https://github.com/Mirascope/mirascope.git ·
lang: python ·
LOC: ·
source: user_submitted
| Rule | Severity | Count |
|---|---|---|
SEC015 Insecure Randomness for Security |
medium | 3 |
SEC020 Secret Printed to Logs |
high | 2 |
SEC001 Hardcoded Password |
critical | 1 |
SEC001
Hardcoded Password
website/server-entry.ts:12
· conf 0.30
[SEC001] Hardcoded Password: Hardcoded password found in source code.
SEC015
Insecure Randomness for Security
typescript/src/llm/retries/utils.ts:47
· conf 0.15
[SEC015] Insecure Randomness for Security: Weak PRNG used in security-sensitive context. Output is predictable.
SEC015
Insecure Randomness for Security
typescript/src/ops/_internal/closure.ts:81
· conf 0.25
[SEC015] Insecure Randomness for Security: Weak PRNG used in security-sensitive context. Output is predictable.
SEC015
Insecure Randomness for Security
website/app/components/mdx/elements/mermaid-diagram.tsx:27
· conf 0.15
[SEC015] Insecure Randomness for Security: Weak PRNG used in security-sensitive context. Output is predictable.
SEC020
Secret Printed to Logs
typescript/examples/responses/finish-reason.ts:17
· conf 0.15
[SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-bearing value. This is a frequent AI-assisted coding failure: the helper exposes the exact value needed for tro…
SEC020
Secret Printed to Logs
typescript/examples/responses/usage.ts:14
· conf 0.15
[SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-bearing value. This is a frequent AI-assisted coding failure: the helper exposes the exact value needed for tro…
Reading from rp.scan + rp.finding + rp.rule (unified schema, R78 series). Legacy data path unchanged. Compare with /scan/b7287018-3724-45cf-bfd1-bfc2f126325e/.