libs/cua-bench/cua_bench/cli/commands/run.py (2208 lines)"}, "properties": {"repobilityId": "6b30597ac6cc18f4", "scanner": "scanner-primary", "fingerprint": "c3ac4259576e1ad1", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-b8243b13d29ddd2f", "level": "note", "message": {"text": "Very large file: libs/cua-bench/tasks/winarena_adapter/evaluators/getters/chrome.py (1368 lines)"}, "properties": {"repobilityId": "d7a49db14198f2a6", "scanner": "scanner-primary", "fingerprint": "b8243b13d29ddd2f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-fc7a4b5b04079bd0", "level": "note", "message": {"text": "Very large file: libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py (2036 lines)"}, "properties": {"repobilityId": "1cf2e275ced2474d", "scanner": "scanner-primary", "fingerprint": "fc7a4b5b04079bd0", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-ef5e25db2ae54823", "level": "note", "message": {"text": "Very large file: libs/typescript/playground/src/components/TrajectoryViewer/index.tsx (1833 lines)"}, "properties": {"repobilityId": "f6a5d085fbd1d423", "scanner": "scanner-primary", "fingerprint": "ef5e25db2ae54823", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-ef8da5d4247fb4e0", "level": "note", "message": {"text": "Very large file: libs/cua-driver/rust/tests/integration/test_api_parity.py (1182 lines)"}, "properties": {"repobilityId": "9fc376f4784084bb", "scanner": "scanner-primary", "fingerprint": "ef8da5d4247fb4e0", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-a2f8de213eb12ac3", "level": "note", "message": {"text": "Very large file: libs/cua-driver/rust/crates/platform-linux/src/input/mod.rs (1733 lines)"}, "properties": {"repobilityId": "da63ed1d87c3c37d", "scanner": "scanner-primary", "fingerprint": "a2f8de213eb12ac3", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-692146fd1b5f74a1", "level": "note", "message": {"text": "Very large file: libs/cua-driver/rust/crates/platform-linux/src/tools/impl_.rs (3135 lines)"}, "properties": {"repobilityId": "1af7d6ed4fb35848", "scanner": "scanner-primary", "fingerprint": "692146fd1b5f74a1", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-cb7bec612afb0b95", "level": "note", "message": {"text": "Very large file: libs/cua-driver/rust/crates/cua-driver/tests/mcp_protocol_test.rs (3294 lines)"}, "properties": {"repobilityId": "5d95e38cd7befd40", "scanner": "scanner-primary", "fingerprint": "cb7bec612afb0b95", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-832bb09f063e6348", "level": "note", "message": {"text": "Very large file: libs/cua-driver/rust/crates/cua-driver/src/cli.rs (2770 lines)"}, "properties": {"repobilityId": "e7e00dc4ab0d356e", "scanner": "scanner-primary", "fingerprint": "832bb09f063e6348", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-cd2f17229a9d9a48", "level": "note", "message": {"text": "Very large file: libs/cua-driver/rust/crates/cua-driver/src/serve.rs (1591 lines)"}, "properties": {"repobilityId": "0f385463b28b4cd0", "scanner": "scanner-primary", "fingerprint": "cd2f17229a9d9a48", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-f4f3805f992cf06b", "level": "note", "message": {"text": "Very large file: libs/cua-driver/rust/crates/platform-windows/src/tools/impl_.rs (5722 lines)"}, "properties": {"repobilityId": "e0c12efcfe1aed40", "scanner": "scanner-primary", "fingerprint": "f4f3805f992cf06b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-f035187ac87d6429", "level": "note", "message": {"text": "Very large file: libs/python/agent/cua_agent/loops/anthropic.py (1959 lines)"}, "properties": {"repobilityId": "236f202be3d753c0", "scanner": "scanner-primary", "fingerprint": "f035187ac87d6429", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-b9e0f9425190e0c6", "level": "note", "message": {"text": "Very large file: libs/python/computer-server/computer_server/main.py (1433 lines)"}, "properties": {"repobilityId": "6fea7b6338b5ae76", "scanner": "scanner-primary", "fingerprint": "b9e0f9425190e0c6", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-d7302b56ce294bf0", "level": "note", "message": {"text": "Very large file: libs/python/computer-server/computer_server/diorama/draw.py (1326 lines)"}, "properties": {"repobilityId": "7e4afa7976db9428", "scanner": "scanner-primary", "fingerprint": "d7302b56ce294bf0", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-da98d4a373fd735c", "level": "note", "message": {"text": "Very large file: libs/python/computer-server/computer_server/handlers/macos.py (1450 lines)"}, "properties": {"repobilityId": "6f87554a1fe8bb92", "scanner": "scanner-primary", "fingerprint": "da98d4a373fd735c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-91b396e601b4b981", "level": "note", "message": {"text": "Very large file: libs/python/computer-server/computer_server/handlers/_grpc_emulator/emulator_controller_pb2_grpc.py (2568 lines)"}, "properties": {"repobilityId": "cf40a6d2001a54ee", "scanner": "scanner-primary", "fingerprint": "91b396e601b4b981", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-621730695444c70c", "level": "note", "message": {"text": "Very large file: libs/python/computer/computer/computer.py (1884 lines)"}, "properties": {"repobilityId": "ef47c039e0372e1a", "scanner": "scanner-primary", "fingerprint": "621730695444c70c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-e5ef9afebfd643b3", "level": "note", "message": {"text": "Very large file: libs/python/computer/computer/interface/generic.py (1263 lines)"}, "properties": {"repobilityId": "30a6d54e38f16221", "scanner": "scanner-primary", "fingerprint": "e5ef9afebfd643b3", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-4231b6877e06806d", "level": "note", "message": {"text": "Very large file: libs/python/computer/computer/ui/gradio/app.py (1743 lines)"}, "properties": {"repobilityId": "4ca6c2104491de1e", "scanner": "scanner-primary", "fingerprint": "4231b6877e06806d", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-4a5df0e232763eac", "level": "note", "message": {"text": "Very large file: libs/python/cua-cli/cua_cli/commands/do.py (1843 lines)"}, "properties": {"repobilityId": "54ea15558f7e8998", "scanner": "scanner-primary", "fingerprint": "4a5df0e232763eac", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-420205062a2edafc", "level": "note", "message": {"text": "Very large file: libs/python/cua-sandbox/cua_sandbox/transport/_grpc_emulator/emulator_controller_pb2_grpc.py (2568 lines)"}, "properties": {"repobilityId": "b858c2fae5970d04", "scanner": "scanner-primary", "fingerprint": "420205062a2edafc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-ea3b5e389d8c9c0f", "level": "note", "message": {"text": "Low test-to-source ratio"}, "properties": {"repobilityId": "ef7b2552cc00a375", "scanner": "scanner-primary", "fingerprint": "ea3b5e389d8c9c0f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["tests"]}}, {"ruleId": "scanner-6038b2fdfb9135f6", "level": "note", "message": {"text": "58 TODO/FIXME markers"}, "properties": {"repobilityId": "4b38c118003e07d2", "scanner": "scanner-primary", "fingerprint": "6038b2fdfb9135f6", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["maintenance"]}}, {"ruleId": "scanner-ad2c9360f6164b07", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: demo/multi-cursor/electron/package.json"}, "properties": {"repobilityId": "6eaf00a7e1220585", "scanner": "scanner-primary", "fingerprint": "ad2c9360f6164b07", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "demo/multi-cursor/electron/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-94c16e8a4a6a1c49", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: libs/typescript/playground/package.json"}, "properties": {"repobilityId": "ef03479f36ef01eb", "scanner": "scanner-primary", "fingerprint": "94c16e8a4a6a1c49", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/typescript/playground/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9a5be19f87b55e94", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: libs/typescript/agent/package.json"}, "properties": {"repobilityId": "9bbfc9f0e34956ee", "scanner": "scanner-primary", "fingerprint": "9a5be19f87b55e94", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/typescript/agent/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fbbc494c16fcb771", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: libs/typescript/core/package.json"}, "properties": {"repobilityId": "61e81c8090ad6868", "scanner": "scanner-primary", "fingerprint": "fbbc494c16fcb771", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/typescript/core/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-26cc1cd1d585e528", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: libs/cua-driver/test-harness/apps/cross-platform/electron/package.json"}, "properties": {"repobilityId": "620e6f8125f43609", "scanner": "scanner-primary", "fingerprint": "26cc1cd1d585e528", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-driver/test-harness/apps/cross-platform/electron/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "47f94392232a3208", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-72b2a6250083a784", "level": "warning", "message": {"text": "Placeholder or mock-heavy implementation detected"}, "properties": {"repobilityId": "045f7d6d3b94f099", "scanner": "scanner-primary", "fingerprint": "72b2a6250083a784", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "incomplete", "generated-repo-pattern"]}}, {"ruleId": "scanner-9d79c4077342a7d0", "level": "warning", "message": {"text": "Runtime service client appears to use placeholder configuration"}, "properties": {"repobilityId": "102f4abf46331c8c", "scanner": "scanner-primary", "fingerprint": "9d79c4077342a7d0", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "runtime-config", "service-client", "generated-repo-pattern"]}}, {"ruleId": "scanner-2d0c7b7ab8f8aacf", "level": "warning", "message": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "properties": {"repobilityId": "577fc4dffba96b7f", "scanner": "scanner-primary", "fingerprint": "2d0c7b7ab8f8aacf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "critical-flow", "generated-repo-pattern"]}}, {"ruleId": "scanner-749d4bc1bd66df5f", "level": "warning", "message": {"text": "Agent instructions exist but release-hardening basics are missing"}, "properties": {"repobilityId": "432df7cec677c8f6", "scanner": "scanner-primary", "fingerprint": "749d4bc1bd66df5f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-ea8f3013f588db25", "level": "note", "message": {"text": "Shallow git history limits provenance confidence"}, "properties": {"repobilityId": "6602a2a630f56362", "scanner": "scanner-primary", "fingerprint": "ea8f3013f588db25", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-8424db9c75e04ba4", "level": "none", "message": {"text": "Very short observed git history"}, "properties": {"repobilityId": "6b5e53ce046c47c7", "scanner": "scanner-primary", "fingerprint": "8424db9c75e04ba4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-c5be555eb09946cf", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: libs/cuabot/src/prompts/.mcp.json"}, "properties": {"repobilityId": "30ef72fd8a00831b", "scanner": "scanner-primary", "fingerprint": "c5be555eb09946cf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "mcp_config"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cuabot/src/prompts/.mcp.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d044d2108b6cc80a", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: libs/cua-bench/datasets/cua-bench-basic/video-player/CLAUDE.md"}, "properties": {"repobilityId": "9b86f433ddcdc8d9", "scanner": "scanner-primary", "fingerprint": "d044d2108b6cc80a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/datasets/cua-bench-basic/video-player/CLAUDE.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8b39f48db06edbd2", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: libs/cua-bench/datasets/cua-bench-basic/click-icon/CLAUDE.md"}, "properties": {"repobilityId": "2c57ddd8507fce97", "scanner": "scanner-primary", "fingerprint": "8b39f48db06edbd2", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/datasets/cua-bench-basic/click-icon/CLAUDE.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-dbc4ce6cb6705699", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: libs/cua-bench/datasets/cua-bench-basic/drag-drop/CLAUDE.md"}, "properties": {"repobilityId": "57b496bb9a50bb84", "scanner": "scanner-primary", "fingerprint": "dbc4ce6cb6705699", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/datasets/cua-bench-basic/drag-drop/CLAUDE.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ce939ef724ac896d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: libs/cua-bench/datasets/cua-bench-basic/select-dropdown/CLAUDE.md"}, "properties": {"repobilityId": "3b5d0424be28b69e", "scanner": "scanner-primary", "fingerprint": "ce939ef724ac896d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/datasets/cua-bench-basic/select-dropdown/CLAUDE.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-15cbfb8b94ef154b", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: libs/cua-bench/datasets/cua-bench-basic/spreadsheet-cell/CLAUDE.md"}, "properties": {"repobilityId": "d374e13629cde45d", "scanner": "scanner-primary", "fingerprint": "15cbfb8b94ef154b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/datasets/cua-bench-basic/spreadsheet-cell/CLAUDE.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-116481c06df0d916", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: libs/cua-bench/datasets/cua-bench-basic/toggle-switch/CLAUDE.md"}, "properties": {"repobilityId": "d7e251cdb909136e", "scanner": "scanner-primary", "fingerprint": "116481c06df0d916", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/datasets/cua-bench-basic/toggle-switch/CLAUDE.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5bd66f21c461601e", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: libs/cua-bench/datasets/cua-bench-basic/fill-form/CLAUDE.md"}, "properties": {"repobilityId": "3357a7e7852d8421", "scanner": "scanner-primary", "fingerprint": "5bd66f21c461601e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/datasets/cua-bench-basic/fill-form/CLAUDE.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8bfe2236af545b7a", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: libs/cua-bench/datasets/cua-bench-basic/typing-input/CLAUDE.md"}, "properties": {"repobilityId": "53a80794a681ac43", "scanner": "scanner-primary", "fingerprint": "8bfe2236af545b7a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/datasets/cua-bench-basic/typing-input/CLAUDE.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-037af03156da13c9", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: libs/cua-bench/datasets/cua-bench-basic/right-click-menu/CLAUDE.md"}, "properties": {"repobilityId": "b92372c941eb0d51", "scanner": "scanner-primary", "fingerprint": "037af03156da13c9", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/datasets/cua-bench-basic/right-click-menu/CLAUDE.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4aa465740de1ff17", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: libs/cua-bench/datasets/cua-bench-basic/click-button/CLAUDE.md"}, "properties": {"repobilityId": "77b1f50641219b1d", "scanner": "scanner-primary", "fingerprint": "4aa465740de1ff17", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/datasets/cua-bench-basic/click-button/CLAUDE.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d74ed7f246388638", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: libs/cua-bench/datasets/cua-bench-basic/color-picker/CLAUDE.md"}, "properties": {"repobilityId": "db24263655ab09aa", "scanner": "scanner-primary", "fingerprint": "d74ed7f246388638", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/datasets/cua-bench-basic/color-picker/CLAUDE.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4c25394d09710dc8", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: libs/cua-bench/datasets/cua-bench-basic/drag-slider/CLAUDE.md"}, "properties": {"repobilityId": "20fea41f334125a6", "scanner": "scanner-primary", "fingerprint": "4c25394d09710dc8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/datasets/cua-bench-basic/drag-slider/CLAUDE.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-62883dec1b9ee3e9", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: libs/cua-bench/datasets/cua-bench-basic/date-picker/CLAUDE.md"}, "properties": {"repobilityId": "49133eb5cb4e5805", "scanner": "scanner-primary", "fingerprint": "62883dec1b9ee3e9", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/datasets/cua-bench-basic/date-picker/CLAUDE.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9f9685937a8275a3", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: libs/cua-bench/example_tasks/minesweeper_game_env/CLAUDE.md"}, "properties": {"repobilityId": "32f59841122e453b", "scanner": "scanner-primary", "fingerprint": "9f9685937a8275a3", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/example_tasks/minesweeper_game_env/CLAUDE.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a4aa648366979a53", "level": "none", "message": {"text": "Commented-code block (6 lines) in docs/scripts/modal_app.py:451"}, "properties": {"repobilityId": "56222fa42ac57f3d", "scanner": "scanner-primary", "fingerprint": "a4aa648366979a53", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-be100fe9c35d316e", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 docs/scripts/modal_app.py:1040"}, "properties": {"repobilityId": "492b329d4b6300dc", "scanner": "scanner-primary", "fingerprint": "be100fe9c35d316e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-3652aecd8c795b96", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 docs/src/components/doc-actions-menu.tsx:23"}, "properties": {"repobilityId": "159833f2955862f3", "scanner": "scanner-primary", "fingerprint": "3652aecd8c795b96", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-68540e5f48aeac75", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 docs/src/lib/posthog-query.ts:41"}, "properties": {"repobilityId": "d8f99fc35cea616e", "scanner": "scanner-primary", "fingerprint": "68540e5f48aeac75", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-782878ee4438696c", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 docs/src/lib/slack-reporter.ts:72"}, "properties": {"repobilityId": "01528a5206b135ed", "scanner": "scanner-primary", "fingerprint": "782878ee4438696c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-4db825c05e135987", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/docs-generators/lume.ts:700"}, "properties": {"repobilityId": "02bd295e340e5c8b", "scanner": "scanner-primary", "fingerprint": "4db825c05e135987", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-b68d1bf059c45097", "level": "none", "message": {"text": "Commented-code block (5 lines) in scripts/docs-generators/cua-driver.ts:762"}, "properties": {"repobilityId": "960eaed43daf4636", "scanner": "scanner-primary", "fingerprint": "b68d1bf059c45097", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-188cc081bc7fb81a", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 libs/cuabot/src/client.ts:68"}, "properties": {"repobilityId": "9b2c67c83816ae7e", "scanner": "scanner-primary", "fingerprint": "188cc081bc7fb81a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-0973a8549f699e2e", "level": "none", "message": {"text": "Commented-code block (7 lines) in libs/cuabot/src/mcp/overlay-cursor.py:286"}, "properties": {"repobilityId": "04df4e739949f4fe", "scanner": "scanner-primary", "fingerprint": "0973a8549f699e2e", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-84e156a5b1b739ea", "level": "note", "message": {"text": "Legacy-named symbol `batch_v1` in libs/cua-bench/cua_bench/batch/gcp.py:12"}, "properties": {"repobilityId": "a0bbd54ea0ffd645", "scanner": "scanner-primary", "fingerprint": "84e156a5b1b739ea", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-8f5e10d43ec3c81c", "level": "none", "message": {"text": "Commented-code block (5 lines) in libs/cua-bench/cua_bench/batch/gcp.py:488"}, "properties": {"repobilityId": "bebac4373ba80e0c", "scanner": "scanner-primary", "fingerprint": "8f5e10d43ec3c81c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-ccb09508edf988a5", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/cua-bench/cua_bench/batch/gcp.py:122"}, "properties": {"repobilityId": "d5b271e13bc7c96b", "scanner": "scanner-primary", "fingerprint": "ccb09508edf988a5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-cf626f939d4a5f87", "level": "note", "message": {"text": "Legacy-named symbol `create_overlay_copy` in libs/cua-bench/cua_bench/runner/docker_utils.py:13"}, "properties": {"repobilityId": "f69957b3423d97da", "scanner": "scanner-primary", "fingerprint": "cf626f939d4a5f87", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-84bb9dcadabb3c20", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/cua-bench/cua_bench/runner/docker_utils.py:57"}, "properties": {"repobilityId": "599ee70e312d9cea", "scanner": "scanner-primary", "fingerprint": "84bb9dcadabb3c20", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-fdd425974848e2f8", "level": "note", "message": {"text": "Legacy-named symbol `create_overlay_copy` in libs/cua-bench/cua_bench/runner/task_runner.py:19"}, "properties": {"repobilityId": "b2dd66914294ee44", "scanner": "scanner-primary", "fingerprint": "fdd425974848e2f8", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-d77f380ce5c85b46", "level": "none", "message": {"text": "Commented-code block (5 lines) in libs/cua-bench/cua_bench/runner/task_runner.py:919"}, "properties": {"repobilityId": "226f553d20c3848e", "scanner": "scanner-primary", "fingerprint": "d77f380ce5c85b46", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-9c8500f4802b663e", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/cua-bench/cua_bench/apps/kicad.py:317"}, "properties": {"repobilityId": "9626f2d81f1461c2", "scanner": "scanner-primary", "fingerprint": "9c8500f4802b663e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-648f274ad7b83e71", "level": "error", "message": {"text": "Blocking `time.sleep(...)` inside `async def _run` \u2014 libs/cua-bench/cua_bench/scripts/benchmark_workers.py:241"}, "properties": {"repobilityId": "cf765ef60521bd3e", "scanner": "scanner-primary", "fingerprint": "648f274ad7b83e71", "layer": "quality", "severity": "high", "confidence": 1.0, "tags": ["integrity", "sync-io-in-async", "performance"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/cua_bench/scripts/benchmark_workers.py"}, "region": {"startLine": 241}}}]}, {"ruleId": "scanner-b7de418d3e59ede2", "level": "none", "message": {"text": "Commented-code block (7 lines) in libs/cua-bench/cua_bench/scripts/dump_task_registry_mosaic.py:17"}, "properties": {"repobilityId": "246e466ac8d63f75", "scanner": "scanner-primary", "fingerprint": "b7de418d3e59ede2", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2c0ca1aa0706641e", "level": "none", "message": {"text": "Commented-code block (7 lines) in libs/cua-bench/cua_bench/scripts/dump_task_registry.py:17"}, "properties": {"repobilityId": "545be079a56f154b", "scanner": "scanner-primary", "fingerprint": "2c0ca1aa0706641e", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-8526d1579a784137", "level": "error", "message": {"text": "Blocking `urllib.request.urlopen(...)` inside `async def _execute_native_interactive` \u2014 libs/cua-bench/cua_bench/cli/commands/interact.py:356"}, "properties": {"repobilityId": "b4ac7168b2b5ca0d", "scanner": "scanner-primary", "fingerprint": "8526d1579a784137", "layer": "quality", "severity": "high", "confidence": 1.0, "tags": ["integrity", "sync-io-in-async", "performance"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/cua_bench/cli/commands/interact.py"}, "region": {"startLine": 356}}}]}, {"ruleId": "scanner-5a2613bfbea78809", "level": "note", "message": {"text": "Legacy-named symbol `create_overlay_copy` in libs/cua-bench/cua_bench/cli/commands/image.py:26"}, "properties": {"repobilityId": "c19ee02afc390f98", "scanner": "scanner-primary", "fingerprint": "5a2613bfbea78809", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-8d24e43fe90f5eb1", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/cua-bench/cua_bench/cli/commands/image.py:237"}, "properties": {"repobilityId": "a63fe248e04580c7", "scanner": "scanner-primary", "fingerprint": "8d24e43fe90f5eb1", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-60566934709b4643", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/cua-bench/cua_bench/cli/commands/agent.py:149"}, "properties": {"repobilityId": "454b53826f4372fe", "scanner": "scanner-primary", "fingerprint": "60566934709b4643", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-3d76ce7a32aa672a", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/cua-bench/cua_bench/cli/commands/run.py:1354"}, "properties": {"repobilityId": "d8fc99010ec0c6ab", "scanner": "scanner-primary", "fingerprint": "3d76ce7a32aa672a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-6d22fd84bc01a4b7", "level": "note", "message": {"text": "Stub function `log_message` (body is just `pass`/`return`) \u2014 libs/cua-bench/cua_bench/cli/commands/trace.py:334"}, "properties": {"repobilityId": "31a4c6e37a80c7a8", "scanner": "scanner-primary", "fingerprint": "6d22fd84bc01a4b7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "empty-handler", "dead-code"]}}, {"ruleId": "scanner-2bd50ab66f6338ac", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/cua-bench/cua_bench/cli/commands/task.py:527"}, "properties": {"repobilityId": "7b47c475ea268caf", "scanner": "scanner-primary", "fingerprint": "2bd50ab66f6338ac", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-b93e9227e8ae6b5d", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/cua-bench/cua_bench/sessions/providers/local_environment.py:388"}, "properties": {"repobilityId": "e597e46f98de7734", "scanner": "scanner-primary", "fingerprint": "b93e9227e8ae6b5d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-1f2c9a44fe2789d4", "level": "none", "message": {"text": "Commented-code block (5 lines) in libs/cua-bench/cua_bench/computers/remote.py:288"}, "properties": {"repobilityId": "3c883ab918de383d", "scanner": "scanner-primary", "fingerprint": "1f2c9a44fe2789d4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-4fe14c6feb5cf62a", "level": "none", "message": {"text": "Commented-code block (6 lines) in libs/cua-bench/cua_bench/agents/opencua_agent.py:171"}, "properties": {"repobilityId": "3adf4097ce6a1bc1", "scanner": "scanner-primary", "fingerprint": "4fe14c6feb5cf62a", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-1d47f342365c8c60", "level": "none", "message": {"text": "Commented-code block (5 lines) in libs/cua-bench/cua_bench/trainer/off_policy/tinker/grpo.py:189"}, "properties": {"repobilityId": "a87234ecd1157707", "scanner": "scanner-primary", "fingerprint": "1d47f342365c8c60", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-1d6b78d38d6f528b", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/cua-bench/cua_bench/trainer/off_policy/tinker/rollout.py:71"}, "properties": {"repobilityId": "dac3330096fa5a90", "scanner": "scanner-primary", "fingerprint": "1d6b78d38d6f528b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-b43af4015f057c36", "level": "error", "message": {"text": "Blocking `urllib.request.urlopen(...)` inside `async def test_status` \u2014 libs/cua-bench/scripts/diagnose_daytona.py:45"}, "properties": {"repobilityId": "524b1868b7d31799", "scanner": "scanner-primary", "fingerprint": "b43af4015f057c36", "layer": "quality", "severity": "high", "confidence": 1.0, "tags": ["integrity", "sync-io-in-async", "performance"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/scripts/diagnose_daytona.py"}, "region": {"startLine": 45}}}]}, {"ruleId": "scanner-292c05a1816fe4bb", "level": "error", "message": {"text": "Blocking `urllib.request.urlopen(...)` inside `async def main` \u2014 libs/cua-bench/scripts/diagnose_daytona.py:99"}, "properties": {"repobilityId": "9bcdfaf1e3ba1ff6", "scanner": "scanner-primary", "fingerprint": "292c05a1816fe4bb", "layer": "quality", "severity": "high", "confidence": 1.0, "tags": ["integrity", "sync-io-in-async", "performance"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/scripts/diagnose_daytona.py"}, "region": {"startLine": 99}}}]}, {"ruleId": "scanner-df3bb0662c8982eb", "level": "error", "message": {"text": "Blocking `time.sleep(...)` inside `async def main` \u2014 libs/cua-bench/scripts/diagnose_daytona.py:105"}, "properties": {"repobilityId": "fe632f2eb3a37823", "scanner": "scanner-primary", "fingerprint": "df3bb0662c8982eb", "layer": "quality", "severity": "high", "confidence": 1.0, "tags": ["integrity", "sync-io-in-async", "performance"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/scripts/diagnose_daytona.py"}, "region": {"startLine": 105}}}]}, {"ruleId": "scanner-56a80efc4ce2696f", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/cua-bench/scripts/run_calibration.py:41"}, "properties": {"repobilityId": "8563723a687684ba", "scanner": "scanner-primary", "fingerprint": "56a80efc4ce2696f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-c64af08efa10f110", "level": "none", "message": {"text": "Commented-code block (6 lines) in libs/cua-bench/scripts/calibrate_tasks.py:38"}, "properties": {"repobilityId": "1c311c67acc09b8d", "scanner": "scanner-primary", "fingerprint": "c64af08efa10f110", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-08eb06fbd8441b3b", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/cua-bench/scripts/calibrate_tasks.py:100"}, "properties": {"repobilityId": "4d72d71054771c99", "scanner": "scanner-primary", "fingerprint": "08eb06fbd8441b3b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-3d7e0c8ab05306e3", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/cua-bench/tasks/winarena_adapter/cli.py:65"}, "properties": {"repobilityId": "347d30334e36ca99", "scanner": "scanner-primary", "fingerprint": "3d7e0c8ab05306e3", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-0db46196e6878960", "level": "error", "message": {"text": "Blocking `requests.get(...)` inside `async def _download_setup` \u2014 libs/cua-bench/tasks/winarena_adapter/setup_controller.py:88"}, "properties": {"repobilityId": "3230d534d74dfb99", "scanner": "scanner-primary", "fingerprint": "0db46196e6878960", "layer": "quality", "severity": "high", "confidence": 1.0, "tags": ["integrity", "sync-io-in-async", "performance"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/tasks/winarena_adapter/setup_controller.py"}, "region": {"startLine": 88}}}]}, {"ruleId": "scanner-88fb058546741ba8", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/cua-bench/tasks/winarena_adapter/evaluators/getters/vlc.py:27"}, "properties": {"repobilityId": "abd753b322bb1e4a", "scanner": "scanner-primary", "fingerprint": "88fb058546741ba8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-069dbfeb8ebaf242", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/cua-bench/tasks/winarena_adapter/evaluators/getters/general.py:19"}, "properties": {"repobilityId": "2e2ba5613e7f0cf1", "scanner": "scanner-primary", "fingerprint": "069dbfeb8ebaf242", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-f703f7daa1420bca", "level": "none", "message": {"text": "Commented-code block (11 lines) in libs/cua-bench/tasks/winarena_adapter/evaluators/getters/edge.py:177"}, "properties": {"repobilityId": "5fdd5707ac206c06", "scanner": "scanner-primary", "fingerprint": "f703f7daa1420bca", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-5454a41c13cf587f", "level": "none", "message": {"text": "Commented-code block (7 lines) in libs/cua-bench/tasks/winarena_adapter/evaluators/getters/impress.py:123"}, "properties": {"repobilityId": "6e84aa225a8c02a5", "scanner": "scanner-primary", "fingerprint": "5454a41c13cf587f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-8174ebea8746a9ce", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/cua-bench/tasks/winarena_adapter/evaluators/getters/file.py:63"}, "properties": {"repobilityId": "d95a7a9a2f4b46e4", "scanner": "scanner-primary", "fingerprint": "8174ebea8746a9ce", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-157d73b2c6f1e3f4", "level": "none", "message": {"text": "Commented-code block (5 lines) in libs/cua-bench/tasks/winarena_adapter/evaluators/getters/settings.py:18"}, "properties": {"repobilityId": "fa23d65b04d142e0", "scanner": "scanner-primary", "fingerprint": "157d73b2c6f1e3f4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-e6ee38e1b2bfb28c", "level": "note", "message": {"text": "Stub function `compare_audios_by_dl_model` (body is just `pass`/`return`) \u2014 libs/cua-bench/tasks/winarena_adapter/evaluators/metrics/vlc.py:161"}, "properties": {"repobilityId": "7209c925c4f1526b", "scanner": "scanner-primary", "fingerprint": "e6ee38e1b2bfb28c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "empty-handler", "dead-code"]}}, {"ruleId": "scanner-2c0a21e80d955e5a", "level": "note", "message": {"text": "Stub function `infeasible` (body is just `pass`/`return`) \u2014 libs/cua-bench/tasks/winarena_adapter/evaluators/metrics/__init__.py:127"}, "properties": {"repobilityId": "9bf73e1a8469f9e9", "scanner": "scanner-primary", "fingerprint": "2c0a21e80d955e5a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "empty-handler", "dead-code"]}}, {"ruleId": "scanner-405cd16fa6cec5f4", "level": "note", "message": {"text": "Legacy-named symbol `data_copy` in libs/cua-bench/tasks/winarena_adapter/evaluators/metrics/vscode.py:65"}, "properties": {"repobilityId": "f5868bbd9dd46adb", "scanner": "scanner-primary", "fingerprint": "405cd16fa6cec5f4", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-05180784b3951192", "level": "note", "message": {"text": "Stub function `check_python_file_by_gold_file` (body is just `pass`/`return`) \u2014 libs/cua-bench/tasks/winarena_adapter/evaluators/metrics/vscode.py:236"}, "properties": {"repobilityId": "ae53eae2f3468047", "scanner": "scanner-primary", "fingerprint": "05180784b3951192", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "empty-handler", "dead-code"]}}, {"ruleId": "scanner-993f25adc6fe5bfb", "level": "none", "message": {"text": "Commented-code block (12 lines) in libs/cua-bench/tasks/winarena_adapter/evaluators/metrics/table.py:205"}, "properties": {"repobilityId": "901a0320ee1ee2ae", "scanner": "scanner-primary", "fingerprint": "993f25adc6fe5bfb", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-31bae7fd39424e38", "level": "none", "message": {"text": "Commented-code block (9 lines) in libs/cua-bench/tasks/winarena_adapter/evaluators/metrics/utils.py:96"}, "properties": {"repobilityId": "38ff6f015c9e2c4b", "scanner": "scanner-primary", "fingerprint": "31bae7fd39424e38", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-5b0ea994da6f1c9f", "level": "none", "message": {"text": "Commented-code block (6 lines) in libs/cua-bench/tasks/winarena_adapter/infra/scripts/run_azure_batch.py:189"}, "properties": {"repobilityId": "b86072b66226ae51", "scanner": "scanner-primary", "fingerprint": "5b0ea994da6f1c9f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-533cfe818f571577", "level": "none", "message": {"text": "Commented-code block (5 lines) in libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/computer.py:183"}, "properties": {"repobilityId": "705df0aca92e2ed1", "scanner": "scanner-primary", "fingerprint": "533cfe818f571577", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-979457f61844b6ea", "level": "none", "message": {"text": "Commented-code block (7 lines) in libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:249"}, "properties": {"repobilityId": "57536b246bc0efce", "scanner": "scanner-primary", "fingerprint": "979457f61844b6ea", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-e8d212e444a36c26", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:320"}, "properties": {"repobilityId": "afb007462f7e49c6", "scanner": "scanner-primary", "fingerprint": "e8d212e444a36c26", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-b94c198a334ed822", "level": "none", "message": {"text": "Commented-code block (7 lines) in libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/screen_utils.py:8"}, "properties": {"repobilityId": "633df47490405048", "scanner": "scanner-primary", "fingerprint": "b94c198a334ed822", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-6ad079249795d4f5", "level": "none", "message": {"text": "Commented-code block (5 lines) in libs/typescript/playground/src/index.ts:1"}, "properties": {"repobilityId": "fdf2f73f392a4d0a", "scanner": "scanner-primary", "fingerprint": "6ad079249795d4f5", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-bb5b7276dba0266f", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 libs/typescript/playground/src/adapters/cloud.ts:109"}, "properties": {"repobilityId": "d69bc51bf68760f4", "scanner": "scanner-primary", "fingerprint": "bb5b7276dba0266f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-9e75dbedae23a57b", "level": "none", "message": {"text": "Commented-code block (12 lines) in libs/typescript/playground/src/constants/sandboxPresets.ts:30"}, "properties": {"repobilityId": "141606bbed30bdc9", "scanner": "scanner-primary", "fingerprint": "9e75dbedae23a57b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b68c62181711811a", "level": "none", "message": {"text": "Commented-code block (8 lines) in libs/typescript/playground/src/components/TrajectoryViewer/index.tsx:318"}, "properties": {"repobilityId": "2dbcddac22b7526b", "scanner": "scanner-primary", "fingerprint": "b68c62181711811a", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-780305e92c71da2e", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 libs/typescript/playground/src/components/TrajectoryViewer/index.tsx:918"}, "properties": {"repobilityId": "6c1efa44eb5baff1", "scanner": "scanner-primary", "fingerprint": "780305e92c71da2e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-4d7b80bc538c1525", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 libs/typescript/playground/src/components/modals/ReplayTrajectoryModal.tsx:95"}, "properties": {"repobilityId": "ca25d21e7abaf097", "scanner": "scanner-primary", "fingerprint": "4d7b80bc538c1525", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-30307bf31007eb42", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 libs/typescript/agent/src/client.ts:148"}, "properties": {"repobilityId": "7d5f6b3b37eacef6", "scanner": "scanner-primary", "fingerprint": "30307bf31007eb42", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-2298bc1f6b822439", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 libs/typescript/cua-cli/src/auth.ts:25"}, "properties": {"repobilityId": "7d7949c02c106ccf", "scanner": "scanner-primary", "fingerprint": "2298bc1f6b822439", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-9dd60692c48e3cff", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 libs/typescript/cua-cli/src/http.ts:21"}, "properties": {"repobilityId": "7d5796ba78ad6463", "scanner": "scanner-primary", "fingerprint": "9dd60692c48e3cff", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-b2b1463b8ad01831", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 libs/typescript/cua-cli/src/commands/image.ts:245"}, "properties": {"repobilityId": "a5c883362beccb44", "scanner": "scanner-primary", "fingerprint": "b2b1463b8ad01831", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-034500174d3a4a8e", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 libs/typescript/cua-cli/src/commands/skills.ts:358"}, "properties": {"repobilityId": "ff21555b3b4d33d6", "scanner": "scanner-primary", "fingerprint": "034500174d3a4a8e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-a7b72d9914bc2405", "level": "none", "message": {"text": "Commented-code block (5 lines) in libs/cua-driver/rust/tests/integration/test_cursor_visibility.py:231"}, "properties": {"repobilityId": "8b7f02c47f165cb5", "scanner": "scanner-primary", "fingerprint": "a7b72d9914bc2405", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2f9b6594d989e3eb", "level": "none", "message": {"text": "Commented-code block (5 lines) in libs/cua-driver/rust/tests/integration/test_focus_steal_parity.py:153"}, "properties": {"repobilityId": "57b66c4cde63bf21", "scanner": "scanner-primary", "fingerprint": "2f9b6594d989e3eb", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a5b8f4320e447c28", "level": "none", "message": {"text": "Commented-code block (6 lines) in libs/cua-driver/rust/tests/integration/test_api_parity.py:83"}, "properties": {"repobilityId": "361ba7f377dac2dd", "scanner": "scanner-primary", "fingerprint": "a5b8f4320e447c28", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-4bf0d62ff4cf1da2", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/cua-driver/python/build_wheel.py:236"}, "properties": {"repobilityId": "18492ccfcafe78b8", "scanner": "scanner-primary", "fingerprint": "4bf0d62ff4cf1da2", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-a24c5d2dc64636aa", "level": "none", "message": {"text": "Commented-code block (6 lines) in libs/cua-driver/swift/Tests/integration/test_click_pixel_ax.py:108"}, "properties": {"repobilityId": "77e8dc8ae2e354b9", "scanner": "scanner-primary", "fingerprint": "a24c5d2dc64636aa", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-02643a5ec21b3502", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/cua-driver/swift/Tests/integration/driver_client.py:158"}, "properties": {"repobilityId": "cf615f7ce3c910ad", "scanner": "scanner-primary", "fingerprint": "02643a5ec21b3502", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-a5cf9aca79b1aada", "level": "none", "message": {"text": "Commented-code block (6 lines) in libs/cua-driver/swift/Tests/integration/test_hermes_chrome_form_fill.py:306"}, "properties": {"repobilityId": "deba73626ba721bb", "scanner": "scanner-primary", "fingerprint": "a5cf9aca79b1aada", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-431049ab418a7621", "level": "none", "message": {"text": "Commented-code block (13 lines) in libs/python/agent/example.py:101"}, "properties": {"repobilityId": "b6cf104d2e1d2811", "scanner": "scanner-primary", "fingerprint": "431049ab418a7621", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-91dc56762c617645", "level": "note", "message": {"text": "Legacy-named symbol `_extract_click_coords_old` in libs/python/agent/tests/test_predict_click_zero_coords.py:10"}, "properties": {"repobilityId": "dd798d455c8dc0e9", "scanner": "scanner-primary", "fingerprint": "91dc56762c617645", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-4a94392ca90533a8", "level": "none", "message": {"text": "Commented-code block (5 lines) in libs/python/agent/cua_agent/agent.py:745"}, "properties": {"repobilityId": "75f6052f3f4f26e1", "scanner": "scanner-primary", "fingerprint": "4a94392ca90533a8", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-bbcab8db6a2ebed6", "level": "note", "message": {"text": "Legacy-named symbol `messages_copy` in libs/python/agent/cua_agent/adapters/azure_ml_adapter.py:88"}, "properties": {"repobilityId": "29a296fd106bd0d7", "scanner": "scanner-primary", "fingerprint": "bbcab8db6a2ebed6", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-a377a06ebb2f6269", "level": "none", "message": {"text": "Commented-code block (6 lines) in libs/python/agent/cua_agent/ui/gradio/app.py:94"}, "properties": {"repobilityId": "76c0fbbd14c99b89", "scanner": "scanner-primary", "fingerprint": "a377a06ebb2f6269", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-4517eda0a233c04a", "level": "none", "message": {"text": "Commented-code block (26 lines) in libs/python/agent/cua_agent/callbacks/operator_validator.py:107"}, "properties": {"repobilityId": "ffadd5f8aab4ab5b", "scanner": "scanner-primary", "fingerprint": "4517eda0a233c04a", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-1a1cfab5887874d0", "level": "none", "message": {"text": "Commented-code block (6 lines) in libs/python/agent/cua_agent/loops/anthropic.py:283"}, "properties": {"repobilityId": "8ee2a03066dc4f73", "scanner": "scanner-primary", "fingerprint": "1a1cfab5887874d0", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-86f068d2a89f6ac9", "level": "none", "message": {"text": "Commented-code block (5 lines) in libs/python/agent/cua_agent/loops/generic_vlm.py:89"}, "properties": {"repobilityId": "a1d0769185e71fb2", "scanner": "scanner-primary", "fingerprint": "86f068d2a89f6ac9", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-59a7aa795f752e8d", "level": "none", "message": {"text": "Commented-code block (47 lines) in libs/python/agent/cua_agent/loops/gemini.py:508"}, "properties": {"repobilityId": "0464eefb7c2d2186", "scanner": "scanner-primary", "fingerprint": "59a7aa795f752e8d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-cffbfdaf6cc99333", "level": "none", "message": {"text": "Commented-code block (5 lines) in libs/python/agent/cua_agent/loops/qwen35.py:96"}, "properties": {"repobilityId": "e03f4d85320554da", "scanner": "scanner-primary", "fingerprint": "cffbfdaf6cc99333", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-72798a4f42c019e4", "level": "none", "message": {"text": "Commented-code block (12 lines) in libs/python/agent/cua_agent/loops/uitars.py:545"}, "properties": {"repobilityId": "1962a94011cf7995", "scanner": "scanner-primary", "fingerprint": "72798a4f42c019e4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-0caf40571f07024f", "level": "note", "message": {"text": "Legacy-named symbol `msg_copy` in libs/python/agent/cua_agent/loops/moondream3.py:93"}, "properties": {"repobilityId": "b2141491ae048401", "scanner": "scanner-primary", "fingerprint": "0caf40571f07024f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-4e75b7ea8b3ece42", "level": "none", "message": {"text": "Commented-code block (7 lines) in libs/python/computer-server/computer_server/main.py:1225"}, "properties": {"repobilityId": "a7ebf83b17a39976", "scanner": "scanner-primary", "fingerprint": "4e75b7ea8b3ece42", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-fb63ff0d885e60d8", "level": "none", "message": {"text": "Commented-code block (5 lines) in libs/python/computer-server/computer_server/utils/wallpaper.py:13"}, "properties": {"repobilityId": "9e21bfeb4f8d5a57", "scanner": "scanner-primary", "fingerprint": "fb63ff0d885e60d8", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-f04aa1eb621ec9a4", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/python/computer-server/computer_server/utils/wallpaper.py:143"}, "properties": {"repobilityId": "f47a7f9b214db9a8", "scanner": "scanner-primary", "fingerprint": "f04aa1eb621ec9a4", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-286d6b2c6ac6f799", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/python/computer-server/computer_server/utils/helpers.py:42"}, "properties": {"repobilityId": "5fb32b0535699347", "scanner": "scanner-primary", "fingerprint": "286d6b2c6ac6f799", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-dfdc6b438c300aa9", "level": "none", "message": {"text": "Commented-code block (5 lines) in libs/python/computer-server/computer_server/diorama/draw.py:695"}, "properties": {"repobilityId": "eb3fbb6d3fc12f56", "scanner": "scanner-primary", "fingerprint": "dfdc6b438c300aa9", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-5f454aa9a497f203", "level": "error", "message": {"text": "Blocking `time.sleep(...)` inside `async def main` \u2014 libs/python/computer-server/computer_server/diorama/diorama.py:540"}, "properties": {"repobilityId": "279de8ad7eb4895a", "scanner": "scanner-primary", "fingerprint": "5f454aa9a497f203", "layer": "quality", "severity": "high", "confidence": 1.0, "tags": ["integrity", "sync-io-in-async", "performance"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/computer-server/computer_server/diorama/diorama.py"}, "region": {"startLine": 540}}}]}, {"ruleId": "scanner-ab6dfc901e2e9998", "level": "none", "message": {"text": "Commented-code block (5 lines) in libs/python/computer-server/computer_server/handlers/android.py:593"}, "properties": {"repobilityId": "35fb41c4bc83077b", "scanner": "scanner-primary", "fingerprint": "ab6dfc901e2e9998", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-bb56441ea22e8e12", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/python/computer-server/computer_server/handlers/generic.py:98"}, "properties": {"repobilityId": "167947cdb35363a3", "scanner": "scanner-primary", "fingerprint": "bb56441ea22e8e12", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-e72a541f92a2b910", "level": "note", "message": {"text": "Legacy-named symbol `files_to_copy` in libs/python/mcp-server/build-extension.py:39"}, "properties": {"repobilityId": "6b3f65cff7fb5a5c", "scanner": "scanner-primary", "fingerprint": "e72a541f92a2b910", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-cbe4f9b4611a2e9b", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/python/mcp-server/build-extension.py:129"}, "properties": {"repobilityId": "b7b62ce64b8c3fca", "scanner": "scanner-primary", "fingerprint": "cbe4f9b4611a2e9b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-b445d71c87d432de", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/python/computer/computer/computer.py:1516"}, "properties": {"repobilityId": "63908017a6ed1919", "scanner": "scanner-primary", "fingerprint": "b445d71c87d432de", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-ee042a6a83db3603", "level": "none", "message": {"text": "Commented-code block (6 lines) in libs/python/computer/computer/interface/generic.py:1245"}, "properties": {"repobilityId": "78a73ae83e9db3a6", "scanner": "scanner-primary", "fingerprint": "ee042a6a83db3603", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-1f26765815e360e3", "level": "note", "message": {"text": "Legacy-named symbol `handle_copy` in libs/python/computer/computer/ui/gradio/app.py:755"}, "properties": {"repobilityId": "d6dd478800597a9b", "scanner": "scanner-primary", "fingerprint": "1f26765815e360e3", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-01e1d83e7253274f", "level": "none", "message": {"text": "Commented-code block (5 lines) in libs/python/computer/computer/providers/lume_api.py:59"}, "properties": {"repobilityId": "64a70e6dc30e0a15", "scanner": "scanner-primary", "fingerprint": "01e1d83e7253274f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-4ac3301ceb714f71", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/python/computer/computer/providers/docker/provider.py:290"}, "properties": {"repobilityId": "7f5168f348bda9c9", "scanner": "scanner-primary", "fingerprint": "4ac3301ceb714f71", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-be79960c3986c293", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/python/computer/computer/providers/winsandbox/provider.py:494"}, "properties": {"repobilityId": "f55332ed4815d193", "scanner": "scanner-primary", "fingerprint": "be79960c3986c293", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-7240b581ad18bb6d", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/python/computer/computer/providers/lumier/provider.py:170"}, "properties": {"repobilityId": "292991c90e2b27e6", "scanner": "scanner-primary", "fingerprint": "7240b581ad18bb6d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-244333fc2c1c0d0f", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/python/cua-sandbox-apps/cua_sandbox_apps/cli.py:638"}, "properties": {"repobilityId": "377091a04649a040", "scanner": "scanner-primary", "fingerprint": "244333fc2c1c0d0f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-69a3042c5021291c", "level": "note", "message": {"text": "Legacy-named symbol `list_objects_v2` in libs/python/cua-sandbox-apps/cua_sandbox_apps/discovery/batch_enrich.py:512"}, "properties": {"repobilityId": "f9ebb069d0e513d9", "scanner": "scanner-primary", "fingerprint": "69a3042c5021291c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-e4c626c05ad705da", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/python/cua-cli/cua_cli/auth/browser.py:97"}, "properties": {"repobilityId": "3316b49c5cae90b4", "scanner": "scanner-primary", "fingerprint": "e4c626c05ad705da", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-f3d56ff20acb34f7", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/python/cua-cli/cua_cli/commands/skills.py:665"}, "properties": {"repobilityId": "fc05be753a25649f", "scanner": "scanner-primary", "fingerprint": "f3d56ff20acb34f7", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-ee3bf59378b72c9d", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/python/cua-cli/cua_cli/commands/trajectory.py:191"}, "properties": {"repobilityId": "fef146299fecbea0", "scanner": "scanner-primary", "fingerprint": "ee3bf59378b72c9d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-b5f5ad6b69441198", "level": "note", "message": {"text": "Stub function `log_message` (body is just `pass`/`return`) \u2014 libs/python/cua-cli/cua_cli/commands/trajectory.py:161"}, "properties": {"repobilityId": "9b1e53731b585aaf", "scanner": "scanner-primary", "fingerprint": "b5f5ad6b69441198", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "empty-handler", "dead-code"]}}, {"ruleId": "scanner-95a64056136a10b6", "level": "note", "message": {"text": "Legacy-named symbol `create_overlay_copy` in libs/python/cua-cli/cua_cli/commands/local_image.py:32"}, "properties": {"repobilityId": "d21cb06761c1495e", "scanner": "scanner-primary", "fingerprint": "95a64056136a10b6", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-38ee23004bab92d9", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/python/cua-cli/cua_cli/commands/local_image.py:81"}, "properties": {"repobilityId": "0755fb32e4d3a725", "scanner": "scanner-primary", "fingerprint": "38ee23004bab92d9", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-fd19ed23efa60b05", "level": "note", "message": {"text": "Legacy-named symbol `create_overlay_copy` in libs/python/cua-cli/cua_cli/utils/docker.py:60"}, "properties": {"repobilityId": "b87ef2b25e2b14c1", "scanner": "scanner-primary", "fingerprint": "fd19ed23efa60b05", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-79b9c3a914cedee0", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/python/cua-cli/cua_cli/utils/docker.py:99"}, "properties": {"repobilityId": "bd2eb9ed983d06a1", "scanner": "scanner-primary", "fingerprint": "79b9c3a914cedee0", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-54ace7817ee9e04d", "level": "note", "message": {"text": "Legacy-named symbol `test_vm_legacy` in libs/python/cua-sandbox/tests/test_oci.py:124"}, "properties": {"repobilityId": "2829dbc1be106c51", "scanner": "scanner-primary", "fingerprint": "54ace7817ee9e04d", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-82731b7f0c102a4e", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/python/cua-sandbox/cua_sandbox/sandbox.py:807"}, "properties": {"repobilityId": "1a14f862314b63d1", "scanner": "scanner-primary", "fingerprint": "82731b7f0c102a4e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-85ab863de9ccd3ad", "level": "note", "message": {"text": "Stub function `record_event` (body is just `pass`/`return`) \u2014 libs/python/cua-sandbox/cua_sandbox/sandbox.py:55"}, "properties": {"repobilityId": "496b56881a1fcf4e", "scanner": "scanner-primary", "fingerprint": "85ab863de9ccd3ad", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "empty-handler", "dead-code"]}}, {"ruleId": "scanner-0a65d18df345ea20", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/python/cua-sandbox/cua_sandbox/image.py:61"}, "properties": {"repobilityId": "34da6adab1cec1ed", "scanner": "scanner-primary", "fingerprint": "0a65d18df345ea20", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-cd839172eedf854a", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/python/cua-sandbox/cua_sandbox/registry/qemu_builder.py:102"}, "properties": {"repobilityId": "545d1f0343b1b499", "scanner": "scanner-primary", "fingerprint": "cd839172eedf854a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-d40e4b211d78e8db", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/python/cua-sandbox/cua_sandbox/transport/adb.py:42"}, "properties": {"repobilityId": "2868e9543194e38d", "scanner": "scanner-primary", "fingerprint": "d40e4b211d78e8db", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-fdfb90a6d570cc6a", "level": "note", "message": {"text": "Stub function `disconnect` (body is just `pass`/`return`) \u2014 libs/python/cua-sandbox/cua_sandbox/transport/adb.py:44"}, "properties": {"repobilityId": "ec69fb2048aa1436", "scanner": "scanner-primary", "fingerprint": "fdfb90a6d570cc6a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "empty-handler", "dead-code"]}}, {"ruleId": "scanner-5bc3c51dd29f79ee", "level": "none", "message": {"text": "Commented-code block (7 lines) in libs/python/cua-sandbox/cua_sandbox/transport/http.py:20"}, "properties": {"repobilityId": "32ff50779dbcb8e5", "scanner": "scanner-primary", "fingerprint": "5bc3c51dd29f79ee", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b39bea83e9c86b38", "level": "none", "message": {"text": "Commented-code block (5 lines) in libs/python/cua-sandbox/cua_sandbox/transport/cloud.py:149"}, "properties": {"repobilityId": "fb42f889d73c024f", "scanner": "scanner-primary", "fingerprint": "b39bea83e9c86b38", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-bfc38e144194e8cd", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/python/cua-sandbox/cua_sandbox/transport/cloud.py:519"}, "properties": {"repobilityId": "9705ed3a6708510a", "scanner": "scanner-primary", "fingerprint": "bfc38e144194e8cd", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-b70f44868a8981ec", "level": "error", "message": {"text": "Blocking `urllib.request.urlretrieve(...)` inside `async def _install_apk` \u2014 libs/python/cua-sandbox/cua_sandbox/transport/cloud.py:519"}, "properties": {"repobilityId": "f7c6b9ca0fe27a6a", "scanner": "scanner-primary", "fingerprint": "b70f44868a8981ec", "layer": "quality", "severity": "high", "confidence": 1.0, "tags": ["integrity", "sync-io-in-async", "performance"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox/cua_sandbox/transport/cloud.py"}, "region": {"startLine": 519}}}]}, {"ruleId": "scanner-5e57cafbd1c4de06", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/python/cua-sandbox/cua_sandbox/runtime/hyperv.py:52"}, "properties": {"repobilityId": "bd9efcecc040bdb3", "scanner": "scanner-primary", "fingerprint": "5e57cafbd1c4de06", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-034a4735075f2c1b", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/python/cua-sandbox/cua_sandbox/runtime/docker.py:155"}, "properties": {"repobilityId": "21065c0833ac0d81", "scanner": "scanner-primary", "fingerprint": "034a4735075f2c1b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-7f95435afd941145", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/python/cua-sandbox/cua_sandbox/runtime/android_emulator.py:116"}, "properties": {"repobilityId": "61f266a2a4b371a6", "scanner": "scanner-primary", "fingerprint": "7f95435afd941145", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-d6f835eb9f2db310", "level": "error", "message": {"text": "Blocking `urllib.request.urlretrieve(...)` inside `async def _resolve_apk` \u2014 libs/python/cua-sandbox/cua_sandbox/runtime/android_emulator.py:782"}, "properties": {"repobilityId": "a56137363eec006d", "scanner": "scanner-primary", "fingerprint": "d6f835eb9f2db310", "layer": "quality", "severity": "high", "confidence": 1.0, "tags": ["integrity", "sync-io-in-async", "performance"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox/cua_sandbox/runtime/android_emulator.py"}, "region": {"startLine": 782}}}]}, {"ruleId": "scanner-d67e79b3f73e7e2e", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/python/cua-sandbox/cua_sandbox/runtime/qemu.py:137"}, "properties": {"repobilityId": "6c2a172483f6a2e8", "scanner": "scanner-primary", "fingerprint": "d67e79b3f73e7e2e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-d1d3375440dde40b", "level": "error", "message": {"text": "Blocking `time.sleep(...)` inside `async def start` \u2014 libs/python/cua-sandbox/cua_sandbox/runtime/qemu.py:374"}, "properties": {"repobilityId": "f3b1c88d8d371c95", "scanner": "scanner-primary", "fingerprint": "d1d3375440dde40b", "layer": "quality", "severity": "high", "confidence": 1.0, "tags": ["integrity", "sync-io-in-async", "performance"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox/cua_sandbox/runtime/qemu.py"}, "region": {"startLine": 374}}}]}, {"ruleId": "scanner-515b2ab93c54d486", "level": "error", "message": {"text": "Blocking `time.sleep(...)` inside `async def resume` \u2014 libs/python/cua-sandbox/cua_sandbox/runtime/qemu.py:693"}, "properties": {"repobilityId": "a95a40847c028f6a", "scanner": "scanner-primary", "fingerprint": "515b2ab93c54d486", "layer": "quality", "severity": "high", "confidence": 1.0, "tags": ["integrity", "sync-io-in-async", "performance"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/cua-sandbox/cua_sandbox/runtime/qemu.py"}, "region": {"startLine": 693}}}]}, {"ruleId": "scanner-23e6716b8d064dd1", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/python/cua-sandbox/cua_sandbox/builder/overlay.py:54"}, "properties": {"repobilityId": "383ca470e4274e4b", "scanner": "scanner-primary", "fingerprint": "23e6716b8d064dd1", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-86113fa4a4c875b6", "level": "note", "message": {"text": "Legacy-named symbol `_exec_copy` in libs/python/cua-sandbox/cua_sandbox/builder/executor.py:241"}, "properties": {"repobilityId": "7b802d56bb9d46f9", "scanner": "scanner-primary", "fingerprint": "86113fa4a4c875b6", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-63aa8988b8a66593", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 libs/python/cua-auto/cua_auto/window.py:167"}, "properties": {"repobilityId": "c746d9ccfcb6b432", "scanner": "scanner-primary", "fingerprint": "63aa8988b8a66593", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-41d295c8db24a85a", "level": "note", "message": {"text": "97 env vars used in code but missing from .env.example"}, "properties": {"repobilityId": "c1e5d1102a2e8c84", "scanner": "scanner-primary", "fingerprint": "41d295c8db24a85a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "config-drift"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "4608531ccd5ed31c", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "dbd427e47ce3b1f2", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "4d3b96213c48279f", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "3df159a61338d35e", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "b18aea6ba7878475", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "4e703203b4a59a9d", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "635ce6b6992f00c6", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "c609845eb669af8b", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-46969939caf8120b", "level": "note", "message": {"text": "Near-duplicate function bodies in 9 places"}, "properties": {"repobilityId": "da14c1d489a51ff6", "scanner": "scanner-primary", "fingerprint": "46969939caf8120b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "54b38cfc0429ca41", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-9a56cdccce3cabbf", "level": "note", "message": {"text": "Near-duplicate function bodies in 50 places"}, "properties": {"repobilityId": "a92f281ee0e0e978", "scanner": "scanner-primary", "fingerprint": "9a56cdccce3cabbf", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-9a56cdccce3cabbf", "level": "note", "message": {"text": "Near-duplicate function bodies in 50 places"}, "properties": {"repobilityId": "ae57903e6815e57b", "scanner": "scanner-primary", "fingerprint": "9a56cdccce3cabbf", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-9a56cdccce3cabbf", "level": "note", "message": {"text": "Near-duplicate function bodies in 50 places"}, "properties": {"repobilityId": "d61b3bfebd0ba0d3", "scanner": "scanner-primary", "fingerprint": "9a56cdccce3cabbf", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "62fdb9c4adeb0738", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "2363e7ff45face06", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "860fe4f738260f7c", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "920458222f4340bc", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "9cf2b289dcb37934", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "a7574f29cbb47ea8", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "a43710e29b874b47", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-281911c4b3b188bb", "level": "error", "message": {"text": "FastAPI POST `reset` without auth dependency \u2014 libs/cua-bench/cua_bench/workers/worker_server.py:306"}, "properties": {"repobilityId": "51bc09ec1c861d6d", "scanner": "scanner-primary", "fingerprint": "281911c4b3b188bb", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/cua_bench/workers/worker_server.py"}, "region": {"startLine": 306}}}]}, {"ruleId": "scanner-a9ef5cadd3c1e0f5", "level": "error", "message": {"text": "FastAPI POST `step` without auth dependency \u2014 libs/cua-bench/cua_bench/workers/worker_server.py:363"}, "properties": {"repobilityId": "75b86923d209a236", "scanner": "scanner-primary", "fingerprint": "a9ef5cadd3c1e0f5", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/cua_bench/workers/worker_server.py"}, "region": {"startLine": 363}}}]}, {"ruleId": "scanner-7a0ce0c891d1389d", "level": "error", "message": {"text": "FastAPI POST `shutdown` without auth dependency \u2014 libs/cua-bench/cua_bench/workers/worker_server.py:433"}, "properties": {"repobilityId": "5c073e4c549e9048", "scanner": "scanner-primary", "fingerprint": "7a0ce0c891d1389d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/cua_bench/workers/worker_server.py"}, "region": {"startLine": 433}}}]}, {"ruleId": "scanner-df04c3ea2ba3c8ed", "level": "error", "message": {"text": "Flask mutation route `update_computer` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:138"}, "properties": {"repobilityId": "08a327a74d416d57", "scanner": "scanner-primary", "fingerprint": "df04c3ea2ba3c8ed", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.flask.unauth_route"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py"}, "region": {"startLine": 138}}}]}, {"ruleId": "scanner-795e8f30e8f0c187", "level": "error", "message": {"text": "Flask mutation route `execute_command_windows` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:180"}, "properties": {"repobilityId": "ab170c57059a7b98", "scanner": "scanner-primary", "fingerprint": "795e8f30e8f0c187", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.flask.unauth_route"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py"}, "region": {"startLine": 180}}}]}, {"ruleId": "scanner-0bbba7de6f16e21a", "level": "error", "message": {"text": "Flask mutation route `execute_command` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:211"}, "properties": {"repobilityId": "5a4e6e0b6bf3107f", "scanner": "scanner-primary", "fingerprint": "0bbba7de6f16e21a", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.flask.unauth_route"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py"}, "region": {"startLine": 211}}}]}, {"ruleId": "scanner-a581749bd4feb286", "level": "error", "message": {"text": "Flask mutation route `execute_command` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:212"}, "properties": {"repobilityId": "547f6af33ca77687", "scanner": "scanner-primary", "fingerprint": "a581749bd4feb286", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.flask.unauth_route"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py"}, "region": {"startLine": 212}}}]}, {"ruleId": "scanner-77decf2f120bc0f0", "level": "error", "message": {"text": "Flask mutation route `shutdown_endpoint` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:276"}, "properties": {"repobilityId": "8e7f3a12169c726c", "scanner": "scanner-primary", "fingerprint": "77decf2f120bc0f0", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.flask.unauth_route"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py"}, "region": {"startLine": 276}}}]}, {"ruleId": "scanner-add7fd393fd71ce6", "level": "error", "message": {"text": "Flask mutation route `launch_app` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:290"}, "properties": {"repobilityId": "46ce8f5760b68b5f", "scanner": "scanner-primary", "fingerprint": "add7fd393fd71ce6", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.flask.unauth_route"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py"}, "region": {"startLine": 290}}}]}, {"ruleId": "scanner-bb087e58ad90705d", "level": "error", "message": {"text": "Flask mutation route `get_screen_size` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:1005"}, "properties": {"repobilityId": "6938aafeed2f3d40", "scanner": "scanner-primary", "fingerprint": "bb087e58ad90705d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.flask.unauth_route"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py"}, "region": {"startLine": 1005}}}]}, {"ruleId": "scanner-c3fbaff2812e57ed", "level": "error", "message": {"text": "Flask mutation route `get_window_size` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:1018"}, "properties": {"repobilityId": "b33afd3517db5c55", "scanner": "scanner-primary", "fingerprint": "c3fbaff2812e57ed", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.flask.unauth_route"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py"}, "region": {"startLine": 1018}}}]}, {"ruleId": "scanner-5fb3f9cc96cb2544", "level": "error", "message": {"text": "Flask mutation route `get_desktop_path` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:1045"}, "properties": {"repobilityId": "75a5d3169ba12203", "scanner": "scanner-primary", "fingerprint": "5fb3f9cc96cb2544", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.flask.unauth_route"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py"}, "region": {"startLine": 1045}}}]}, {"ruleId": "scanner-3a4fbc208edda4b1", "level": "error", "message": {"text": "Flask mutation route `get_documents_path` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:1064"}, "properties": {"repobilityId": "a0ad713992e6f43e", "scanner": "scanner-primary", "fingerprint": "3a4fbc208edda4b1", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.flask.unauth_route"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py"}, "region": {"startLine": 1064}}}]}, {"ruleId": "scanner-b41a308b0845a06d", "level": "error", "message": {"text": "Flask mutation route `create_folder` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:1083"}, "properties": {"repobilityId": "7c78533ddb475569", "scanner": "scanner-primary", "fingerprint": "b41a308b0845a06d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.flask.unauth_route"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py"}, "region": {"startLine": 1083}}}]}, {"ruleId": "scanner-c674c7d7f296522f", "level": "error", "message": {"text": "Flask mutation route `create_file` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:1100"}, "properties": {"repobilityId": "a0591bcf4b027b00", "scanner": "scanner-primary", "fingerprint": "c674c7d7f296522f", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.flask.unauth_route"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py"}, "region": {"startLine": 1100}}}]}, {"ruleId": "scanner-d1c9e2ce2d9b3f57", "level": "error", "message": {"text": "Flask mutation route `recycle_file` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:1134"}, "properties": {"repobilityId": "ed0e458c5bf1538a", "scanner": "scanner-primary", "fingerprint": "d1c9e2ce2d9b3f57", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.flask.unauth_route"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py"}, "region": {"startLine": 1134}}}]}, {"ruleId": "scanner-9d1dd1df0a68ca78", "level": "error", "message": {"text": "Flask mutation route `get_folder_exists` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:1146"}, "properties": {"repobilityId": "943ede1ae2ce6fc1", "scanner": "scanner-primary", "fingerprint": "9d1dd1df0a68ca78", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.flask.unauth_route"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py"}, "region": {"startLine": 1146}}}]}, {"ruleId": "scanner-94c0b5854a13bf82", "level": "error", "message": {"text": "Flask mutation route `get_file_exists` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:1172"}, "properties": {"repobilityId": "cc6caa05f262442b", "scanner": "scanner-primary", "fingerprint": "94c0b5854a13bf82", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.flask.unauth_route"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py"}, "region": {"startLine": 1172}}}]}, {"ruleId": "scanner-36a1e9559c0e1bf1", "level": "error", "message": {"text": "Flask mutation route `get_file_explorer_is_details_view` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:1192"}, "properties": {"repobilityId": "9bef3933251ca1ba", "scanner": "scanner-primary", "fingerprint": "36a1e9559c0e1bf1", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.flask.unauth_route"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py"}, "region": {"startLine": 1192}}}]}, {"ruleId": "scanner-dbb9c10953a94dde", "level": "error", "message": {"text": "Flask mutation route `get_wallpaper` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:1228"}, "properties": {"repobilityId": "be3cd8e950c8aec5", "scanner": "scanner-primary", "fingerprint": "dbb9c10953a94dde", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.flask.unauth_route"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py"}, "region": {"startLine": 1228}}}]}, {"ruleId": "scanner-f6df20cfd37d1f5f", "level": "error", "message": {"text": "Flask mutation route `get_directory_tree` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:1286"}, "properties": {"repobilityId": "364901614addab60", "scanner": "scanner-primary", "fingerprint": "f6df20cfd37d1f5f", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.flask.unauth_route"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py"}, "region": {"startLine": 1286}}}]}, {"ruleId": "scanner-2781332087b6f4d9", "level": "error", "message": {"text": "Flask mutation route `get_file` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:1325"}, "properties": {"repobilityId": "9f6449ee44e06f21", "scanner": "scanner-primary", "fingerprint": "2781332087b6f4d9", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.flask.unauth_route"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py"}, "region": {"startLine": 1325}}}]}, {"ruleId": "scanner-f76328b7139af2ea", "level": "error", "message": {"text": "Flask mutation route `upload_file` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:1341"}, "properties": {"repobilityId": "34618ee87fdfacac", "scanner": "scanner-primary", "fingerprint": "f76328b7139af2ea", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.flask.unauth_route"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py"}, "region": {"startLine": 1341}}}]}, {"ruleId": "scanner-1456903305f3efc5", "level": "error", "message": {"text": "Flask mutation route `change_wallpaper` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:1363"}, "properties": {"repobilityId": "e6ac7b53c8fd7bb2", "scanner": "scanner-primary", "fingerprint": "1456903305f3efc5", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.flask.unauth_route"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py"}, "region": {"startLine": 1363}}}]}, {"ruleId": "scanner-bdbaaec95b748dd9", "level": "error", "message": {"text": "Flask mutation route `download_file` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:1411"}, "properties": {"repobilityId": "c4fcfcb8c101d454", "scanner": "scanner-primary", "fingerprint": "bdbaaec95b748dd9", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.flask.unauth_route"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py"}, "region": {"startLine": 1411}}}]}, {"ruleId": "scanner-0edbe86d2b254e7c", "level": "error", "message": {"text": "Flask mutation route `open_file` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:1448"}, "properties": {"repobilityId": "ea2f6eecea2b35f2", "scanner": "scanner-primary", "fingerprint": "0edbe86d2b254e7c", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.flask.unauth_route"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py"}, "region": {"startLine": 1448}}}]}, {"ruleId": "scanner-5945a07c22cb0064", "level": "error", "message": {"text": "Flask mutation route `activate_window` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:1476"}, "properties": {"repobilityId": "ab9a9be458247841", "scanner": "scanner-primary", "fingerprint": "5945a07c22cb0064", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.flask.unauth_route"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py"}, "region": {"startLine": 1476}}}]}, {"ruleId": "scanner-210454922428c244", "level": "error", "message": {"text": "Flask mutation route `clear_task_files` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:1573"}, "properties": {"repobilityId": "ca93b8afad759211", "scanner": "scanner-primary", "fingerprint": "210454922428c244", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.flask.unauth_route"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py"}, "region": {"startLine": 1573}}}]}, {"ruleId": "scanner-a7e9bd8a0ac7afe4", "level": "error", "message": {"text": "Flask mutation route `close_all_windows` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:1623"}, "properties": {"repobilityId": "946d61427684cb6c", "scanner": "scanner-primary", "fingerprint": "a7e9bd8a0ac7afe4", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.flask.unauth_route"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py"}, "region": {"startLine": 1623}}}]}, {"ruleId": "scanner-2216e5ba5f9b7d2d", "level": "error", "message": {"text": "Flask mutation route `close_window` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:1659"}, "properties": {"repobilityId": "eba779ef8ea8a79a", "scanner": "scanner-primary", "fingerprint": "2216e5ba5f9b7d2d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.flask.unauth_route"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py"}, "region": {"startLine": 1659}}}]}, {"ruleId": "scanner-5e0240bc95b7baf9", "level": "error", "message": {"text": "Flask mutation route `start_recording` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:1706"}, "properties": {"repobilityId": "cf4ab6d269c7bb27", "scanner": "scanner-primary", "fingerprint": "5e0240bc95b7baf9", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.flask.unauth_route"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py"}, "region": {"startLine": 1706}}}]}, {"ruleId": "scanner-6fe92f70f11560db", "level": "error", "message": {"text": "Flask mutation route `end_recording` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:1746"}, "properties": {"repobilityId": "f5e87bf452fe5d32", "scanner": "scanner-primary", "fingerprint": "6fe92f70f11560db", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.flask.unauth_route"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py"}, "region": {"startLine": 1746}}}]}, {"ruleId": "scanner-f0481364a304a97f", "level": "error", "message": {"text": "Flask mutation route `save_state` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:1778"}, "properties": {"repobilityId": "b6b75789904b912f", "scanner": "scanner-primary", "fingerprint": "f0481364a304a97f", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.flask.unauth_route"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py"}, "region": {"startLine": 1778}}}]}, {"ruleId": "scanner-6e733731515f9d65", "level": "error", "message": {"text": "Flask mutation route `revert_to_snapshot` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:1813"}, "properties": {"repobilityId": "4061ec1b59a01842", "scanner": "scanner-primary", "fingerprint": "6e733731515f9d65", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.flask.unauth_route"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py"}, "region": {"startLine": 1813}}}]}, {"ruleId": "scanner-bfa88b6b50fdb39f", "level": "error", "message": {"text": "Flask mutation route `get_are_files_sorted_by_modified_time` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:1841"}, "properties": {"repobilityId": "4875d9630b05146c", "scanner": "scanner-primary", "fingerprint": "bfa88b6b50fdb39f", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.flask.unauth_route"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py"}, "region": {"startLine": 1841}}}]}, {"ruleId": "scanner-28a77f9e4539a1a6", "level": "error", "message": {"text": "Flask mutation route `is_directory_read_only_for_user` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:1901"}, "properties": {"repobilityId": "ddfc6e80520c3afb", "scanner": "scanner-primary", "fingerprint": "28a77f9e4539a1a6", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.flask.unauth_route"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py"}, "region": {"startLine": 1901}}}]}, {"ruleId": "scanner-5dc80c871f2635e6", "level": "error", "message": {"text": "Flask mutation route `are_all_images_tagged` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:1925"}, "properties": {"repobilityId": "cab575464c2216a1", "scanner": "scanner-primary", "fingerprint": "5dc80c871f2635e6", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.flask.unauth_route"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py"}, "region": {"startLine": 1925}}}]}, {"ruleId": "scanner-2c9ac941522412f0", "level": "error", "message": {"text": "Flask mutation route `get_library_folders` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:1959"}, "properties": {"repobilityId": "7b2e377501be8f3b", "scanner": "scanner-primary", "fingerprint": "2c9ac941522412f0", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.flask.unauth_route"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py"}, "region": {"startLine": 1959}}}]}, {"ruleId": "scanner-d6812425f9c7f6d9", "level": "error", "message": {"text": "Flask mutation route `get_check_if_timer_started` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:1976"}, "properties": {"repobilityId": "3077aecf7d715e04", "scanner": "scanner-primary", "fingerprint": "d6812425f9c7f6d9", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.flask.unauth_route"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py"}, "region": {"startLine": 1976}}}]}, {"ruleId": "scanner-3a80ee2fe8b2c227", "level": "error", "message": {"text": "Flask mutation route `get_check_if_world_clock_exists` without `@login_required` \u2014 libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py:2007"}, "properties": {"repobilityId": "6f5457ebbd4f35ff", "scanner": "scanner-primary", "fingerprint": "3a80ee2fe8b2c227", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.flask.unauth_route"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/cua-bench/tasks/winarena_adapter/infra/vm/setup/server/main.py"}, "region": {"startLine": 2007}}}]}, {"ruleId": "scanner-de540388b21899f3", "level": "error", "message": {"text": "FastAPI POST `queue_completion` without auth dependency \u2014 libs/python/agent/cua_agent/human_tool/server.py:190"}, "properties": {"repobilityId": "d156fb37a7db8fab", "scanner": "scanner-primary", "fingerprint": "de540388b21899f3", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/agent/cua_agent/human_tool/server.py"}, "region": {"startLine": 190}}}]}, {"ruleId": "scanner-a12c89f117a4eb6d", "level": "error", "message": {"text": "FastAPI POST `complete_call` without auth dependency \u2014 libs/python/agent/cua_agent/human_tool/server.py:213"}, "properties": {"repobilityId": "f14111746a4726ae", "scanner": "scanner-primary", "fingerprint": "a12c89f117a4eb6d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/agent/cua_agent/human_tool/server.py"}, "region": {"startLine": 213}}}]}, {"ruleId": "scanner-de98cf26a206039a", "level": "error", "message": {"text": "FastAPI POST `fail_call` without auth dependency \u2014 libs/python/agent/cua_agent/human_tool/server.py:225"}, "properties": {"repobilityId": "bb964c7aa4793954", "scanner": "scanner-primary", "fingerprint": "de98cf26a206039a", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/agent/cua_agent/human_tool/server.py"}, "region": {"startLine": 225}}}]}, {"ruleId": "scanner-a708f7e33b60b486", "level": "error", "message": {"text": "FastAPI POST `cmd_endpoint` without auth dependency \u2014 libs/python/computer-server/computer_server/main.py:680"}, "properties": {"repobilityId": "57e79c1baa1256ab", "scanner": "scanner-primary", "fingerprint": "a708f7e33b60b486", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/computer-server/computer_server/main.py"}, "region": {"startLine": 680}}}]}, {"ruleId": "scanner-2601f3a970eafde1", "level": "error", "message": {"text": "FastAPI POST `pty_create` without auth dependency \u2014 libs/python/computer-server/computer_server/main.py:813"}, "properties": {"repobilityId": "41882827aadb2215", "scanner": "scanner-primary", "fingerprint": "2601f3a970eafde1", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/computer-server/computer_server/main.py"}, "region": {"startLine": 813}}}]}, {"ruleId": "scanner-b948fd2f69acf9d0", "level": "error", "message": {"text": "FastAPI DELETE `pty_kill` without auth dependency \u2014 libs/python/computer-server/computer_server/main.py:866"}, "properties": {"repobilityId": "f54ed5b487716e4c", "scanner": "scanner-primary", "fingerprint": "b948fd2f69acf9d0", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/computer-server/computer_server/main.py"}, "region": {"startLine": 866}}}]}, {"ruleId": "scanner-cc28bf9e09d75fe8", "level": "error", "message": {"text": "FastAPI POST `pty_stdin` without auth dependency \u2014 libs/python/computer-server/computer_server/main.py:881"}, "properties": {"repobilityId": "b8eee54c22263651", "scanner": "scanner-primary", "fingerprint": "cc28bf9e09d75fe8", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/computer-server/computer_server/main.py"}, "region": {"startLine": 881}}}]}, {"ruleId": "scanner-c577d355a3073a1b", "level": "error", "message": {"text": "FastAPI POST `pty_resize` without auth dependency \u2014 libs/python/computer-server/computer_server/main.py:899"}, "properties": {"repobilityId": "0af5be72cb781679", "scanner": "scanner-primary", "fingerprint": "c577d355a3073a1b", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/computer-server/computer_server/main.py"}, "region": {"startLine": 899}}}]}, {"ruleId": "scanner-d4c865adf8a510ec", "level": "error", "message": {"text": "FastAPI POST `agent_response_endpoint` without auth dependency \u2014 libs/python/computer-server/computer_server/main.py:1035"}, "properties": {"repobilityId": "4faca811468dea6c", "scanner": "scanner-primary", "fingerprint": "d4c865adf8a510ec", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/computer-server/computer_server/main.py"}, "region": {"startLine": 1035}}}]}, {"ruleId": "scanner-cef0ba23a8eafb1d", "level": "error", "message": {"text": "FastAPI POST `playwright_exec_endpoint` without auth dependency \u2014 libs/python/computer-server/computer_server/main.py:1366"}, "properties": {"repobilityId": "96520a0f83a25089", "scanner": "scanner-primary", "fingerprint": "cef0ba23a8eafb1d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "libs/python/computer-server/computer_server/main.py"}, "region": {"startLine": 1366}}}]}, {"ruleId": "scanner-5f8e820d1bde35e3", "level": "error", "message": {"text": "Dangling fetch: POST http://localhost:${port}/stop (libs/cuabot/src/cuabotd.ts:1208)"}, "properties": {"repobilityId": "059a2456606bc27e", "scanner": "scanner-primary", "fingerprint": "5f8e820d1bde35e3", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-19dc976b97cb9358", "level": "error", "message": {"text": "Dangling fetch: POST http://localhost:${port}/telemetry (libs/cuabot/src/telemetry.ts:291)"}, "properties": {"repobilityId": "ec6d3698ecd9ee32", "scanner": "scanner-primary", "fingerprint": "19dc976b97cb9358", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-e8927015be375b7d", "level": "error", "message": {"text": "Dangling fetch: GET http://localhost:${port}/status (libs/cuabot/src/client.ts:188)"}, "properties": {"repobilityId": "867b14e11e99c597", "scanner": "scanner-primary", "fingerprint": "e8927015be375b7d", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-e04517b1d394319b", "level": "error", "message": {"text": "Dangling fetch: GET http://localhost:${port}/status (libs/cuabot/src/client.ts:253)"}, "properties": {"repobilityId": "67285043965401f2", "scanner": "scanner-primary", "fingerprint": "e04517b1d394319b", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-cf841f26c88b2e60", "level": "error", "message": {"text": "Dangling fetch: DELETE /v1/playground/chats/${chatId} (libs/typescript/playground/src/adapters/cloud.ts:86)"}, "properties": {"repobilityId": "db8d0447228ed6ff", "scanner": "scanner-primary", "fingerprint": "cf841f26c88b2e60", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-d478c40a12ed5780", "level": "error", "message": {"text": "Dangling fetch: PUT /v1/playground/chats/${chatId}/messages (libs/typescript/playground/src/adapters/cloud.ts:90)"}, "properties": {"repobilityId": "df68770b051ce6a8", "scanner": "scanner-primary", "fingerprint": "d478c40a12ed5780", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-87b431dbfc3d5335", "level": "error", "message": {"text": "Dangling fetch: PUT /v1/playground/settings/${key} (libs/typescript/playground/src/adapters/cloud.ts:109)"}, "properties": {"repobilityId": "68a1a5a53b068252", "scanner": "scanner-primary", "fingerprint": "87b431dbfc3d5335", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-cd0540401d2a7fb1", "level": "error", "message": {"text": "Dangling fetch: GET /v1/vms/${computerId}/health (libs/typescript/playground/src/adapters/cloud.ts:198)"}, "properties": {"repobilityId": "cdd1db1745d0e5e8", "scanner": "scanner-primary", "fingerprint": "cd0540401d2a7fb1", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-83bf638d8e1d2631", "level": "error", "message": {"text": "Dangling fetch: GET /api/chat/${sessionId}/export (libs/typescript/playground/src/components/modals/ReplayTrajectoryModal.tsx:95)"}, "properties": {"repobilityId": "6db6782c78e3a1e9", "scanner": "scanner-primary", "fingerprint": "83bf638d8e1d2631", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-1d448c89a96c4306", "level": "error", "message": {"text": "Dangling fetch: POST /api/chat/${sessionId}/export (libs/typescript/playground/src/components/modals/ReplayTrajectoryModal.tsx:142)"}, "properties": {"repobilityId": "cc3e179aaad14b4b", "scanner": "scanner-primary", "fingerprint": "1d448c89a96c4306", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-b02b8663736cea57", "level": "error", "message": {"text": "Dangling fetch: GET /api/chat/${sessionId}/export (libs/typescript/playground/src/components/modals/ExportTrajectoryModal.tsx:45)"}, "properties": {"repobilityId": "f8feba1532b48c7d", "scanner": "scanner-primary", "fingerprint": "b02b8663736cea57", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-3f7b8ddccb7ce1ed", "level": "error", "message": {"text": "Dangling fetch: POST /api/chat/${sessionId}/export (libs/typescript/playground/src/components/modals/ExportTrajectoryModal.tsx:93)"}, "properties": {"repobilityId": "d9ccf6c18b92079a", "scanner": "scanner-primary", "fingerprint": "3f7b8ddccb7ce1ed", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-9830daf8c6fbe405", "level": "error", "message": {"text": "Dangling fetch: POST https://api.anthropic.com/v1/messages (libs/typescript/cua-cli/src/commands/skills.ts:358)"}, "properties": {"repobilityId": "7b6e90fb448a2720", "scanner": "scanner-primary", "fingerprint": "9830daf8c6fbe405", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-48ef5160a83285af", "level": "error", "message": {"text": "Dangling fetch: POST https://api.openai.com/v1/chat/completions (libs/typescript/cua-cli/src/commands/skills.ts:472)"}, "properties": {"repobilityId": "85c45cea78786bd7", "scanner": "scanner-primary", "fingerprint": "48ef5160a83285af", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-a7a776760f85a3e7", "level": "note", "message": {"text": "Unused endpoint: POST /reset"}, "properties": {"repobilityId": "b7096fad4d46be8b", "scanner": "scanner-primary", "fingerprint": "a7a776760f85a3e7", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-2e5f7bf1997b085e", "level": "note", "message": {"text": "Unused endpoint: POST /step"}, "properties": {"repobilityId": "3458ce93445a8067", "scanner": "scanner-primary", "fingerprint": "2e5f7bf1997b085e", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-4069bb9c1c1e4187", "level": "note", "message": {"text": "Unused endpoint: GET /screenshot"}, "properties": {"repobilityId": "33d05610d87e9f54", "scanner": "scanner-primary", "fingerprint": "4069bb9c1c1e4187", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-c9537c842ba93d4c", "level": "note", "message": {"text": "Unused endpoint: POST /shutdown"}, "properties": {"repobilityId": "eb0a21447c556feb", "scanner": "scanner-primary", "fingerprint": "c9537c842ba93d4c", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-4e6e42aba92073da", "level": "note", "message": {"text": "Unused endpoint: ANY /update_computer"}, "properties": {"repobilityId": "5a68361dede3fa77", "scanner": "scanner-primary", "fingerprint": "4e6e42aba92073da", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-559e26b4c20f659e", "level": "note", "message": {"text": "Unused endpoint: ANY /execute_windows"}, "properties": {"repobilityId": "fb3378a8036e0144", "scanner": "scanner-primary", "fingerprint": "559e26b4c20f659e", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-75acf0a52d77e2a5", "level": "note", "message": {"text": "Unused endpoint: ANY /setup/execute"}, "properties": {"repobilityId": "bbfa198a43c4b65e", "scanner": "scanner-primary", "fingerprint": "75acf0a52d77e2a5", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-731376e048c9753b", "level": "note", "message": {"text": "Unused endpoint: ANY /execute"}, "properties": {"repobilityId": "a1744ed828035358", "scanner": "scanner-primary", "fingerprint": "731376e048c9753b", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-291097f21b3f70b3", "level": "note", "message": {"text": "Unused endpoint: ANY /probe"}, "properties": {"repobilityId": "39d91c217b0d4844", "scanner": "scanner-primary", "fingerprint": "291097f21b3f70b3", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-6fd3d26780417897", "level": "note", "message": {"text": "Unused endpoint: ANY /shutdown"}, "properties": {"repobilityId": "69dc7a30b40b52d4", "scanner": "scanner-primary", "fingerprint": "6fd3d26780417897", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-de0793af71762a23", "level": "note", "message": {"text": "Unused endpoint: ANY /setup/launch"}, "properties": {"repobilityId": "3abe3cb49f35bacf", "scanner": "scanner-primary", "fingerprint": "de0793af71762a23", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-369c2a7e0d383158", "level": "note", "message": {"text": "Unused endpoint: ANY /screenshot"}, "properties": {"repobilityId": "eb2072104fea42e2", "scanner": "scanner-primary", "fingerprint": "369c2a7e0d383158", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-7dac45b0dc465ac5", "level": "note", "message": {"text": "Unused endpoint: ANY /terminal"}, "properties": {"repobilityId": "85634e6ac49688e0", "scanner": "scanner-primary", "fingerprint": "7dac45b0dc465ac5", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-4416ae8583dfc7d1", "level": "note", "message": {"text": "Unused endpoint: ANY /obs_winagent"}, "properties": {"repobilityId": "212d371dabb840a0", "scanner": "scanner-primary", "fingerprint": "4416ae8583dfc7d1", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-b41a50a89d45f04a", "level": "note", "message": {"text": "Unused endpoint: ANY /accessibility"}, "properties": {"repobilityId": "bcd91831545b7149", "scanner": "scanner-primary", "fingerprint": "b41a50a89d45f04a", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-5a482d14132b1056", "level": "note", "message": {"text": "Unused endpoint: ANY /screen_size"}, "properties": {"repobilityId": "92df9d63ccac04d0", "scanner": "scanner-primary", "fingerprint": "5a482d14132b1056", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-b10c38a655404ef1", "level": "note", "message": {"text": "Unused endpoint: ANY /window_size"}, "properties": {"repobilityId": "89b49ba11c29c7f5", "scanner": "scanner-primary", "fingerprint": "b10c38a655404ef1", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-60e1d95699c1a64b", "level": "note", "message": {"text": "Unused endpoint: ANY /desktop_path"}, "properties": {"repobilityId": "b5cf40e525b05480", "scanner": "scanner-primary", "fingerprint": "60e1d95699c1a64b", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-979c1564a95ef92d", "level": "note", "message": {"text": "Unused endpoint: ANY /documents_path"}, "properties": {"repobilityId": "d397e9c36de05c66", "scanner": "scanner-primary", "fingerprint": "979c1564a95ef92d", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-fb9e0133ab75ebb7", "level": "note", "message": {"text": "Unused endpoint: ANY /setup/create_folder"}, "properties": {"repobilityId": "a65e03d3a1a6d228", "scanner": "scanner-primary", "fingerprint": "fb9e0133ab75ebb7", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-02195aef25d9f6ee", "level": "note", "message": {"text": "Unused endpoint: ANY /setup/create_file"}, "properties": {"repobilityId": "e769f3f49429e6dd", "scanner": "scanner-primary", "fingerprint": "02195aef25d9f6ee", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-0ce9452c09c55dfb", "level": "note", "message": {"text": "Unused endpoint: ANY /setup/recycle"}, "properties": {"repobilityId": "0ca91f4b7cd05641", "scanner": "scanner-primary", "fingerprint": "0ce9452c09c55dfb", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-d55b288ddb62e206", "level": "note", "message": {"text": "Unused endpoint: ANY /folder_exists"}, "properties": {"repobilityId": "d923f3572fadb6ec", "scanner": "scanner-primary", "fingerprint": "d55b288ddb62e206", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-6bb5d3b63da1f6fc", "level": "note", "message": {"text": "Unused endpoint: ANY /file_exists"}, "properties": {"repobilityId": "eb535beb00debc46", "scanner": "scanner-primary", "fingerprint": "6bb5d3b63da1f6fc", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-b697df7103a26b4a", "level": "note", "message": {"text": "Unused endpoint: ANY /is_details_view"}, "properties": {"repobilityId": "a2d38436015f203e", "scanner": "scanner-primary", "fingerprint": "b697df7103a26b4a", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-93e141778e2aec98", "level": "note", "message": {"text": "Unused endpoint: ANY /wallpaper"}, "properties": {"repobilityId": "030f60ebdb3478d5", "scanner": "scanner-primary", "fingerprint": "93e141778e2aec98", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-b5234c1642a76622", "level": "note", "message": {"text": "Unused endpoint: ANY /list_directory"}, "properties": {"repobilityId": "468b982df23efa66", "scanner": "scanner-primary", "fingerprint": "b5234c1642a76622", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-69162b07b57b4e3d", "level": "note", "message": {"text": "Unused endpoint: ANY /file"}, "properties": {"repobilityId": "d3eff08eb9e2350e", "scanner": "scanner-primary", "fingerprint": "69162b07b57b4e3d", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-542e3444c6ca5fb1", "level": "note", "message": {"text": "Unused endpoint: ANY /setup/upload"}, "properties": {"repobilityId": "3c09b7ba29a943a1", "scanner": "scanner-primary", "fingerprint": "542e3444c6ca5fb1", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-9238f1f9b28ba361", "level": "note", "message": {"text": "Unused endpoint: ANY /platform"}, "properties": {"repobilityId": "bb85f9f9f6c3d2be", "scanner": "scanner-primary", "fingerprint": "9238f1f9b28ba361", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-68b2bc2d66966ff0", "level": "note", "message": {"text": "Unused endpoint: ANY /cursor_position"}, "properties": {"repobilityId": "82b64f436e4762e6", "scanner": "scanner-primary", "fingerprint": "68b2bc2d66966ff0", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-5e8799c34e50eaca", "level": "note", "message": {"text": "Unused endpoint: ANY /setup/change_wallpaper"}, "properties": {"repobilityId": "4fd9fa79e820b533", "scanner": "scanner-primary", "fingerprint": "5e8799c34e50eaca", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-ac4882770e15b9b9", "level": "note", "message": {"text": "Unused endpoint: ANY /setup/download_file"}, "properties": {"repobilityId": "c0953231b5b21228", "scanner": "scanner-primary", "fingerprint": "ac4882770e15b9b9", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-f7b94914e11338b8", "level": "note", "message": {"text": "Unused endpoint: ANY /setup/open_file"}, "properties": {"repobilityId": "516bc7d5a2fdc7d6", "scanner": "scanner-primary", "fingerprint": "f7b94914e11338b8", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-69e6fc2bf9388bc6", "level": "note", "message": {"text": "Unused endpoint: ANY /setup/activate_window"}, "properties": {"repobilityId": "986988c4c137ef84", "scanner": "scanner-primary", "fingerprint": "69e6fc2bf9388bc6", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-73c202b26048e770", "level": "note", "message": {"text": "Unused endpoint: ANY /setup/clear_task_files"}, "properties": {"repobilityId": "a70dc5869a0b9671", "scanner": "scanner-primary", "fingerprint": "73c202b26048e770", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-4304a497c6e2da87", "level": "note", "message": {"text": "Unused endpoint: ANY /setup/close_all"}, "properties": {"repobilityId": "877df0ead045900b", "scanner": "scanner-primary", "fingerprint": "4304a497c6e2da87", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-b700689eefc683a3", "level": "note", "message": {"text": "Unused endpoint: ANY /setup/close_window"}, "properties": {"repobilityId": "0841a34759855de9", "scanner": "scanner-primary", "fingerprint": "b700689eefc683a3", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-0f37f868e89682f5", "level": "note", "message": {"text": "Unused endpoint: ANY /start_recording"}, "properties": {"repobilityId": "42360de354161213", "scanner": "scanner-primary", "fingerprint": "0f37f868e89682f5", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-d9f6cff17870c4aa", "level": "note", "message": {"text": "Unused endpoint: ANY /end_recording"}, "properties": {"repobilityId": "9598ac42836d1516", "scanner": "scanner-primary", "fingerprint": "d9f6cff17870c4aa", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-10b675eed73be2a2", "level": "note", "message": {"text": "Unused endpoint: ANY /save_state"}, "properties": {"repobilityId": "f56ea78acac0ca89", "scanner": "scanner-primary", "fingerprint": "10b675eed73be2a2", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-4fe973c51f3547e5", "level": "note", "message": {"text": "Unused endpoint: ANY /revert_to_snapshot"}, "properties": {"repobilityId": "f2e9e1885f43c123", "scanner": "scanner-primary", "fingerprint": "4fe973c51f3547e5", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-869c9a64e4a17555", "level": "note", "message": {"text": "Unused endpoint: ANY /are_files_sorted_by_modified_time"}, "properties": {"repobilityId": "283206f443337e1d", "scanner": "scanner-primary", "fingerprint": "869c9a64e4a17555", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-1a4c19a1260890e9", "level": "note", "message": {"text": "Unused endpoint: ANY /is_directory_read_only_for_user"}, "properties": {"repobilityId": "a76a107fa5b7e334", "scanner": "scanner-primary", "fingerprint": "1a4c19a1260890e9", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-7e6500f960ba808c", "level": "note", "message": {"text": "Unused endpoint: ANY /are_all_images_tagged"}, "properties": {"repobilityId": "89bf54f3daea238b", "scanner": "scanner-primary", "fingerprint": "7e6500f960ba808c", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-9cedf57a7ebdeb07", "level": "note", "message": {"text": "Unused endpoint: ANY /library_folders"}, "properties": {"repobilityId": "cf0192e6f0355ba8", "scanner": "scanner-primary", "fingerprint": "9cedf57a7ebdeb07", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-efc05ffb5c1239df", "level": "note", "message": {"text": "Unused endpoint: ANY /check_if_timer_started"}, "properties": {"repobilityId": "dd8e3bc4966af329", "scanner": "scanner-primary", "fingerprint": "efc05ffb5c1239df", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-4151db9034df50a4", "level": "note", "message": {"text": "Unused endpoint: ANY /check_if_world_clock_exists"}, "properties": {"repobilityId": "5be2658f3c896eae", "scanner": "scanner-primary", "fingerprint": "4151db9034df50a4", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-44b54c0dbf8a4905", "level": "note", "message": {"text": "Unused endpoint: POST /queue"}, "properties": {"repobilityId": "9e5efeb080722209", "scanner": "scanner-primary", "fingerprint": "44b54c0dbf8a4905", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-9de4cecd0e235584", "level": "note", "message": {"text": "Unused endpoint: GET /pending"}, "properties": {"repobilityId": "af50a93896df2118", "scanner": "scanner-primary", "fingerprint": "9de4cecd0e235584", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}]}]}