{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-184fde190184b951", "name": "Stray `console.log` in TS/JS \u2014 fetch-trajectory.js:51", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 fetch-trajectory.js:51"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ceae4cd3ff5259bf", "name": "Insecure pattern 'direct_innerhtml_assignment' in resonance.html:656", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in resonance.html:656"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4f53dae53ee53418", "name": "Insecure pattern 'direct_innerhtml_assignment' in bread_camp.html:266", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in bread_camp.html:266"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-49ce629ba51d313a", "name": "Insecure pattern 'direct_innerhtml_assignment' in recipeBox_v3.html:884", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in recipeBox_v3.html:884"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ff80a77b3033ec39", "name": "Insecure pattern 'direct_innerhtml_assignment' in bardoMobile.html:990", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in bardoMobile.html:990"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1b3300d399dded64", "name": "Insecure pattern 'direct_innerhtml_assignment' in caddy.html:896", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in caddy.html:896"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-40222f191821d48e", "name": "Insecure pattern 'direct_innerhtml_assignment' in bardoAdmin.html:767", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in bardoAdmin.html:767"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6372cebde0220094", "name": "No auth library detected", "shortDescription": {"text": "No auth library detected"}, "fullDescription": {"text": "The scanner did not find any standard auth library (JWT, OAuth, NextAuth, Auth0, etc.). The repo has auth/admin/session surface indicators, so auth may live in custom code, in a separate service, or be missing."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3ab5d313dda8e5f9", "name": "Debug logging residue appears in source files", "shortDescription": {"text": "Debug logging residue appears in source files"}, "fullDescription": {"text": "Found 5 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/28192"}, "properties": {"repository": "nepaltnf/minisites", "repoUrl": "https://github.com/nepaltnf/minisites", "branch": "main"}, "results": [{"ruleId": "scanner-184fde190184b951", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 fetch-trajectory.js:51"}, "properties": {"repobilityId": "4ab2a6523a96c0ff", "scanner": "scanner-primary", "fingerprint": "184fde190184b951", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-ceae4cd3ff5259bf", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in resonance.html:656"}, "properties": {"repobilityId": "777747aab98819f9", "scanner": "scanner-primary", "fingerprint": "ceae4cd3ff5259bf", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "resonance.html"}, "region": {"startLine": 656}}}]}, {"ruleId": "scanner-4f53dae53ee53418", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in bread_camp.html:266"}, "properties": {"repobilityId": "523cea10ea6a2022", "scanner": "scanner-primary", "fingerprint": "4f53dae53ee53418", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "bread_camp.html"}, "region": {"startLine": 266}}}]}, {"ruleId": "scanner-49ce629ba51d313a", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in recipeBox_v3.html:884"}, "properties": {"repobilityId": "c9884c0256f9b89e", "scanner": "scanner-primary", "fingerprint": "49ce629ba51d313a", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "recipeBox_v3.html"}, "region": {"startLine": 884}}}]}, {"ruleId": "scanner-ff80a77b3033ec39", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in bardoMobile.html:990"}, "properties": {"repobilityId": "4f66920eeeff6ca3", "scanner": "scanner-primary", "fingerprint": "ff80a77b3033ec39", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "bardoMobile.html"}, "region": {"startLine": 990}}}]}, {"ruleId": "scanner-1b3300d399dded64", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in caddy.html:896"}, "properties": {"repobilityId": "b508d257042ca960", "scanner": "scanner-primary", "fingerprint": "1b3300d399dded64", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "caddy.html"}, "region": {"startLine": 896}}}]}, {"ruleId": "scanner-40222f191821d48e", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in bardoAdmin.html:767"}, "properties": {"repobilityId": "9ef9f2a410c63054", "scanner": "scanner-primary", "fingerprint": "40222f191821d48e", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "bardoAdmin.html"}, "region": {"startLine": 767}}}]}, {"ruleId": "scanner-6372cebde0220094", "level": "warning", "message": {"text": "No auth library detected"}, "properties": {"repobilityId": "a5b6035a5bbf8054", "scanner": "scanner-primary", "fingerprint": "6372cebde0220094", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["coverage", "auth"]}}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "54e7afdd8574ec43", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}]}]}