rohitg00/agentmemory

Compose service explicitly runs as root

[MINED108] `self._base` used but never assigned in __init__: Method `initialize` of class `AgentMemoryProvider` reads `self._base`, but no assignment to it exists in __init__ (and no class-level fall…

[MINED108] `self._session_id` used but never assigned in __init__: Method `initialize` of class `AgentMemoryProvider` reads `self._session_id`, but no assignment to it exists in __init__ (and no clas…

[MINED108] `self._project` used but never assigned in __init__: Method `initialize` of class `AgentMemoryProvider` reads `self._project`, but no assignment to it exists in __init__ (and no class-leve…

[MINED108] `self._base` used but never assigned in __init__: Method `initialize` of class `AgentMemoryProvider` reads `self._base`, but no assignment to it exists in __init__ (and no class-level fall…

[MINED108] `self._base` used but never assigned in __init__: Method `initialize` of class `AgentMemoryProvider` reads `self._base`, but no assignment to it exists in __init__ (and no class-level fall…

[MINED108] `self._project` used but never assigned in __init__: Method `initialize` of class `AgentMemoryProvider` reads `self._project`, but no assignment to it exists in __init__ (and no class-leve…

[MINED108] `self._project` used but never assigned in __init__: Method `initialize` of class `AgentMemoryProvider` reads `self._project`, but no assignment to it exists in __init__ (and no class-leve…

[MINED108] `self._base` used but never assigned in __init__: Method `system_prompt_block` of class `AgentMemoryProvider` reads `self._base`, but no assignment to it exists in __init__ (and no class-l…

[MINED108] `self._session_id` used but never assigned in __init__: Method `system_prompt_block` of class `AgentMemoryProvider` reads `self._session_id`, but no assignment to it exists in __init__ (an…

[MINED108] `self._project` used but never assigned in __init__: Method `system_prompt_block` of class `AgentMemoryProvider` reads `self._project`, but no assignment to it exists in __init__ (and no c…

[MINED108] `self._base` used but never assigned in __init__: Method `prefetch` of class `AgentMemoryProvider` reads `self._base`, but no assignment to it exists in __init__ (and no class-level fallba…

[MINED108] `self._base` used but never assigned in __init__: Method `queue_prefetch` of class `AgentMemoryProvider` reads `self._base`, but no assignment to it exists in __init__ (and no class-level …

[MINED108] `self._base` used but never assigned in __init__: Method `handle_tool_call` of class `AgentMemoryProvider` reads `self._base`, but no assignment to it exists in __init__ (and no class-leve…

[MINED108] `self._base` used but never assigned in __init__: Method `handle_tool_call` of class `AgentMemoryProvider` reads `self._base`, but no assignment to it exists in __init__ (and no class-leve…

[MINED108] `self._base` used but never assigned in __init__: Method `handle_tool_call` of class `AgentMemoryProvider` reads `self._base`, but no assignment to it exists in __init__ (and no class-leve…

[MINED108] `self._base` used but never assigned in __init__: Method `sync_turn` of class `AgentMemoryProvider` reads `self._base`, but no assignment to it exists in __init__ (and no class-level fallb…

[MINED108] `self._session_id` used but never assigned in __init__: Method `sync_turn` of class `AgentMemoryProvider` reads `self._session_id`, but no assignment to it exists in __init__ (and no class…

[MINED108] `self._project` used but never assigned in __init__: Method `sync_turn` of class `AgentMemoryProvider` reads `self._project`, but no assignment to it exists in __init__ (and no class-level…

[MINED108] `self._project` used but never assigned in __init__: Method `sync_turn` of class `AgentMemoryProvider` reads `self._project`, but no assignment to it exists in __init__ (and no class-level…

[MINED108] `self._base` used but never assigned in __init__: Method `on_session_end` of class `AgentMemoryProvider` reads `self._base`, but no assignment to it exists in __init__ (and no class-level …

[MINED108] `self._session_id` used but never assigned in __init__: Method `on_session_end` of class `AgentMemoryProvider` reads `self._session_id`, but no assignment to it exists in __init__ (and no …

[MINED108] `self._base` used but never assigned in __init__: Method `on_pre_compress` of class `AgentMemoryProvider` reads `self._base`, but no assignment to it exists in __init__ (and no class-level…

[MINED108] `self._session_id` used but never assigned in __init__: Method `on_pre_compress` of class `AgentMemoryProvider` reads `self._session_id`, but no assignment to it exists in __init__ (and no…

[MINED108] `self._project` used but never assigned in __init__: Method `on_pre_compress` of class `AgentMemoryProvider` reads `self._project`, but no assignment to it exists in __init__ (and no class…

[MINED108] `self._base` used but never assigned in __init__: Method `on_memory_write` of class `AgentMemoryProvider` reads `self._base`, but no assignment to it exists in __init__ (and no class-level…

[MINED115] Action `actions/checkout` pinned to mutable ref `@v6`: `uses: actions/checkout@v6` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-a…

[MINED115] Action `actions/setup-node` pinned to mutable ref `@v6`: `uses: actions/setup-node@v6` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the …

[MINED115] Action `actions/checkout` pinned to mutable ref `@v6`: `uses: actions/checkout@v6` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-a…

[MINED115] Action `actions/setup-node` pinned to mutable ref `@v6`: `uses: actions/setup-node@v6` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the …

[MINED118] Dockerfile FROM `iiidev/iii (no tag)` not pinned by digest: `FROM iiidev/iii (no tag)` resolves the tag at build time. The registry CAN re-push a different image for the same tag, so every…

[MINED118] Dockerfile FROM `node:22-slim` not pinned by digest: `FROM node:22-slim` resolves the tag at build time. The registry CAN re-push a different image for the same tag, so every build is pote…

[MINED118] Dockerfile FROM `iiidev/iii (no tag)` not pinned by digest: `FROM iiidev/iii (no tag)` resolves the tag at build time. The registry CAN re-push a different image for the same tag, so every…

[MINED118] Dockerfile FROM `node:22-slim` not pinned by digest: `FROM node:22-slim` resolves the tag at build time. The registry CAN re-push a different image for the same tag, so every build is pote…

[MINED118] Dockerfile FROM `iiidev/iii (no tag)` not pinned by digest: `FROM iiidev/iii (no tag)` resolves the tag at build time. The registry CAN re-push a different image for the same tag, so every…

[MINED118] Dockerfile FROM `node:22-slim` not pinned by digest: `FROM node:22-slim` resolves the tag at build time. The registry CAN re-push a different image for the same tag, so every build is pote…

[MINED118] Dockerfile FROM `iiidev/iii (no tag)` not pinned by digest: `FROM iiidev/iii (no tag)` resolves the tag at build time. The registry CAN re-push a different image for the same tag, so every…

[MINED118] Dockerfile FROM `node:22-slim` not pinned by digest: `FROM node:22-slim` resolves the tag at build time. The registry CAN re-push a different image for the same tag, so every build is pote…

[SEC029] Server-Side Request Forgery (SSRF) — outbound HTTP from user input: Outbound HTTP request to a user-controlled URL without allowlist validation. Attackers can probe internal services (169.25…

[SEC029] Server-Side Request Forgery (SSRF) — outbound HTTP from user input: Outbound HTTP request to a user-controlled URL without allowlist validation. Attackers can probe internal services (169.25…

[SEC029] Server-Side Request Forgery (SSRF) — outbound HTTP from user input: Outbound HTTP request to a user-controlled URL without allowlist validation. Attackers can probe internal services (169.25…

[SEC040] innerHTML XSS — template literal with server-supplied data: Setting .innerHTML with a template literal that interpolates server-supplied or user-supplied data is the canonical stored/reflect…

[SEC040] innerHTML XSS — template literal with server-supplied data: Setting .innerHTML with a template literal that interpolates server-supplied or user-supplied data is the canonical stored/reflect…

[SEC040] innerHTML XSS — template literal with server-supplied data: Setting .innerHTML with a template literal that interpolates server-supplied or user-supplied data is the canonical stored/reflect…

[SEC083] JS: new RegExp() with non-literal: new RegExp(<variable>) — variable input can craft a ReDoS pattern. Ported from eslint-plugin-security detect-non-literal-regexp (Apache-2.0).

[SEC083] JS: new RegExp() with non-literal: new RegExp(<variable>) — variable input can craft a ReDoS pattern. Ported from eslint-plugin-security detect-non-literal-regexp (Apache-2.0).

[SEC085] JS: child_process.exec with non-literal: child_process.exec with user-derived input enables command injection. Ported from eslint-plugin-security detect-child-process (Apache-2.0).

[SEC085] JS: child_process.exec with non-literal: child_process.exec with user-derived input enables command injection. Ported from eslint-plugin-security detect-child-process (Apache-2.0).

[SEC085] JS: child_process.exec with non-literal: child_process.exec with user-derived input enables command injection. Ported from eslint-plugin-security detect-child-process (Apache-2.0).

[SEC128] Async function without await — fire-and-forget Promise (AI mistake): Async call invoked without `await` returns an unhandled Promise. The outer function resolves before the inner work comple…

[SEC128] Async function without await — fire-and-forget Promise (AI mistake): Async call invoked without `await` returns an unhandled Promise. The outer function resolves before the inner work comple…

[SEC128] Async function without await — fire-and-forget Promise (AI mistake): Async call invoked without `await` returns an unhandled Promise. The outer function resolves before the inner work comple…

localStorage write failures are swallowed silently

Codex session log reader may expose prompts or tool-call content

Docker final stage has no non-root USER

Docker final stage has no non-root USER

Docker final stage has no non-root USER

Docker final stage has no non-root USER

Docker build context has no .dockerignore

[ERR002] Empty Catch Block: Empty catch blocks hide errors.

[ERR002] Empty Catch Block: Empty catch blocks hide errors.

[ERR002] Empty Catch Block: Empty catch blocks hide errors.

[SEC045] eval()/exec() on stored or user-supplied data: eval() and exec() on data — even admin-stored data — is a lateral-movement vector after any one credential compromise. Sandboxes (__builtins__ …

[SEC045] eval()/exec() on stored or user-supplied data: eval() and exec() on data — even admin-stored data — is a lateral-movement vector after any one credential compromise. Sandboxes (__builtins__ …

[SEC045] eval()/exec() on stored or user-supplied data: eval() and exec() on data — even admin-stored data — is a lateral-movement vector after any one credential compromise. Sandboxes (__builtins__ …

Duplicated implementation block across source files

Duplicated implementation block across source files

Duplicated implementation block across source files

Duplicated implementation block across source files

Duplicated implementation block across source files

Duplicated implementation block across source files

Duplicated implementation block across source files

Duplicated implementation block across source files

Duplicated implementation block across source files

Duplicated implementation block across source files

Duplicated implementation block across source files

Duplicated implementation block across source files

Duplicated implementation block across source files

Duplicated implementation block across source files

Duplicated implementation block across source files

Duplicated implementation block across source files

Duplicated implementation block across source files

Duplicated implementation block across source files

Duplicated implementation block across source files

Duplicated implementation block across source files

Duplicated implementation block across source files

Duplicated implementation block across source files

Duplicated implementation block across source files

Compose service does not declare a runtime user

Compose service lacks no-new-privileges hardening

Compose service lacks no-new-privileges hardening

Dockerfile base image is selected through a build variable

Dockerfile base image is selected through a build variable

Dockerfile base image is selected through a build variable

Dockerfile base image is selected through a build variable

Compose service `iii-engine` image is selected through a build variable

[ERR002] Empty Catch Block (and 6 more): Same pattern found in 6 additional files. Review if needed.

[MINED044] Js Console Log Prod (and 6 more): Same pattern found in 6 additional files. Review if needed.

[MINED044] Js Console Log Prod: console.log left in code. Should be replaced with logger or removed.

[MINED044] Js Console Log Prod: console.log left in code. Should be replaced with logger or removed.

[MINED044] Js Console Log Prod: console.log left in code. Should be replaced with logger or removed.

[MINED045] Ts Non Null Assertion (and 11 more): Same pattern found in 11 additional files. Review if needed.

[MINED045] Ts Non Null Assertion: x! asserts not null - bypasses null checks - TypeError if wrong.

[MINED045] Ts Non Null Assertion: x! asserts not null - bypasses null checks - TypeError if wrong.

[MINED045] Ts Non Null Assertion: x! asserts not null - bypasses null checks - TypeError if wrong.

[MINED049] Print Pii: Logging password/token/email/ssn directly to stdout.

[MINED052] Ts Any Typed: : any used as type annotation. Defeats TypeScript type safety.

[MINED052] Ts Any Typed: : any used as type annotation. Defeats TypeScript type safety.

[MINED054] Ts As Any (and 2 more): Same pattern found in 2 additional files. Review if needed.

[MINED054] Ts As Any: Casting to any (as any) bypasses type checking entirely.

[MINED054] Ts As Any: Casting to any (as any) bypasses type checking entirely.

[MINED054] Ts As Any: Casting to any (as any) bypasses type checking entirely.

[MINED055] Npm Install No Lockfile: Production image runs npm install (resolves new versions on every build) instead of npm ci.

[MINED055] Npm Install No Lockfile: Production image runs npm install (resolves new versions on every build) instead of npm ci.

[SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-bearing value. This is a frequent AI-assisted coding failure: the helper exposes the exact value needed for tro…

[SEC029] Server-Side Request Forgery (SSRF) — outbound HTTP from user input (and 5 more): Same pattern found in 5 additional files. Review if needed.

[SEC040] innerHTML XSS — template literal with server-supplied data (and 11 more): Same pattern found in 11 additional files. Review if needed.

[SEC045] eval()/exec() on stored or user-supplied data (and 6 more): Same pattern found in 6 additional files. Review if needed.

[SEC085] JS: child_process.exec with non-literal (and 4 more): Same pattern found in 4 additional files. Review if needed.

[SEC118] UUIDv1 / UUIDv3 used for security-sensitive identifier: UUIDv1 encodes the MAC address and timestamp, making it predictable. Used as a session token or password-reset key, it's enumerable.

[SEC118] UUIDv1 / UUIDv3 used for security-sensitive identifier: UUIDv1 encodes the MAC address and timestamp, making it predictable. Used as a session token or password-reset key, it's enumerable.

[SEC128] Async function without await — fire-and-forget Promise (AI mistake) (and 3 more): Same pattern found in 3 additional files. Review if needed.