{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-85a8ea160faf0572", "name": "Stray `console.log` in TS/JS \u2014 validation/ab-tests/test-02-profile-validation/grader/run2.js:7", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 validation/ab-tests/test-02-profile-validation/grader/run2.js:7"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-be8c24cd275b153f", "name": "Stray `console.log` in TS/JS \u2014 validation/ab-tests/test-02-profile-validation/grader/run3.js:8", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 validation/ab-tests/test-02-profile-validation/grader/run3.js:8"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-312b3975f98baca1", "name": "Stray `console.log` in TS/JS \u2014 validation/ab-tests/test-02-profile-validation/grader/probe.js:22", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 validation/ab-tests/test-02-profile-validation/grader/probe.js:22"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9eecfd73d325023e", "name": "Stray `console.log` in TS/JS \u2014 validation/ab-tests/test-03-handoff/grader/edge.js:56", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 validation/ab-tests/test-03-handoff/grader/edge.js:56"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c06eaff42ee6e970", "name": "Stray `console.log` in TS/JS \u2014 validation/ab-tests/test-03-handoff/grader/probe.js:173", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 validation/ab-tests/test-03-handoff/grader/probe.js:173"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ef86b17835a841e5", "name": "Stray `console.log` in TS/JS \u2014 validation/ab-tests/test-03-handoff/grader/assert.js:179", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 validation/ab-tests/test-03-handoff/grader/assert.js:179"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-02c3405db28fddda", "name": "Stray `console.log` in TS/JS \u2014 validation/ab-tests/test-03-handoff/grader/diverge.js:5", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 validation/ab-tests/test-03-handoff/grader/diverge.js:5"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-54198c579b821f87", "name": "Stray `console.log` in TS/JS \u2014 validation/ab-tests/test-01-pricing-engine/grader/probe.js:24", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 validation/ab-tests/test-01-pricing-engine/grader/probe.js:24"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4df2ce1a4590d110", "name": "Stray `console.log` in TS/JS \u2014 validation/ab-tests/test-01-pricing-engine/grader/probe3.js:18", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 validation/ab-tests/test-01-pricing-engine/grader/probe3.js:18"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0ecf551b6c0a98e9", "name": "Stray `console.log` in TS/JS \u2014 validation/ab-tests/test-01-pricing-engine/grader/probe2.js:6", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 validation/ab-tests/test-01-pricing-engine/grader/probe2.js:6"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8cbbaaeedefce298", "name": "Stray `console.log` in TS/JS \u2014 validation/enterprise-evaluation/runs/run-001-secure-vendor-access/run-secure-vendor-acce", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 validation/enterprise-evaluation/runs/run-001-secure-vendor-access/run-secure-vendor-access-eval.js:325"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-05eb7ca9ecb44980", "name": "Stray `console.log` in TS/JS \u2014 validation/enterprise-evaluation/runs/run-001-secure-vendor-access/project/tests/run-func", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 validation/enterprise-evaluation/runs/run-001-secure-vendor-access/project/tests/run-functional-tests.js:77"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a7c7d2a0740f4aa0", "name": "Stray `console.log` in TS/JS \u2014 validation/enterprise-evaluation/runs/run-018-subagent-stale-corruption-blockers/run-step", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 validation/enterprise-evaluation/runs/run-018-subagent-stale-corruption-blockers/run-step-3.js:127"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7826f5c76636da35", "name": "Stray `console.log` in TS/JS \u2014 validation/enterprise-evaluation/runs/run-018-subagent-stale-corruption-blockers/run-step", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 validation/enterprise-evaluation/runs/run-018-subagent-stale-corruption-blockers/run-step-5.js:247"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-96819858bc438adb", "name": "Stray `console.log` in TS/JS \u2014 validation/enterprise-evaluation/runs/run-018-subagent-stale-corruption-blockers/run-step", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 validation/enterprise-evaluation/runs/run-018-subagent-stale-corruption-blockers/run-step-3-finish.js:285"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-86cd4c117f59346d", "name": "Stray `console.log` in TS/JS \u2014 validation/enterprise-evaluation/runs/run-018-subagent-stale-corruption-blockers/run-step", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 validation/enterprise-evaluation/runs/run-018-subagent-stale-corruption-blockers/run-step-4.js:343"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7af5e5fad869b64b", "name": "Stray `console.log` in TS/JS \u2014 validation/enterprise-evaluation/runs/run-018-subagent-stale-corruption-blockers/run-step", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 validation/enterprise-evaluation/runs/run-018-subagent-stale-corruption-blockers/run-step-2.js:221"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c965421ce36a3f0d", "name": "Stray `console.log` in TS/JS \u2014 validation/enterprise-evaluation/runs/run-018-subagent-stale-corruption-blockers/run-step", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 validation/enterprise-evaluation/runs/run-018-subagent-stale-corruption-blockers/run-step-1.js:267"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9710c8d059e53154", "name": "No frontend routes/components detected", "shortDescription": {"text": "No frontend routes/components detected"}, "fullDescription": {"text": "No React/Vue/Next routes were found. This is fine for backend-only repos."}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-5bf93d91428aabd9", "name": "Insecure pattern 'node_child_process' in tooling/test.js:5", "shortDescription": {"text": "Insecure pattern 'node_child_process' in tooling/test.js:5"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-461da2ff560f8b44", "name": "Insecure pattern 'node_child_process' in validation/run-validation.js:5", "shortDescription": {"text": "Insecure pattern 'node_child_process' in validation/run-validation.js:5"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7e0df4fe9ec52fb9", "name": "Insecure pattern 'node_child_process' in validation/mcp-experiments/agent-core-probe/run-agent-core-probe.js:5", "shortDescription": {"text": "Insecure pattern 'node_child_process' in validation/mcp-experiments/agent-core-probe/run-agent-core-probe.js:5"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d9c8ba7bef649de0", "name": "Possible secret in validation/ab-tests/test-02-profile-validation/grader/run2.js", "shortDescription": {"text": "Possible secret in validation/ab-tests/test-02-profile-validation/grader/run2.js"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-38e5f2fa742c33a7", "name": "Possible secret in validation/ab-tests/test-02-profile-validation/grader/run3.js", "shortDescription": {"text": "Possible secret in validation/ab-tests/test-02-profile-validation/grader/run3.js"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-9a445e68ab970e17", "name": "Possible secret in validation/ab-tests/test-02-profile-validation/grader/run.js", "shortDescription": {"text": "Possible secret in validation/ab-tests/test-02-profile-validation/grader/run.js"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-37215c089b15a6c1", "name": "Possible secret in validation/ab-tests/test-02-profile-validation/arm-control/test.js", "shortDescription": {"text": "Possible secret in validation/ab-tests/test-02-profile-validation/arm-control/test.js"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-cc3877ea89f96474", "name": "Possible secret in validation/ab-tests/test-02-profile-validation/arm-treatment/test.js", "shortDescription": {"text": "Possible secret in validation/ab-tests/test-02-profile-validation/arm-treatment/test.js"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-dd7d3bbcd9bfe326", "name": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-001-secure-vendor-access/run-secure-v", "shortDescription": {"text": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-001-secure-vendor-access/run-secure-vendor-access-eval.js:5"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-667b1022bdd0a6a8", "name": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-011-subagent-multistep-claim-identity", "shortDescription": {"text": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-011-subagent-multistep-claim-identity/run-stage-a.js:5"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1246c529e6ec0995", "name": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-011-subagent-multistep-claim-identity", "shortDescription": {"text": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-011-subagent-multistep-claim-identity/run-stage-b.js:5"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-549343525a457d29", "name": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-018-subagent-stale-corruption-blocker", "shortDescription": {"text": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-018-subagent-stale-corruption-blockers/run-step-3.js:5"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bd22b638072f5130", "name": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-018-subagent-stale-corruption-blocker", "shortDescription": {"text": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-018-subagent-stale-corruption-blockers/run-step-5.js:5"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4ba7a8a7aee29d02", "name": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-018-subagent-stale-corruption-blocker", "shortDescription": {"text": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-018-subagent-stale-corruption-blockers/run-step-3-finish.js:5"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9b1edf4d1e26d9ca", "name": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-018-subagent-stale-corruption-blocker", "shortDescription": {"text": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-018-subagent-stale-corruption-blockers/run-step-4.js:5"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fcf97b66eb6740cc", "name": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-018-subagent-stale-corruption-blocker", "shortDescription": {"text": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-018-subagent-stale-corruption-blockers/run-step-2.js:5"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a9309081089d4660", "name": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-018-subagent-stale-corruption-blocker", "shortDescription": {"text": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-018-subagent-stale-corruption-blockers/run-step-1.js:5"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-55a923c6b7e0d0b7", "name": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-008-open-work-categories/run-open-wor", "shortDescription": {"text": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-008-open-work-categories/run-open-work-categories-eval.js:5"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4981ec3db2a26acb", "name": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-009-ui-api-screenshot-evidence/run-ui", "shortDescription": {"text": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-009-ui-api-screenshot-evidence/run-ui-api-screenshot-eval.js:5"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-698450e138a21015", "name": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-013-subagent-priority-handoff/run-ste", "shortDescription": {"text": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-013-subagent-priority-handoff/run-step-4.js:5"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-aec13112ebd93dfa", "name": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-013-subagent-priority-handoff/run-ste", "shortDescription": {"text": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-013-subagent-priority-handoff/run-step-2.js:5"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-eb7ebb38869ba6e4", "name": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-013-subagent-priority-handoff/run-ste", "shortDescription": {"text": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-013-subagent-priority-handoff/run-step-1.js:5"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-327f3d43645e2ecd", "name": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-006-evidence-calibration/run-evidence", "shortDescription": {"text": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-006-evidence-calibration/run-evidence-calibration-eval.js:5"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fcd61f3ec1da76d7", "name": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-010-subagent-iterative-claim-identity", "shortDescription": {"text": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-010-subagent-iterative-claim-identity/run-iterative-claim-identity-eval.js:5"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-020c83ed3acaebf6", "name": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-004-evidence-plausibility/run-evidenc", "shortDescription": {"text": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-004-evidence-plausibility/run-evidence-plausibility-eval.js:5"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7b3e8dec49c3d177", "name": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-012-subagent-four-step-rephrase-hando", "shortDescription": {"text": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-012-subagent-four-step-rephrase-handoff/run-step-4.js:5"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4df52b6d0ce3862f", "name": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-012-subagent-four-step-rephrase-hando", "shortDescription": {"text": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-012-subagent-four-step-rephrase-handoff/run-step-2.js:5"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9c7ed43e823613bc", "name": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-012-subagent-four-step-rephrase-hando", "shortDescription": {"text": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-012-subagent-four-step-rephrase-handoff/run-step-1.js:5"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-36305fbc4a5e9d1f", "name": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-003-open-work-handoff/run-open-work-h", "shortDescription": {"text": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-003-open-work-handoff/run-open-work-handoff-eval.js:5"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f4d3952c9aa1b845", "name": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-005-evidence-gate/run-evidence-gate-e", "shortDescription": {"text": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-005-evidence-gate/run-evidence-gate-eval.js:5"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-87873afce94aed4e", "name": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-002-update-preservation/run-update-pr", "shortDescription": {"text": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-002-update-preservation/run-update-preservation-eval.js:5"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1784980300cb6d8f", "name": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-007-subagent-mcp-productivity/run-mcp", "shortDescription": {"text": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-007-subagent-mcp-productivity/run-mcp-evaluation.js:5"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7405278efdb7d36b", "name": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-014-subagent-mixed-work-priority/run-", "shortDescription": {"text": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-014-subagent-mixed-work-priority/run-step-1.js:5"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a6020fd94081ca2e", "name": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-017-subagent-adversarial-confirmation", "shortDescription": {"text": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-017-subagent-adversarial-confirmation-blockers/run-mcp-step-1.js:5"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bbc284e0c7440273", "name": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-017-subagent-adversarial-confirmation", "shortDescription": {"text": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-017-subagent-adversarial-confirmation-blockers/run-mcp-step-2.js:5"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-83e2a94bcfdeadb0", "name": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-017-subagent-adversarial-confirmation", "shortDescription": {"text": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-017-subagent-adversarial-confirmation-blockers/run-mcp-step-4.js:5"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-dfb01d2330167591", "name": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-017-subagent-adversarial-confirmation", "shortDescription": {"text": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-017-subagent-adversarial-confirmation-blockers/run-mcp-step-3.js:5"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6372cebde0220094", "name": "No auth library detected", "shortDescription": {"text": "No auth library detected"}, "fullDescription": {"text": "The scanner did not find any standard auth library (JWT, OAuth, NextAuth, Auth0, etc.). The repo has auth/admin/session surface indicators, so auth may live in custom code, in a separate service, or be missing."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3ab5d313dda8e5f9", "name": "Debug logging residue appears in source files", "shortDescription": {"text": "Debug logging residue appears in source files"}, "fullDescription": {"text": "Found 54 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2d0c7b7ab8f8aacf", "name": "Critical user flow still appears backed by mock or placeholder data", "shortDescription": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "fullDescription": {"text": "A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ea8f3013f588db25", "name": "Shallow git history limits provenance confidence", "shortDescription": {"text": "Shallow git history limits provenance confidence"}, "fullDescription": {"text": "The repository is a shallow clone. Origin/evolution analysis cannot distinguish fresh generation, imported legacy code, or long-lived human code with high confidence."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8424db9c75e04ba4", "name": "Very short observed git history", "shortDescription": {"text": "Very short observed git history"}, "fullDescription": {"text": "The repo has multiple source files but two or fewer visible commits. This is not a failure by itself, but it lowers confidence in evolution-based diagnosis."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-cbbcb3397f614f0d", "name": "`fetch()` without try/.catch or AbortSignal \u2014 validation/enterprise-evaluation/runs/run-009-ui-api-screenshot-evidence/r", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 validation/enterprise-evaluation/runs/run-009-ui-api-screenshot-evidence/run-ui-api-screenshot-eval.js:252"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/22571"}, "properties": {"repository": "wayweltstoregmbh/specdrift", "repoUrl": "https://github.com/wayweltstoregmbh/specdrift", "branch": "main"}, "results": [{"ruleId": "scanner-85a8ea160faf0572", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 validation/ab-tests/test-02-profile-validation/grader/run2.js:7"}, "properties": {"repobilityId": "4ed8add6fd6fb1c3", "scanner": "scanner-primary", "fingerprint": "85a8ea160faf0572", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-be8c24cd275b153f", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 validation/ab-tests/test-02-profile-validation/grader/run3.js:8"}, "properties": {"repobilityId": "03bee19949a104c4", "scanner": "scanner-primary", "fingerprint": "be8c24cd275b153f", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-312b3975f98baca1", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 validation/ab-tests/test-02-profile-validation/grader/probe.js:22"}, "properties": {"repobilityId": "6fb08b279754030a", "scanner": "scanner-primary", "fingerprint": "312b3975f98baca1", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-9eecfd73d325023e", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 validation/ab-tests/test-03-handoff/grader/edge.js:56"}, "properties": {"repobilityId": "12d42976983d9ea4", "scanner": "scanner-primary", "fingerprint": "9eecfd73d325023e", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-c06eaff42ee6e970", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 validation/ab-tests/test-03-handoff/grader/probe.js:173"}, "properties": {"repobilityId": "dad9fdc6552c0d70", "scanner": "scanner-primary", "fingerprint": "c06eaff42ee6e970", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-ef86b17835a841e5", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 validation/ab-tests/test-03-handoff/grader/assert.js:179"}, "properties": {"repobilityId": "2bcb816a421ac11f", "scanner": "scanner-primary", "fingerprint": "ef86b17835a841e5", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-02c3405db28fddda", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 validation/ab-tests/test-03-handoff/grader/diverge.js:5"}, "properties": {"repobilityId": "d1186506c7d3be07", "scanner": "scanner-primary", "fingerprint": "02c3405db28fddda", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-54198c579b821f87", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 validation/ab-tests/test-01-pricing-engine/grader/probe.js:24"}, "properties": {"repobilityId": "5d68716383514b8f", "scanner": "scanner-primary", "fingerprint": "54198c579b821f87", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-4df2ce1a4590d110", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 validation/ab-tests/test-01-pricing-engine/grader/probe3.js:18"}, "properties": {"repobilityId": "230bf384440b9f5f", "scanner": "scanner-primary", "fingerprint": "4df2ce1a4590d110", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-0ecf551b6c0a98e9", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 validation/ab-tests/test-01-pricing-engine/grader/probe2.js:6"}, "properties": {"repobilityId": "f47afd3e00793923", "scanner": "scanner-primary", "fingerprint": "0ecf551b6c0a98e9", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-8cbbaaeedefce298", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 validation/enterprise-evaluation/runs/run-001-secure-vendor-access/run-secure-vendor-access-eval.js:325"}, "properties": {"repobilityId": "c94bb51046f4b2bf", "scanner": "scanner-primary", "fingerprint": "8cbbaaeedefce298", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-05eb7ca9ecb44980", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 validation/enterprise-evaluation/runs/run-001-secure-vendor-access/project/tests/run-functional-tests.js:77"}, "properties": {"repobilityId": "9ee746882ea11cfb", "scanner": "scanner-primary", "fingerprint": "05eb7ca9ecb44980", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-a7c7d2a0740f4aa0", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 validation/enterprise-evaluation/runs/run-018-subagent-stale-corruption-blockers/run-step-3.js:127"}, "properties": {"repobilityId": "13fb288f39d6574b", "scanner": "scanner-primary", "fingerprint": "a7c7d2a0740f4aa0", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-7826f5c76636da35", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 validation/enterprise-evaluation/runs/run-018-subagent-stale-corruption-blockers/run-step-5.js:247"}, "properties": {"repobilityId": "78495e4fc18f97a7", "scanner": "scanner-primary", "fingerprint": "7826f5c76636da35", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-96819858bc438adb", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 validation/enterprise-evaluation/runs/run-018-subagent-stale-corruption-blockers/run-step-3-finish.js:285"}, "properties": {"repobilityId": "d235c415f2c82411", "scanner": "scanner-primary", "fingerprint": "96819858bc438adb", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-86cd4c117f59346d", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 validation/enterprise-evaluation/runs/run-018-subagent-stale-corruption-blockers/run-step-4.js:343"}, "properties": {"repobilityId": "5e5516ca508070c0", "scanner": "scanner-primary", "fingerprint": "86cd4c117f59346d", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-7af5e5fad869b64b", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 validation/enterprise-evaluation/runs/run-018-subagent-stale-corruption-blockers/run-step-2.js:221"}, "properties": {"repobilityId": "b0854aa7ee695110", "scanner": "scanner-primary", "fingerprint": "7af5e5fad869b64b", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-c965421ce36a3f0d", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 validation/enterprise-evaluation/runs/run-018-subagent-stale-corruption-blockers/run-step-1.js:267"}, "properties": {"repobilityId": "7a15fbafd60db05b", "scanner": "scanner-primary", "fingerprint": "c965421ce36a3f0d", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-9710c8d059e53154", "level": "none", "message": {"text": "No frontend routes/components detected"}, "properties": {"repobilityId": "44ca61485762e494", "scanner": "scanner-primary", "fingerprint": "9710c8d059e53154", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["coverage"]}}, {"ruleId": "scanner-5bf93d91428aabd9", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in tooling/test.js:5"}, "properties": {"repobilityId": "b90989be0ff5cadc", "scanner": "scanner-primary", "fingerprint": "5bf93d91428aabd9", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tooling/test.js"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-461da2ff560f8b44", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in validation/run-validation.js:5"}, "properties": {"repobilityId": "65d122b4d179d196", "scanner": "scanner-primary", "fingerprint": "461da2ff560f8b44", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/run-validation.js"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-7e0df4fe9ec52fb9", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in validation/mcp-experiments/agent-core-probe/run-agent-core-probe.js:5"}, "properties": {"repobilityId": "af2e0f3022d519be", "scanner": "scanner-primary", "fingerprint": "7e0df4fe9ec52fb9", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/mcp-experiments/agent-core-probe/run-agent-core-probe.js"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-d9c8ba7bef649de0", "level": "error", "message": {"text": "Possible secret in validation/ab-tests/test-02-profile-validation/grader/run2.js"}, "properties": {"repobilityId": "5f7d42f6e69e93ea", "scanner": "scanner-primary", "fingerprint": "d9c8ba7bef649de0", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/ab-tests/test-02-profile-validation/grader/run2.js"}, "region": {"startLine": 13}}}]}, {"ruleId": "scanner-d9c8ba7bef649de0", "level": "error", "message": {"text": "Possible secret in validation/ab-tests/test-02-profile-validation/grader/run2.js"}, "properties": {"repobilityId": "5f7d42f6e69e93ea", "scanner": "scanner-primary", "fingerprint": "d9c8ba7bef649de0", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/ab-tests/test-02-profile-validation/grader/run2.js"}, "region": {"startLine": 14}}}]}, {"ruleId": "scanner-d9c8ba7bef649de0", "level": "error", "message": {"text": "Possible secret in validation/ab-tests/test-02-profile-validation/grader/run2.js"}, "properties": {"repobilityId": "5f7d42f6e69e93ea", "scanner": "scanner-primary", "fingerprint": "d9c8ba7bef649de0", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/ab-tests/test-02-profile-validation/grader/run2.js"}, "region": {"startLine": 15}}}]}, {"ruleId": "scanner-d9c8ba7bef649de0", "level": "error", "message": {"text": "Possible secret in validation/ab-tests/test-02-profile-validation/grader/run2.js"}, "properties": {"repobilityId": "5f7d42f6e69e93ea", "scanner": "scanner-primary", "fingerprint": "d9c8ba7bef649de0", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/ab-tests/test-02-profile-validation/grader/run2.js"}, "region": {"startLine": 19}}}]}, {"ruleId": "scanner-d9c8ba7bef649de0", "level": "error", "message": {"text": "Possible secret in validation/ab-tests/test-02-profile-validation/grader/run2.js"}, "properties": {"repobilityId": "5f7d42f6e69e93ea", "scanner": "scanner-primary", "fingerprint": "d9c8ba7bef649de0", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/ab-tests/test-02-profile-validation/grader/run2.js"}, "region": {"startLine": 21}}}]}, {"ruleId": "scanner-d9c8ba7bef649de0", "level": "error", "message": {"text": "Possible secret in validation/ab-tests/test-02-profile-validation/grader/run2.js"}, "properties": {"repobilityId": "5f7d42f6e69e93ea", "scanner": "scanner-primary", "fingerprint": "d9c8ba7bef649de0", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/ab-tests/test-02-profile-validation/grader/run2.js"}, "region": {"startLine": 23}}}]}, {"ruleId": "scanner-d9c8ba7bef649de0", "level": "error", "message": {"text": "Possible secret in validation/ab-tests/test-02-profile-validation/grader/run2.js"}, "properties": {"repobilityId": "5f7d42f6e69e93ea", "scanner": "scanner-primary", "fingerprint": "d9c8ba7bef649de0", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/ab-tests/test-02-profile-validation/grader/run2.js"}, "region": {"startLine": 26}}}]}, {"ruleId": "scanner-d9c8ba7bef649de0", "level": "error", "message": {"text": "Possible secret in validation/ab-tests/test-02-profile-validation/grader/run2.js"}, "properties": {"repobilityId": "5f7d42f6e69e93ea", "scanner": "scanner-primary", "fingerprint": "d9c8ba7bef649de0", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/ab-tests/test-02-profile-validation/grader/run2.js"}, "region": {"startLine": 29}}}]}, {"ruleId": "scanner-d9c8ba7bef649de0", "level": "error", "message": {"text": "Possible secret in validation/ab-tests/test-02-profile-validation/grader/run2.js"}, "properties": {"repobilityId": "5f7d42f6e69e93ea", "scanner": "scanner-primary", "fingerprint": "d9c8ba7bef649de0", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/ab-tests/test-02-profile-validation/grader/run2.js"}, "region": {"startLine": 30}}}]}, {"ruleId": "scanner-d9c8ba7bef649de0", "level": "error", "message": {"text": "Possible secret in validation/ab-tests/test-02-profile-validation/grader/run2.js"}, "properties": {"repobilityId": "5f7d42f6e69e93ea", "scanner": "scanner-primary", "fingerprint": "d9c8ba7bef649de0", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/ab-tests/test-02-profile-validation/grader/run2.js"}, "region": {"startLine": 31}}}]}, {"ruleId": "scanner-d9c8ba7bef649de0", "level": "error", "message": {"text": "Possible secret in validation/ab-tests/test-02-profile-validation/grader/run2.js"}, "properties": {"repobilityId": "5f7d42f6e69e93ea", "scanner": "scanner-primary", "fingerprint": "d9c8ba7bef649de0", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/ab-tests/test-02-profile-validation/grader/run2.js"}, "region": {"startLine": 35}}}]}, {"ruleId": "scanner-d9c8ba7bef649de0", "level": "error", "message": {"text": "Possible secret in validation/ab-tests/test-02-profile-validation/grader/run2.js"}, "properties": {"repobilityId": "5f7d42f6e69e93ea", "scanner": "scanner-primary", "fingerprint": "d9c8ba7bef649de0", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/ab-tests/test-02-profile-validation/grader/run2.js"}, "region": {"startLine": 37}}}]}, {"ruleId": "scanner-d9c8ba7bef649de0", "level": "error", "message": {"text": "Possible secret in validation/ab-tests/test-02-profile-validation/grader/run2.js"}, "properties": {"repobilityId": "5f7d42f6e69e93ea", "scanner": "scanner-primary", "fingerprint": "d9c8ba7bef649de0", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/ab-tests/test-02-profile-validation/grader/run2.js"}, "region": {"startLine": 40}}}]}, {"ruleId": "scanner-d9c8ba7bef649de0", "level": "error", "message": {"text": "Possible secret in validation/ab-tests/test-02-profile-validation/grader/run2.js"}, "properties": {"repobilityId": "5f7d42f6e69e93ea", "scanner": "scanner-primary", "fingerprint": "d9c8ba7bef649de0", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/ab-tests/test-02-profile-validation/grader/run2.js"}, "region": {"startLine": 43}}}]}, {"ruleId": "scanner-38e5f2fa742c33a7", "level": "error", "message": {"text": "Possible secret in validation/ab-tests/test-02-profile-validation/grader/run3.js"}, "properties": {"repobilityId": "da8b1b68334680a9", "scanner": "scanner-primary", "fingerprint": "38e5f2fa742c33a7", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/ab-tests/test-02-profile-validation/grader/run3.js"}, "region": {"startLine": 12}}}]}, {"ruleId": "scanner-38e5f2fa742c33a7", "level": "error", "message": {"text": "Possible secret in validation/ab-tests/test-02-profile-validation/grader/run3.js"}, "properties": {"repobilityId": "da8b1b68334680a9", "scanner": "scanner-primary", "fingerprint": "38e5f2fa742c33a7", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/ab-tests/test-02-profile-validation/grader/run3.js"}, "region": {"startLine": 18}}}]}, {"ruleId": "scanner-9a445e68ab970e17", "level": "error", "message": {"text": "Possible secret in validation/ab-tests/test-02-profile-validation/grader/run.js"}, "properties": {"repobilityId": "64e342121444d238", "scanner": "scanner-primary", "fingerprint": "9a445e68ab970e17", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/ab-tests/test-02-profile-validation/grader/run.js"}, "region": {"startLine": 89}}}]}, {"ruleId": "scanner-9a445e68ab970e17", "level": "error", "message": {"text": "Possible secret in validation/ab-tests/test-02-profile-validation/grader/run.js"}, "properties": {"repobilityId": "64e342121444d238", "scanner": "scanner-primary", "fingerprint": "9a445e68ab970e17", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/ab-tests/test-02-profile-validation/grader/run.js"}, "region": {"startLine": 90}}}]}, {"ruleId": "scanner-9a445e68ab970e17", "level": "error", "message": {"text": "Possible secret in validation/ab-tests/test-02-profile-validation/grader/run.js"}, "properties": {"repobilityId": "64e342121444d238", "scanner": "scanner-primary", "fingerprint": "9a445e68ab970e17", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/ab-tests/test-02-profile-validation/grader/run.js"}, "region": {"startLine": 97}}}]}, {"ruleId": "scanner-9a445e68ab970e17", "level": "error", "message": {"text": "Possible secret in validation/ab-tests/test-02-profile-validation/grader/run.js"}, "properties": {"repobilityId": "64e342121444d238", "scanner": "scanner-primary", "fingerprint": "9a445e68ab970e17", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/ab-tests/test-02-profile-validation/grader/run.js"}, "region": {"startLine": 98}}}]}, {"ruleId": "scanner-9a445e68ab970e17", "level": "error", "message": {"text": "Possible secret in validation/ab-tests/test-02-profile-validation/grader/run.js"}, "properties": {"repobilityId": "64e342121444d238", "scanner": "scanner-primary", "fingerprint": "9a445e68ab970e17", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/ab-tests/test-02-profile-validation/grader/run.js"}, "region": {"startLine": 99}}}]}, {"ruleId": "scanner-9a445e68ab970e17", "level": "error", "message": {"text": "Possible secret in validation/ab-tests/test-02-profile-validation/grader/run.js"}, "properties": {"repobilityId": "64e342121444d238", "scanner": "scanner-primary", "fingerprint": "9a445e68ab970e17", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/ab-tests/test-02-profile-validation/grader/run.js"}, "region": {"startLine": 101}}}]}, {"ruleId": "scanner-9a445e68ab970e17", "level": "error", "message": {"text": "Possible secret in validation/ab-tests/test-02-profile-validation/grader/run.js"}, "properties": {"repobilityId": "64e342121444d238", "scanner": "scanner-primary", "fingerprint": "9a445e68ab970e17", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/ab-tests/test-02-profile-validation/grader/run.js"}, "region": {"startLine": 103}}}]}, {"ruleId": "scanner-37215c089b15a6c1", "level": "error", "message": {"text": "Possible secret in validation/ab-tests/test-02-profile-validation/arm-control/test.js"}, "properties": {"repobilityId": "07c8aa6e0a44e1d3", "scanner": "scanner-primary", "fingerprint": "37215c089b15a6c1", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/ab-tests/test-02-profile-validation/arm-control/test.js"}, "region": {"startLine": 12}}}]}, {"ruleId": "scanner-37215c089b15a6c1", "level": "error", "message": {"text": "Possible secret in validation/ab-tests/test-02-profile-validation/arm-control/test.js"}, "properties": {"repobilityId": "07c8aa6e0a44e1d3", "scanner": "scanner-primary", "fingerprint": "37215c089b15a6c1", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/ab-tests/test-02-profile-validation/arm-control/test.js"}, "region": {"startLine": 63}}}]}, {"ruleId": "scanner-37215c089b15a6c1", "level": "error", "message": {"text": "Possible secret in validation/ab-tests/test-02-profile-validation/arm-control/test.js"}, "properties": {"repobilityId": "07c8aa6e0a44e1d3", "scanner": "scanner-primary", "fingerprint": "37215c089b15a6c1", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/ab-tests/test-02-profile-validation/arm-control/test.js"}, "region": {"startLine": 103}}}]}, {"ruleId": "scanner-37215c089b15a6c1", "level": "error", "message": {"text": "Possible secret in validation/ab-tests/test-02-profile-validation/arm-control/test.js"}, "properties": {"repobilityId": "07c8aa6e0a44e1d3", "scanner": "scanner-primary", "fingerprint": "37215c089b15a6c1", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/ab-tests/test-02-profile-validation/arm-control/test.js"}, "region": {"startLine": 134}}}]}, {"ruleId": "scanner-37215c089b15a6c1", "level": "error", "message": {"text": "Possible secret in validation/ab-tests/test-02-profile-validation/arm-control/test.js"}, "properties": {"repobilityId": "07c8aa6e0a44e1d3", "scanner": "scanner-primary", "fingerprint": "37215c089b15a6c1", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/ab-tests/test-02-profile-validation/arm-control/test.js"}, "region": {"startLine": 135}}}]}, {"ruleId": "scanner-37215c089b15a6c1", "level": "error", "message": {"text": "Possible secret in validation/ab-tests/test-02-profile-validation/arm-control/test.js"}, "properties": {"repobilityId": "07c8aa6e0a44e1d3", "scanner": "scanner-primary", "fingerprint": "37215c089b15a6c1", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/ab-tests/test-02-profile-validation/arm-control/test.js"}, "region": {"startLine": 136}}}]}, {"ruleId": "scanner-37215c089b15a6c1", "level": "error", "message": {"text": "Possible secret in validation/ab-tests/test-02-profile-validation/arm-control/test.js"}, "properties": {"repobilityId": "07c8aa6e0a44e1d3", "scanner": "scanner-primary", "fingerprint": "37215c089b15a6c1", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/ab-tests/test-02-profile-validation/arm-control/test.js"}, "region": {"startLine": 137}}}]}, {"ruleId": "scanner-37215c089b15a6c1", "level": "error", "message": {"text": "Possible secret in validation/ab-tests/test-02-profile-validation/arm-control/test.js"}, "properties": {"repobilityId": "07c8aa6e0a44e1d3", "scanner": "scanner-primary", "fingerprint": "37215c089b15a6c1", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/ab-tests/test-02-profile-validation/arm-control/test.js"}, "region": {"startLine": 141}}}]}, {"ruleId": "scanner-37215c089b15a6c1", "level": "error", "message": {"text": "Possible secret in validation/ab-tests/test-02-profile-validation/arm-control/test.js"}, "properties": {"repobilityId": "07c8aa6e0a44e1d3", "scanner": "scanner-primary", "fingerprint": "37215c089b15a6c1", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/ab-tests/test-02-profile-validation/arm-control/test.js"}, "region": {"startLine": 150}}}]}, {"ruleId": "scanner-37215c089b15a6c1", "level": "error", "message": {"text": "Possible secret in validation/ab-tests/test-02-profile-validation/arm-control/test.js"}, "properties": {"repobilityId": "07c8aa6e0a44e1d3", "scanner": "scanner-primary", "fingerprint": "37215c089b15a6c1", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/ab-tests/test-02-profile-validation/arm-control/test.js"}, "region": {"startLine": 160}}}]}, {"ruleId": "scanner-cc3877ea89f96474", "level": "error", "message": {"text": "Possible secret in validation/ab-tests/test-02-profile-validation/arm-treatment/test.js"}, "properties": {"repobilityId": "3d8013adb0426b5e", "scanner": "scanner-primary", "fingerprint": "cc3877ea89f96474", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/ab-tests/test-02-profile-validation/arm-treatment/test.js"}, "region": {"startLine": 12}}}]}, {"ruleId": "scanner-cc3877ea89f96474", "level": "error", "message": {"text": "Possible secret in validation/ab-tests/test-02-profile-validation/arm-treatment/test.js"}, "properties": {"repobilityId": "3d8013adb0426b5e", "scanner": "scanner-primary", "fingerprint": "cc3877ea89f96474", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/ab-tests/test-02-profile-validation/arm-treatment/test.js"}, "region": {"startLine": 198}}}]}, {"ruleId": "scanner-cc3877ea89f96474", "level": "error", "message": {"text": "Possible secret in validation/ab-tests/test-02-profile-validation/arm-treatment/test.js"}, "properties": {"repobilityId": "3d8013adb0426b5e", "scanner": "scanner-primary", "fingerprint": "cc3877ea89f96474", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/ab-tests/test-02-profile-validation/arm-treatment/test.js"}, "region": {"startLine": 201}}}]}, {"ruleId": "scanner-cc3877ea89f96474", "level": "error", "message": {"text": "Possible secret in validation/ab-tests/test-02-profile-validation/arm-treatment/test.js"}, "properties": {"repobilityId": "3d8013adb0426b5e", "scanner": "scanner-primary", "fingerprint": "cc3877ea89f96474", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/ab-tests/test-02-profile-validation/arm-treatment/test.js"}, "region": {"startLine": 205}}}]}, {"ruleId": "scanner-cc3877ea89f96474", "level": "error", "message": {"text": "Possible secret in validation/ab-tests/test-02-profile-validation/arm-treatment/test.js"}, "properties": {"repobilityId": "3d8013adb0426b5e", "scanner": "scanner-primary", "fingerprint": "cc3877ea89f96474", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/ab-tests/test-02-profile-validation/arm-treatment/test.js"}, "region": {"startLine": 211}}}]}, {"ruleId": "scanner-cc3877ea89f96474", "level": "error", "message": {"text": "Possible secret in validation/ab-tests/test-02-profile-validation/arm-treatment/test.js"}, "properties": {"repobilityId": "3d8013adb0426b5e", "scanner": "scanner-primary", "fingerprint": "cc3877ea89f96474", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/ab-tests/test-02-profile-validation/arm-treatment/test.js"}, "region": {"startLine": 214}}}]}, {"ruleId": "scanner-cc3877ea89f96474", "level": "error", "message": {"text": "Possible secret in validation/ab-tests/test-02-profile-validation/arm-treatment/test.js"}, "properties": {"repobilityId": "3d8013adb0426b5e", "scanner": "scanner-primary", "fingerprint": "cc3877ea89f96474", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/ab-tests/test-02-profile-validation/arm-treatment/test.js"}, "region": {"startLine": 223}}}]}, {"ruleId": "scanner-cc3877ea89f96474", "level": "error", "message": {"text": "Possible secret in validation/ab-tests/test-02-profile-validation/arm-treatment/test.js"}, "properties": {"repobilityId": "3d8013adb0426b5e", "scanner": "scanner-primary", "fingerprint": "cc3877ea89f96474", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/ab-tests/test-02-profile-validation/arm-treatment/test.js"}, "region": {"startLine": 230}}}]}, {"ruleId": "scanner-cc3877ea89f96474", "level": "error", "message": {"text": "Possible secret in validation/ab-tests/test-02-profile-validation/arm-treatment/test.js"}, "properties": {"repobilityId": "3d8013adb0426b5e", "scanner": "scanner-primary", "fingerprint": "cc3877ea89f96474", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/ab-tests/test-02-profile-validation/arm-treatment/test.js"}, "region": {"startLine": 240}}}]}, {"ruleId": "scanner-cc3877ea89f96474", "level": "error", "message": {"text": "Possible secret in validation/ab-tests/test-02-profile-validation/arm-treatment/test.js"}, "properties": {"repobilityId": "3d8013adb0426b5e", "scanner": "scanner-primary", "fingerprint": "cc3877ea89f96474", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/ab-tests/test-02-profile-validation/arm-treatment/test.js"}, "region": {"startLine": 332}}}]}, {"ruleId": "scanner-dd7d3bbcd9bfe326", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-001-secure-vendor-access/run-secure-vendor-access-eval.js:5"}, "properties": {"repobilityId": "fa9b677bf9de8e51", "scanner": "scanner-primary", "fingerprint": "dd7d3bbcd9bfe326", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/enterprise-evaluation/runs/run-001-secure-vendor-access/run-secure-vendor-access-eval.js"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-667b1022bdd0a6a8", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-011-subagent-multistep-claim-identity/run-stage-a.js:5"}, "properties": {"repobilityId": "9e94cab03ecd8d91", "scanner": "scanner-primary", "fingerprint": "667b1022bdd0a6a8", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/enterprise-evaluation/runs/run-011-subagent-multistep-claim-identity/run-stage-a.js"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-1246c529e6ec0995", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-011-subagent-multistep-claim-identity/run-stage-b.js:5"}, "properties": {"repobilityId": "2e645d61ea03ee8e", "scanner": "scanner-primary", "fingerprint": "1246c529e6ec0995", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/enterprise-evaluation/runs/run-011-subagent-multistep-claim-identity/run-stage-b.js"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-549343525a457d29", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-018-subagent-stale-corruption-blockers/run-step-3.js:5"}, "properties": {"repobilityId": "faaabf8d5c2b016d", "scanner": "scanner-primary", "fingerprint": "549343525a457d29", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/enterprise-evaluation/runs/run-018-subagent-stale-corruption-blockers/run-step-3.js"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-bd22b638072f5130", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-018-subagent-stale-corruption-blockers/run-step-5.js:5"}, "properties": {"repobilityId": "6f61ca9fb304d927", "scanner": "scanner-primary", "fingerprint": "bd22b638072f5130", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/enterprise-evaluation/runs/run-018-subagent-stale-corruption-blockers/run-step-5.js"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-4ba7a8a7aee29d02", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-018-subagent-stale-corruption-blockers/run-step-3-finish.js:5"}, "properties": {"repobilityId": "9c02c720c16d7a0e", "scanner": "scanner-primary", "fingerprint": "4ba7a8a7aee29d02", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/enterprise-evaluation/runs/run-018-subagent-stale-corruption-blockers/run-step-3-finish.js"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-9b1edf4d1e26d9ca", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-018-subagent-stale-corruption-blockers/run-step-4.js:5"}, "properties": {"repobilityId": "5be4954b7ff8b3e3", "scanner": "scanner-primary", "fingerprint": "9b1edf4d1e26d9ca", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/enterprise-evaluation/runs/run-018-subagent-stale-corruption-blockers/run-step-4.js"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-fcf97b66eb6740cc", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-018-subagent-stale-corruption-blockers/run-step-2.js:5"}, "properties": {"repobilityId": "a4c69f64075ef565", "scanner": "scanner-primary", "fingerprint": "fcf97b66eb6740cc", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/enterprise-evaluation/runs/run-018-subagent-stale-corruption-blockers/run-step-2.js"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-a9309081089d4660", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-018-subagent-stale-corruption-blockers/run-step-1.js:5"}, "properties": {"repobilityId": "74ea09b6e88ea209", "scanner": "scanner-primary", "fingerprint": "a9309081089d4660", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/enterprise-evaluation/runs/run-018-subagent-stale-corruption-blockers/run-step-1.js"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-55a923c6b7e0d0b7", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-008-open-work-categories/run-open-work-categories-eval.js:5"}, "properties": {"repobilityId": "ba9346d287e6d088", "scanner": "scanner-primary", "fingerprint": "55a923c6b7e0d0b7", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/enterprise-evaluation/runs/run-008-open-work-categories/run-open-work-categories-eval.js"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-4981ec3db2a26acb", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-009-ui-api-screenshot-evidence/run-ui-api-screenshot-eval.js:5"}, "properties": {"repobilityId": "fc4cfd674b7618db", "scanner": "scanner-primary", "fingerprint": "4981ec3db2a26acb", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/enterprise-evaluation/runs/run-009-ui-api-screenshot-evidence/run-ui-api-screenshot-eval.js"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-698450e138a21015", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-013-subagent-priority-handoff/run-step-4.js:5"}, "properties": {"repobilityId": "ff01caec5bdef00d", "scanner": "scanner-primary", "fingerprint": "698450e138a21015", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/enterprise-evaluation/runs/run-013-subagent-priority-handoff/run-step-4.js"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-aec13112ebd93dfa", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-013-subagent-priority-handoff/run-step-2.js:5"}, "properties": {"repobilityId": "782c8614ab06750e", "scanner": "scanner-primary", "fingerprint": "aec13112ebd93dfa", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/enterprise-evaluation/runs/run-013-subagent-priority-handoff/run-step-2.js"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-eb7ebb38869ba6e4", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-013-subagent-priority-handoff/run-step-1.js:5"}, "properties": {"repobilityId": "869aa0efb276996d", "scanner": "scanner-primary", "fingerprint": "eb7ebb38869ba6e4", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/enterprise-evaluation/runs/run-013-subagent-priority-handoff/run-step-1.js"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-327f3d43645e2ecd", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-006-evidence-calibration/run-evidence-calibration-eval.js:5"}, "properties": {"repobilityId": "5b3428c66be9eb72", "scanner": "scanner-primary", "fingerprint": "327f3d43645e2ecd", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/enterprise-evaluation/runs/run-006-evidence-calibration/run-evidence-calibration-eval.js"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-fcd61f3ec1da76d7", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-010-subagent-iterative-claim-identity/run-iterative-claim-identity-eval.js:5"}, "properties": {"repobilityId": "845874488aaea8a0", "scanner": "scanner-primary", "fingerprint": "fcd61f3ec1da76d7", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/enterprise-evaluation/runs/run-010-subagent-iterative-claim-identity/run-iterative-claim-identity-eval.js"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-020c83ed3acaebf6", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-004-evidence-plausibility/run-evidence-plausibility-eval.js:5"}, "properties": {"repobilityId": "16ff58fbf72dbf0a", "scanner": "scanner-primary", "fingerprint": "020c83ed3acaebf6", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/enterprise-evaluation/runs/run-004-evidence-plausibility/run-evidence-plausibility-eval.js"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-7b3e8dec49c3d177", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-012-subagent-four-step-rephrase-handoff/run-step-4.js:5"}, "properties": {"repobilityId": "e2ba7f6b0546f029", "scanner": "scanner-primary", "fingerprint": "7b3e8dec49c3d177", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/enterprise-evaluation/runs/run-012-subagent-four-step-rephrase-handoff/run-step-4.js"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-4df52b6d0ce3862f", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-012-subagent-four-step-rephrase-handoff/run-step-2.js:5"}, "properties": {"repobilityId": "57b21ee29172e7ca", "scanner": "scanner-primary", "fingerprint": "4df52b6d0ce3862f", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/enterprise-evaluation/runs/run-012-subagent-four-step-rephrase-handoff/run-step-2.js"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-9c7ed43e823613bc", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-012-subagent-four-step-rephrase-handoff/run-step-1.js:5"}, "properties": {"repobilityId": "cae6f3c87579cef5", "scanner": "scanner-primary", "fingerprint": "9c7ed43e823613bc", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/enterprise-evaluation/runs/run-012-subagent-four-step-rephrase-handoff/run-step-1.js"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-36305fbc4a5e9d1f", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-003-open-work-handoff/run-open-work-handoff-eval.js:5"}, "properties": {"repobilityId": "dc2ab2299e944e0e", "scanner": "scanner-primary", "fingerprint": "36305fbc4a5e9d1f", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/enterprise-evaluation/runs/run-003-open-work-handoff/run-open-work-handoff-eval.js"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-f4d3952c9aa1b845", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-005-evidence-gate/run-evidence-gate-eval.js:5"}, "properties": {"repobilityId": "08c0424506c8b326", "scanner": "scanner-primary", "fingerprint": "f4d3952c9aa1b845", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/enterprise-evaluation/runs/run-005-evidence-gate/run-evidence-gate-eval.js"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-87873afce94aed4e", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-002-update-preservation/run-update-preservation-eval.js:5"}, "properties": {"repobilityId": "01c03ec996399071", "scanner": "scanner-primary", "fingerprint": "87873afce94aed4e", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/enterprise-evaluation/runs/run-002-update-preservation/run-update-preservation-eval.js"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-1784980300cb6d8f", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-007-subagent-mcp-productivity/run-mcp-evaluation.js:5"}, "properties": {"repobilityId": "8aeb73814e724d96", "scanner": "scanner-primary", "fingerprint": "1784980300cb6d8f", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/enterprise-evaluation/runs/run-007-subagent-mcp-productivity/run-mcp-evaluation.js"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-7405278efdb7d36b", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-014-subagent-mixed-work-priority/run-step-1.js:5"}, "properties": {"repobilityId": "6821d3544738f520", "scanner": "scanner-primary", "fingerprint": "7405278efdb7d36b", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/enterprise-evaluation/runs/run-014-subagent-mixed-work-priority/run-step-1.js"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-a6020fd94081ca2e", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-017-subagent-adversarial-confirmation-blockers/run-mcp-step-1.js:5"}, "properties": {"repobilityId": "e4ae1c3a0136836c", "scanner": "scanner-primary", "fingerprint": "a6020fd94081ca2e", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/enterprise-evaluation/runs/run-017-subagent-adversarial-confirmation-blockers/run-mcp-step-1.js"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-bbc284e0c7440273", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-017-subagent-adversarial-confirmation-blockers/run-mcp-step-2.js:5"}, "properties": {"repobilityId": "dd8e86f55485eff1", "scanner": "scanner-primary", "fingerprint": "bbc284e0c7440273", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/enterprise-evaluation/runs/run-017-subagent-adversarial-confirmation-blockers/run-mcp-step-2.js"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-83e2a94bcfdeadb0", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-017-subagent-adversarial-confirmation-blockers/run-mcp-step-4.js:5"}, "properties": {"repobilityId": "549821b7fd92195f", "scanner": "scanner-primary", "fingerprint": "83e2a94bcfdeadb0", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/enterprise-evaluation/runs/run-017-subagent-adversarial-confirmation-blockers/run-mcp-step-4.js"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-dfb01d2330167591", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in validation/enterprise-evaluation/runs/run-017-subagent-adversarial-confirmation-blockers/run-mcp-step-3.js:5"}, "properties": {"repobilityId": "2fa90b73c51e4038", "scanner": "scanner-primary", "fingerprint": "dfb01d2330167591", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "validation/enterprise-evaluation/runs/run-017-subagent-adversarial-confirmation-blockers/run-mcp-step-3.js"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-6372cebde0220094", "level": "warning", "message": {"text": "No auth library detected"}, "properties": {"repobilityId": "a5b6035a5bbf8054", "scanner": "scanner-primary", "fingerprint": "6372cebde0220094", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["coverage", "auth"]}}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "ce37bd83ded9a7e2", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-2d0c7b7ab8f8aacf", "level": "warning", "message": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "properties": {"repobilityId": "ec532e161d6b6df7", "scanner": "scanner-primary", "fingerprint": "2d0c7b7ab8f8aacf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "critical-flow", "generated-repo-pattern"]}}, {"ruleId": "scanner-ea8f3013f588db25", "level": "note", "message": {"text": "Shallow git history limits provenance confidence"}, "properties": {"repobilityId": "81182c20b6b99b63", "scanner": "scanner-primary", "fingerprint": "ea8f3013f588db25", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-8424db9c75e04ba4", "level": "none", "message": {"text": "Very short observed git history"}, "properties": {"repobilityId": "7774b67660bd551b", "scanner": "scanner-primary", "fingerprint": "8424db9c75e04ba4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-cbbcb3397f614f0d", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 validation/enterprise-evaluation/runs/run-009-ui-api-screenshot-evidence/run-ui-api-screenshot-eval.js:252"}, "properties": {"repobilityId": "7ebf51dac6e05a64", "scanner": "scanner-primary", "fingerprint": "cbbcb3397f614f0d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}]}]}