← Legacy view v2 (rp.*)

kubernetes-sigs/headlamp

https://github.com/kubernetes-sigs/headlamp · lang: typescript · LOC: · source: user_submitted

Quality
78.1
Grade B+
Security
88.3
Findings
12
0 critical · 0 high
Status
completed
May 15, 2026 11:08
info: 8 medium: 4
Top rules by occurrence
RuleSeverityCount
SEC020 Secret Printed to Logs high 4
SEC015 Insecure Randomness for Security medium 4
SEC007 Unsafe Deserialization medium 4
First 12 findings (severity-sorted)
medium SEC007 Unsafe Deserialization
frontend/src/stateless/deleteClusterKubeconfig.ts:69 · conf 1.00 
[SEC007] Unsafe Deserialization: Unsafe deserialization can execute arbitrary code.
medium SEC007 Unsafe Deserialization
frontend/src/stateless/findKubeconfigByClusterName.ts:68 · conf 1.00 
[SEC007] Unsafe Deserialization: Unsafe deserialization can execute arbitrary code.
medium SEC007 Unsafe Deserialization
frontend/src/stateless/updateStatelessClusterKubeconfig.ts:76 · conf 1.00 
[SEC007] Unsafe Deserialization: Unsafe deserialization can execute arbitrary code.
medium SEC015 Insecure Randomness for Security
frontend/src/redux/clusterActionSlice.ts:164 · conf 1.00 
[SEC015] Insecure Randomness for Security: Weak PRNG used in security-sensitive context. Output is predictable.
info SEC007 Unsafe Deserialization
· conf 0.20 
[SEC007] Unsafe Deserialization (and 4 more): Same pattern found in 4 additional files. Review if needed.
info SEC015 Insecure Randomness for Security
· conf 0.20 
[SEC015] Insecure Randomness for Security (and 5 more): Same pattern found in 5 additional files. Review if needed.
info SEC015 Insecure Randomness for Security
frontend/src/components/project/ProjectResourcesTab.stories.tsx:31 · conf 0.15 
[SEC015] Insecure Randomness for Security: Weak PRNG used in security-sensitive context. Output is predictable.
info SEC015 Insecure Randomness for Security
frontend/src/stateless/index.ts:331 · conf 0.15 
[SEC015] Insecure Randomness for Security: Weak PRNG used in security-sensitive context. Output is predictable.
info SEC020 Secret Printed to Logs
· conf 0.20 
[SEC020] Secret Printed to Logs (and 5 more): Same pattern found in 5 additional files. Review if needed.
info SEC020 Secret Printed to Logs
frontend/src/components/authchooser/index.tsx:119 · conf 0.15 
[SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-bearing value. This is a frequent AI-assisted coding failure: the helper exposes the exact value needed for tro…
info SEC020 Secret Printed to Logs
frontend/src/components/common/Resource/AuthVisible.tsx:60 · conf 0.15 
[SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-bearing value. This is a frequent AI-assisted coding failure: the helper exposes the exact value needed for tro…
info SEC020 Secret Printed to Logs
frontend/src/components/common/Resource/Resource.tsx:563 · conf 0.15 
[SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-bearing value. This is a frequent AI-assisted coding failure: the helper exposes the exact value needed for tro…

Reading from rp.scan + rp.finding + rp.rule (unified schema, R78 series). Legacy data path unchanged. Compare with /scan/5145cc36-1cd4-41ae-9163-2dd7117aa847/.