{"$schema":"https://json.schemastore.org/sarif-2.1.0.json","version":"2.1.0","runs":[{"tool":{"driver":{"name":"codehealth","informationUri":"https://codehealth.canine.dev","rules":[{"id":"D5","name":"Coupling","shortDescription":{"text":"Coupling"},"helpUri":"https://codehealth.canine.dev/dimensions/D5"},{"id":"D9","name":"Test Distribution","shortDescription":{"text":"Test Distribution"},"helpUri":"https://codehealth.canine.dev/dimensions/D9"},{"id":"D10","name":"Test Quality","shortDescription":{"text":"Test Quality"},"helpUri":"https://codehealth.canine.dev/dimensions/D10"},{"id":"D13","name":"Secret Scanning","shortDescription":{"text":"Secret Scanning"},"helpUri":"https://codehealth.canine.dev/dimensions/D13","relationships":[{"target":{"id":"CWE-798","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]},{"target":{"id":"CWE-259","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]}],"properties":{"cwe":["CWE-798","CWE-259"]}},{"id":"D16","name":"Bus Factor","shortDescription":{"text":"Bus Factor"},"helpUri":"https://codehealth.canine.dev/dimensions/D16"},{"id":"D19","name":"Documentation Quality","shortDescription":{"text":"Documentation Quality"},"helpUri":"https://codehealth.canine.dev/dimensions/D19"},{"id":"D20","name":"ADR Quality","shortDescription":{"text":"ADR Quality"},"helpUri":"https://codehealth.canine.dev/dimensions/D20"},{"id":"D21","name":"Naming Consistency","shortDescription":{"text":"Naming Consistency"},"helpUri":"https://codehealth.canine.dev/dimensions/D21"},{"id":"D28","name":"Secrets (history)","shortDescription":{"text":"Secrets (history)"},"helpUri":"https://codehealth.canine.dev/dimensions/D28","relationships":[{"target":{"id":"CWE-798","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]},{"target":{"id":"CWE-259","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]}],"properties":{"cwe":["CWE-798","CWE-259"]}},{"id":"D29","name":"Static Analysis (SAST)","shortDescription":{"text":"Static Analysis (SAST)"},"helpUri":"https://codehealth.canine.dev/dimensions/D29","relationships":[{"target":{"id":"CWE-79","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]},{"target":{"id":"CWE-89","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]},{"target":{"id":"CWE-78","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]},{"target":{"id":"CWE-94","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]},{"target":{"id":"CWE-77","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]}],"properties":{"cwe":["CWE-79","CWE-89","CWE-78","CWE-94","CWE-77"]}},{"id":"D34","name":"Knowledge Freshness","shortDescription":{"text":"Knowledge Freshness"},"helpUri":"https://codehealth.canine.dev/dimensions/D34"},{"id":"D35","name":"Change Coupling","shortDescription":{"text":"Change Coupling"},"helpUri":"https://codehealth.canine.dev/dimensions/D35"},{"id":"D37","name":"Vulnerability-disclosure Policy","shortDescription":{"text":"Vulnerability-disclosure Policy"},"helpUri":"https://codehealth.canine.dev/dimensions/D37","relationships":[{"target":{"id":"CWE-1059","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]}],"properties":{"cwe":["CWE-1059"]}}]}},"results":[{"ruleId":"D10","level":"warning","message":{"text":"Skipped test: Show_NoSuchResource_ThrowsMissingManifestResourceException: Skipped \u2014 Test is failing"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/Microsoft.DotNet.Wpf/tests/UnitTests/WindowsBase.Tests/System/Windows/SplashScreenTests.cs"},"region":{"startLine":65}}}],"partialFingerprints":{"codehealthFindingId/v1":"0670d4bd0377bff7d328ef59e8661106c1f8287bfa770079c34b542eb26997b1"}},{"ruleId":"D10","level":"warning","message":{"text":"Skipped test: PushModal_InvokeMultipleTimes_Success: Skipped \u2014 Test is failing"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/Microsoft.DotNet.Wpf/tests/UnitTests/WindowsBase.Tests/System/Windows/Interop/ComponentDispatcherTests.cs"},"region":{"startLine":207}}}],"partialFingerprints":{"codehealthFindingId/v1":"ca315345da34ce672389d9e5dcd38e3930ae348428bd8a649481f3fa19728e78"}},{"ruleId":"D10","level":"warning","message":{"text":"No assertions: TestInvalidBindingPathReference: Test method exercises code but verifies nothing \u2014 add an assertion."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/Microsoft.DotNet.Wpf/tests/IntegrationTests/DRT/DrtXaml/DrtXaml/Tests/BamlTests.cs"},"region":{"startLine":118}}}],"partialFingerprints":{"codehealthFindingId/v1":"7e4cbaba5cc321e0058c2689f1c31d4c5d44fd42007117a481c646218e74b676"}},{"ruleId":"D10","level":"error","message":{"text":"No assertions (empty test): LoadFile: Test method has an empty body \u2014 it asserts nothing and exercises no code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/Microsoft.DotNet.Wpf/tests/IntegrationTests/DRT/DrtXaml/DrtXaml/Tests/Xaml/XamlServicesTests.cs"},"region":{"startLine":47}}}],"partialFingerprints":{"codehealthFindingId/v1":"6ed7401a1624886ceaa5a2d4f52cbb3b352890fe04da74d72e4d8b6ffa872386"}},{"ruleId":"D10","level":"warning","message":{"text":"No assertions: CallBase_Invoke_Nop: Test method exercises code but verifies nothing \u2014 add an assertion."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/Microsoft.DotNet.Wpf/tests/UnitTests/System.Xaml.Tests/System/Windows/Markup/XamlSetValueEventArgsTests.cs"},"region":{"startLine":29}}}],"partialFingerprints":{"codehealthFindingId/v1":"e3993cf1c681d51703da2526880b674ed8452b45d2b2fc98d57cd20fb18e9b36"}},{"ruleId":"D10","level":"warning","message":{"text":"No assertions: CallBase_Invoke_Nop: Test method exercises code but verifies nothing \u2014 add an assertion."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/Microsoft.DotNet.Wpf/tests/UnitTests/System.Xaml.Tests/System/Windows/Markup/XamlSetTypeConverterEventArgsTests.cs"},"region":{"startLine":34}}}],"partialFingerprints":{"codehealthFindingId/v1":"da9bc7356dbf371ac446619dc18965b551d99052f1dbc7167751da3cb90d0117"}},{"ruleId":"D10","level":"warning","message":{"text":"No assertions: CallBase_Invoke_Nop: Test method exercises code but verifies nothing \u2014 add an assertion."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/Microsoft.DotNet.Wpf/tests/UnitTests/System.Xaml.Tests/System/Windows/Markup/XamlSetMarkupExtensionEventArgsTests.cs"},"region":{"startLine":31}}}],"partialFingerprints":{"codehealthFindingId/v1":"293343c255986bb1541a415fe0b461b4d306e78741f4deec77cf1c499091614d"}},{"ruleId":"D10","level":"warning","message":{"text":"No assertions: Ctor_Default: Test method exercises code but verifies nothing \u2014 add an assertion."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/Microsoft.DotNet.Wpf/tests/UnitTests/System.Xaml.Tests/System/Windows/Markup/WhitespaceSignificantCollectionAttributeTests.cs"},"region":{"startLine":10}}}],"partialFingerprints":{"codehealthFindingId/v1":"753d6ff2579f9b46fae33f20f2415e8f59a3e8fffd19ad42ec7ba75201b7ae41"}},{"ruleId":"D10","level":"warning","message":{"text":"No assertions: Ctor_Default: Test method exercises code but verifies nothing \u2014 add an assertion."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/Microsoft.DotNet.Wpf/tests/UnitTests/System.Xaml.Tests/System/Windows/Markup/TrimSurroundingWhitespaceAttributeTests.cs"},"region":{"startLine":10}}}],"partialFingerprints":{"codehealthFindingId/v1":"a198bec2dd434c6d57f961e80155be81b359010df4cca2d45d16e737490f3ad6"}},{"ruleId":"D10","level":"warning","message":{"text":"No assertions: Ctor_Default: Test method exercises code but verifies nothing \u2014 add an assertion."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/Microsoft.DotNet.Wpf/tests/UnitTests/System.Xaml.Tests/System/Xaml/XamlWriterSettingsTests.cs"},"region":{"startLine":12}}}],"partialFingerprints":{"codehealthFindingId/v1":"5ff275f97e5f0c6522370ff290620974a6c9c68bb9c6eff396e0151608338149"}},{"ruleId":"D10","level":"warning","message":{"text":"No assertions: Ctor_XamlWriterSettings: Test method exercises code but verifies nothing \u2014 add an assertion."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/Microsoft.DotNet.Wpf/tests/UnitTests/System.Xaml.Tests/System/Xaml/XamlWriterSettingsTests.cs"},"region":{"startLine":24}}}],"partialFingerprints":{"codehealthFindingId/v1":"5ca5049d9367983e26e8241941754ae4ad5c225a43c95ae5b19999749508a52f"}},{"ruleId":"D10","level":"warning","message":{"text":"No assertions: DecryptUnsignedPublishLicense_Invoke_Success: Test method exercises code but verifies nothing \u2014 add an assertion."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/Microsoft.DotNet.Wpf/tests/UnitTests/WindowsBase.Tests/System/Security/RightsManagement/PublishLicenseTests.cs"},"region":{"startLine":337}}}],"partialFingerprints":{"codehealthFindingId/v1":"33298e2e1fcb6d6f0160280f2c06755ba3ce3d0cc77d835d8bdd0e1e346682f5"}},{"ruleId":"D10","level":"warning","message":{"text":"No assertions: Ctor_String: Test method exercises code but verifies nothing \u2014 add an assertion."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/Microsoft.DotNet.Wpf/tests/UnitTests/WindowsBase.Tests/System/Windows/SplashScreenTests.cs"},"region":{"startLine":20}}}],"partialFingerprints":{"codehealthFindingId/v1":"8e2654e5dddd09eda7d845de565d4a2a91e678af3ca60073dcc146942d6c9d67"}},{"ruleId":"D10","level":"warning","message":{"text":"No assertions: Ctor_Assembly_String: Test method exercises code but verifies nothing \u2014 add an assertion."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/Microsoft.DotNet.Wpf/tests/UnitTests/WindowsBase.Tests/System/Windows/SplashScreenTests.cs"},"region":{"startLine":28}}}],"partialFingerprints":{"codehealthFindingId/v1":"57543d4625fb06ee7fdc0fb48fe6991865abe99d0dfffef42f181669310d95c9"}},{"ruleId":"D10","level":"warning","message":{"text":"No assertions: OverrideMetadata_InvokeSuper_Success: Test method exercises code but verifies nothing \u2014 add an assertion."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/Microsoft.DotNet.Wpf/tests/UnitTests/WindowsBase.Tests/System/Windows/DependencyPropertyKeyTests.cs"},"region":{"startLine":10}}}],"partialFingerprints":{"codehealthFindingId/v1":"b1eae03ebf6f76c22f515dc11f98a33974d99bfbf3c0dbc13573c45a8a6d5d68"}},{"ruleId":"D10","level":"warning","message":{"text":"No assertions: OverrideMetadata_InvokeSub_Success: Test method exercises code but verifies nothing \u2014 add an assertion."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/Microsoft.DotNet.Wpf/tests/UnitTests/WindowsBase.Tests/System/Windows/DependencyPropertyKeyTests.cs"},"region":{"startLine":20}}}],"partialFingerprints":{"codehealthFindingId/v1":"c7c3893fd3328b1c82b3f5ef01a43a7da1fe407928b4eb2dea65578ddbd026e2"}},{"ruleId":"D10","level":"warning","message":{"text":"No assertions: RaiseIdle_Invoke_Success: Test method exercises code but verifies nothing \u2014 add an assertion."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/Microsoft.DotNet.Wpf/tests/UnitTests/WindowsBase.Tests/System/Windows/Interop/ComponentDispatcherTests.cs"},"region":{"startLine":145}}}],"partialFingerprints":{"codehealthFindingId/v1":"5450b2d486168a68821f956655108674ddc2e5521186c1e88f963ac179c856ac"}},{"ruleId":"D10","level":"warning","message":{"text":"No assertions: RaiseThreadMessage_Invoke_Success: Test method exercises code but verifies nothing \u2014 add an assertion."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/Microsoft.DotNet.Wpf/tests/UnitTests/WindowsBase.Tests/System/Windows/Interop/ComponentDispatcherTests.cs"},"region":{"startLine":181}}}],"partialFingerprints":{"codehealthFindingId/v1":"a719fae10bf44ac910c0975719f5f379aa359695dea0111688aebe3503ed20ab"}},{"ruleId":"D10","level":"warning","message":{"text":"No assertions: PopModal_InvokeMultipleTimes_Success: Test method exercises code but verifies nothing \u2014 add an assertion."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/Microsoft.DotNet.Wpf/tests/UnitTests/WindowsBase.Tests/System/Windows/Interop/ComponentDispatcherTests.cs"},"region":{"startLine":271}}}],"partialFingerprints":{"codehealthFindingId/v1":"008d5b94a32b9f53b453fd209846fd68d0f518c0ff1a7518141c07207ce410a5"}},{"ruleId":"D10","level":"warning","message":{"text":"No assertions: Ctor_Default: Test method exercises code but verifies nothing \u2014 add an assertion."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/Microsoft.DotNet.Wpf/tests/UnitTests/WindowsBase.Tests/System/Windows/Threading/DispatcherSynchronizationContextTests.cs"},"region":{"startLine":10}}}],"partialFingerprints":{"codehealthFindingId/v1":"2f6c5bc1491e8e67e0cabc985d4b213752e62e9aed6ece53d9bdbdca379af2e8"}},{"ruleId":"D10","level":"warning","message":{"text":"No assertions: Ctor_Dispatcher: Test method exercises code but verifies nothing \u2014 add an assertion."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/Microsoft.DotNet.Wpf/tests/UnitTests/WindowsBase.Tests/System/Windows/Threading/DispatcherSynchronizationContextTests.cs"},"region":{"startLine":16}}}],"partialFingerprints":{"codehealthFindingId/v1":"812870d7fc3b7929b1fac5451418f7d3256eb20bce7f16214d01872e3298a740"}},{"ruleId":"D10","level":"warning","message":{"text":"No assertions: Ctor_Dispatcher_DispatcherPriority: Test method exercises code but verifies nothing \u2014 add an assertion."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/Microsoft.DotNet.Wpf/tests/UnitTests/WindowsBase.Tests/System/Windows/Threading/DispatcherSynchronizationContextTests.cs"},"region":{"startLine":22}}}],"partialFingerprints":{"codehealthFindingId/v1":"0d8be104f956a08a401d4d31c97e1253d59c6edc4bad6d03a02d8dbab8ed5ba2"}},{"ruleId":"D10","level":"warning","message":{"text":"No assertions: GetResult_InvokeWithDispatcher_Nop: Test method exercises code but verifies nothing \u2014 add an assertion."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/Microsoft.DotNet.Wpf/tests/UnitTests/WindowsBase.Tests/System/Windows/Threading/DispatcherPriorityAwaiterTests.cs"},"region":{"startLine":15}}}],"partialFingerprints":{"codehealthFindingId/v1":"60df84012cc02604917c94617115516edd10045965239aa02f6fe672e2b214c0"}},{"ruleId":"D10","level":"warning","message":{"text":"No assertions: GetResult_InvokeDefaultAwaitable_Nop: Test method exercises code but verifies nothing \u2014 add an assertion."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/Microsoft.DotNet.Wpf/tests/UnitTests/WindowsBase.Tests/System/Windows/Threading/DispatcherPriorityAwaiterTests.cs"},"region":{"startLine":49}}}],"partialFingerprints":{"codehealthFindingId/v1":"55de69f59392a7e0c8a15ad676435e434c5141d911db989d42bd35bc6538eab2"}},{"ruleId":"D10","level":"warning","message":{"text":"No assertions: GetResult_InvokeDefault_Nop: Test method exercises code but verifies nothing \u2014 add an assertion."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/Microsoft.DotNet.Wpf/tests/UnitTests/WindowsBase.Tests/System/Windows/Threading/DispatcherPriorityAwaiterTests.cs"},"region":{"startLine":62}}}],"partialFingerprints":{"codehealthFindingId/v1":"a5fdabcf4cef47224277f0f14c6b8eaccd467eb0379e00081f5af29201d91888"}},{"ruleId":"D16","level":"note","message":{"text":"Off-boarding risk: anonymized user #1: If anonymized user #1 becomes unavailable, 1 significant file(s) lose their only recent owner: src/Microsoft.DotNet.Wpf/src/WindowsBase/MS/Internal/WeakEventTable.cs. Pair on, review, or document these before any departure."},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"4c387461d20cec787a6c7669e26ca17203303dea02fbd09d035221b0fe53060f"}},{"ruleId":"D19","level":"note","message":{"text":"The command-line argument parser example uses wc.exe with /lines and /files:foo, but the generated code is a C# class whose fields are validated by ParseCommandLineArguments(). The visible portion does not show how to parse an actual type.: Add a brief \u0027Parsing an Actual Type\u0027 example demonstrating field validation on a concrete class."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/Microsoft.DotNet.Wpf/src/WpfGfx/codegen/mcg/main/cmdline/readme.txt"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"a7d89eec7163d4ac9970918d841d95debb0b4e60565cc5607726060a80ade8b6"}},{"ruleId":"D20","level":"note","message":{"text":"No ADRs found: No ADRs found at common paths; consider documenting architectural decisions in Docs/ADL/ or similar."},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"d2bea044ff79d7d275f5a91a6e2f548586178eaf480274c33960ad020c854631"}},{"ruleId":"D28","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"a46e402d73f2d13995ce3ccaf3d5fa6fcdb679d57da278858339fbb407ab3329"}},{"ruleId":"D28","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"a222093951ec7deebc2053cae55bf2c9b0b9b5c04a58e9ca6957d999887926c4"}},{"ruleId":"D28","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"7eafc56e25a4970d6327d711a0f1a52e3dfd17471ac33e6617e70a5ba28a1f03"}},{"ruleId":"D28","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"5e857b8a2a97c99e1c2a96938b5f68b95da028edb40bd682e8c90f69040b3e1f"}},{"ruleId":"D28","level":"note","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"3cdfd7beb31b791ae18dcb425e21eb157c842e7bbcd522cc330573c1a6538db1"}},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"f54a90b70a5e39d264dafa2c5c6895d498b3849c6bb4b34e52555ba60cba467a"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"71bbde5d36232159a739147319a924896184f50f7280f7f71c12307f5e2c01fd"},"taxa":[{"id":"CWE-502","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}}]},{"ruleId":"D34","level":"note","message":{"text":"knowledge concentrated in recent work \u2014 freshness signal contradicted by repo activity: File-level freshness contradicts repo activity: 39 commits in the last 90 days, yet 929 of 938 significant files carry no living knowledge. Those two readings cannot both be true, so the per-file recency signal is treated as unreliable here and freshness is not scored for this run."},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"6e461071eb7c3d0d8a5f27dee27c23fcaef1256b0b0ff28c50eb743e940dbe9d"}}],"taxonomies":[{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d","organization":"MITRE","informationUri":"https://cwe.mitre.org/","isComprehensive":false,"shortDescription":{"text":"The MITRE Common Weakness Enumeration (CWE)."},"taxa":[{"id":"CWE-1059","guid":"a2381a08-60f6-9554-a8b8-f3018cfaaca5","name":"Insufficient Technical Documentation","shortDescription":{"text":"Insufficient Technical Documentation"},"helpUri":"https://cwe.mitre.org/data/definitions/1059.html"},{"id":"CWE-1357","guid":"e4d2e772-757e-0a5c-bd7d-77052949d866","name":"Reliance on Insufficiently Trustworthy Component","shortDescription":{"text":"Reliance on Insufficiently Trustworthy Component"},"helpUri":"https://cwe.mitre.org/data/definitions/1357.html"},{"id":"CWE-259","guid":"ae9ad959-fbb6-9d5e-892d-3dca66da0b69","name":"Use of Hard-coded Password","shortDescription":{"text":"Use of Hard-coded Password"},"helpUri":"https://cwe.mitre.org/data/definitions/259.html"},{"id":"CWE-353","guid":"09d7e902-d4ee-f05d-ae6c-0a1554d0c18f","name":"CWE-353","shortDescription":{"text":"CWE-353"},"helpUri":"https://cwe.mitre.org/data/definitions/353.html"},{"id":"CWE-502","guid":"f7d3b296-aac0-5c5a-b706-e07faba26c36","name":"CWE-502","shortDescription":{"text":"CWE-502"},"helpUri":"https://cwe.mitre.org/data/definitions/502.html"},{"id":"CWE-77","guid":"332c8ade-6612-9f56-a06b-d8d90b1a8750","name":"Command Injection","shortDescription":{"text":"Command Injection"},"helpUri":"https://cwe.mitre.org/data/definitions/77.html"},{"id":"CWE-78","guid":"2e31ceaf-c7ae-2e5e-9661-cfb1362789cf","name":"OS Command Injection","shortDescription":{"text":"OS Command Injection"},"helpUri":"https://cwe.mitre.org/data/definitions/78.html"},{"id":"CWE-79","guid":"fd45580b-e8c4-fc5e-8c2f-aa8fab0b4dbf","name":"Cross-site Scripting (XSS)","shortDescription":{"text":"Cross-site Scripting (XSS)"},"helpUri":"https://cwe.mitre.org/data/definitions/79.html"},{"id":"CWE-798","guid":"5e8f057d-fee3-995a-a0cb-9fc5b0d174d1","name":"Use of Hard-coded Credentials","shortDescription":{"text":"Use of Hard-coded Credentials"},"helpUri":"https://cwe.mitre.org/data/definitions/798.html"},{"id":"CWE-89","guid":"6d08fdad-37eb-c150-bbf0-d7d946863407","name":"SQL Injection","shortDescription":{"text":"SQL Injection"},"helpUri":"https://cwe.mitre.org/data/definitions/89.html"},{"id":"CWE-94","guid":"75e7f50c-6c2f-dd52-bf40-bf6c52b861fd","name":"Code Injection","shortDescription":{"text":"Code Injection"},"helpUri":"https://cwe.mitre.org/data/definitions/94.html"}]}],"properties":{"codehealthPublication":{"public":true,"notice":"This is the PUBLIC form of this artifact. Findings are listed in full, but the details of SECURITY findings \u2014 which rule fired, in which file, on which line, and how to fix it \u2014 are deliberately withheld, and any secret-scanner results are excluded entirely. Where detail is absent here it was REMOVED FOR PUBLICATION; it is not missing from the analysis. The complete artifact is available from the repository owner.","securityFindingsRedacted":7,"secretScannerRunsExcluded":0}},"redactionTokens":["A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."]}]}