← Legacy view v2 (rp.*)

friday-platform/friday-studio

https://github.com/friday-platform/friday-studio · lang: typescript · LOC: · source: user_submitted

Quality

75.8

Grade B+

Security

39.9

Findings

1 critical · 3 high

Status

completed

May 14, 2026 21:41

info: 5 high: 3 critical: 1

Top rules by occurrence

Rule	Severity	Count
`SEC020` Secret Printed to Logs	high	4
`SEC015` Insecure Randomness for Security	medium	4
`SEC022` Database URL With Embedded Credential	critical	1

First 9 findings (severity-sorted)

critical SEC022 Database URL With Embedded Credential

apps/link/scripts/test-e2e.ts:15 · conf 1.00

[SEC022] Database URL With Embedded Credential: A database connection URL contains an embedded username and password. These URLs are often copied into defaults, docs, and scripts, then leak working c…

high SEC020 Secret Printed to Logs

apps/atlasd/routes/signals/platform.ts:216 · conf 0.85

[SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-bearing value. This is a frequent AI-assisted coding failure: the helper exposes the exact value needed for tro…

high SEC020 Secret Printed to Logs

apps/link/scripts/test-e2e.ts:31 · conf 0.85

[SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-bearing value. This is a frequent AI-assisted coding failure: the helper exposes the exact value needed for tro…

high SEC020 Secret Printed to Logs

apps/link/src/routes/oauth.ts:137 · conf 0.85

[SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-bearing value. This is a frequent AI-assisted coding failure: the helper exposes the exact value needed for tro…

info SEC015 Insecure Randomness for Security

· conf 0.20

[SEC015] Insecure Randomness for Security (and 1 more): Same pattern found in 1 additional files. Review if needed.

info SEC015 Insecure Randomness for Security

apps/atlasd/routes/workspaces/config.test-fixtures.ts:219 · conf 0.10

[SEC015] Insecure Randomness for Security: Weak PRNG used in security-sensitive context. Output is predictable.

info SEC015 Insecure Randomness for Security

packages/utils/mod.ts:324 · conf 0.15

[SEC015] Insecure Randomness for Security: Weak PRNG used in security-sensitive context. Output is predictable.

info SEC015 Insecure Randomness for Security

packages/workspace/src/id-generator.ts:226 · conf 0.25

[SEC015] Insecure Randomness for Security: Weak PRNG used in security-sensitive context. Output is predictable.

info SEC020 Secret Printed to Logs

· conf 0.20

[SEC020] Secret Printed to Logs (and 1 more): Same pattern found in 1 additional files. Review if needed.

Reading from rp.scan + rp.finding + rp.rule (unified schema, R78 series). Legacy data path unchanged. Compare with /scan/a2ae3de0-60fb-4729-9276-34cc0cc14ef8/.