{"$schema":"https://json.schemastore.org/sarif-2.1.0.json","version":"2.1.0","runs":[{"tool":{"driver":{"name":"codehealth","informationUri":"https://codehealth.canine.dev","rules":[{"id":"D1","name":"Cyclomatic Complexity","shortDescription":{"text":"Cyclomatic Complexity"},"helpUri":"https://codehealth.canine.dev/dimensions/D1"},{"id":"D2","name":"Cognitive Complexity","shortDescription":{"text":"Cognitive Complexity"},"helpUri":"https://codehealth.canine.dev/dimensions/D2"},{"id":"D3","name":"God Classes","shortDescription":{"text":"God Classes"},"helpUri":"https://codehealth.canine.dev/dimensions/D3"},{"id":"D4","name":"Code Duplication","shortDescription":{"text":"Code Duplication"},"helpUri":"https://codehealth.canine.dev/dimensions/D4"},{"id":"D5","name":"Coupling","shortDescription":{"text":"Coupling"},"helpUri":"https://codehealth.canine.dev/dimensions/D5"},{"id":"D6","name":"Cohesion (LCOM4)","shortDescription":{"text":"Cohesion (LCOM4)"},"helpUri":"https://codehealth.canine.dev/dimensions/D6"},{"id":"D9","name":"Test Distribution","shortDescription":{"text":"Test Distribution"},"helpUri":"https://codehealth.canine.dev/dimensions/D9"},{"id":"D10","name":"Test Quality","shortDescription":{"text":"Test Quality"},"helpUri":"https://codehealth.canine.dev/dimensions/D10"},{"id":"D12","name":"Dependency Hygiene","shortDescription":{"text":"Dependency Hygiene"},"helpUri":"https://codehealth.canine.dev/dimensions/D12"},{"id":"D13","name":"Secret Scanning","shortDescription":{"text":"Secret Scanning"},"helpUri":"https://codehealth.canine.dev/dimensions/D13","relationships":[{"target":{"id":"CWE-798","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]}]},{"id":"D14","name":"License Compliance","shortDescription":{"text":"License Compliance"},"helpUri":"https://codehealth.canine.dev/dimensions/D14"},{"id":"D15","name":"Churn \u00D7 Complexity Hotspots","shortDescription":{"text":"Churn \u00D7 Complexity Hotspots"},"helpUri":"https://codehealth.canine.dev/dimensions/D15"},{"id":"D16","name":"Bus Factor","shortDescription":{"text":"Bus Factor"},"helpUri":"https://codehealth.canine.dev/dimensions/D16"},{"id":"D17","name":"Explicit Debt","shortDescription":{"text":"Explicit Debt"},"helpUri":"https://codehealth.canine.dev/dimensions/D17"},{"id":"D18","name":"Solution Shape","shortDescription":{"text":"Solution Shape"},"helpUri":"https://codehealth.canine.dev/dimensions/D18"},{"id":"D19","name":"Documentation Quality","shortDescription":{"text":"Documentation Quality"},"helpUri":"https://codehealth.canine.dev/dimensions/D19"},{"id":"D20","name":"ADR Quality","shortDescription":{"text":"ADR Quality"},"helpUri":"https://codehealth.canine.dev/dimensions/D20"},{"id":"D21","name":"Naming Consistency","shortDescription":{"text":"Naming Consistency"},"helpUri":"https://codehealth.canine.dev/dimensions/D21"},{"id":"D23","name":"Boundary Type-Coupling","shortDescription":{"text":"Boundary Type-Coupling"},"helpUri":"https://codehealth.canine.dev/dimensions/D23"},{"id":"D24","name":"Comment Value","shortDescription":{"text":"Comment Value"},"helpUri":"https://codehealth.canine.dev/dimensions/D24"},{"id":"D26","name":"Project Cohesion","shortDescription":{"text":"Project Cohesion"},"helpUri":"https://codehealth.canine.dev/dimensions/D26"},{"id":"D27","name":"Navigability","shortDescription":{"text":"Navigability"},"helpUri":"https://codehealth.canine.dev/dimensions/D27"},{"id":"D28","name":"Secrets (history)","shortDescription":{"text":"Secrets (history)"},"helpUri":"https://codehealth.canine.dev/dimensions/D28","relationships":[{"target":{"id":"CWE-798","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]}]},{"id":"D29","name":"Static Analysis (SAST)","shortDescription":{"text":"Static Analysis (SAST)"},"helpUri":"https://codehealth.canine.dev/dimensions/D29"},{"id":"D30","name":"Dependency Vulnerabilities","shortDescription":{"text":"Dependency Vulnerabilities"},"helpUri":"https://codehealth.canine.dev/dimensions/D30","relationships":[{"target":{"id":"CWE-1395","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]}]},{"id":"D31","name":"IaC \u0026 Container Security","shortDescription":{"text":"IaC \u0026 Container Security"},"helpUri":"https://codehealth.canine.dev/dimensions/D31"},{"id":"D34","name":"Knowledge Freshness","shortDescription":{"text":"Knowledge Freshness"},"helpUri":"https://codehealth.canine.dev/dimensions/D34"},{"id":"D35","name":"Change Coupling","shortDescription":{"text":"Change Coupling"},"helpUri":"https://codehealth.canine.dev/dimensions/D35"},{"id":"D39","name":"IL Efficiency","shortDescription":{"text":"IL Efficiency"},"helpUri":"https://codehealth.canine.dev/dimensions/D39"}]}},"results":[{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (18 lines \u00D7 2): src/Booking/RestAirline.Booking.Api/Program.cs:16-33 | src/FlightAvailability/RestAirline.FlightAvailability.Api/Program.cs:15-32"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/Booking/RestAirline.Booking.Api/Program.cs"},"region":{"startLine":16}}}],"partialFingerprints":{"codehealthFindingId/v1":"fe9a0ab85c09ae5f3cd83322cecf36468e849669e1fed25b0612412941091e2a"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (11 lines \u00D7 2): src/Booking/RestAirline.Booking.Api/Swagger/SwaggerServicesConfiguration.cs:13-23 | src/FlightAvailability/RestAirline.FlightAvailability.Api/Swagger/SwaggerServicesConfiguration.cs:13-23"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/Booking/RestAirline.Booking.Api/Swagger/SwaggerServicesConfiguration.cs"},"region":{"startLine":13}}}],"partialFingerprints":{"codehealthFindingId/v1":"426d364ffa567151bf5ff4c79e1bf35c362a0d75caf00de72f352b687c29149f"}},{"ruleId":"D5","level":"warning","message":{"text":"Off the main sequence: RestAirline.Web: RestAirline.Web: abstractness 0.00, instability 0.00, distance 1.00 \u2014 zone of pain \u2014 concrete and heavily depended-on, so it\u0027s rigid to change."},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"fad4e98db0b4cfc465207b5b7541069b6c5abdc8dc4934044ebabb66282960a6"}},{"ruleId":"D5","level":"warning","message":{"text":"Off the main sequence: RestAirline.Booking.Domain: RestAirline.Booking.Domain: abstractness 0.03, instability 0.04, distance 0.93 \u2014 zone of pain \u2014 concrete and heavily depended-on, so it\u0027s rigid to change."},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"a20c4e501ecd25ff817f9a4d9a7bf7d22065381f9f704acd8d239789839376a7"}},{"ruleId":"D5","level":"warning","message":{"text":"Off the main sequence: RestAirline.FlightAvailability.Domain: RestAirline.FlightAvailability.Domain: abstractness 0.00, instability 0.09, distance 0.91 \u2014 zone of pain \u2014 concrete and heavily depended-on, so it\u0027s rigid to change."},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"c78694b9d72a644f6292bf0788b74565061745806596ddce096b724b398b0294"}},{"ruleId":"D5","level":"warning","message":{"text":"Off the main sequence: RestAirline.Shared: RestAirline.Shared: abstractness 0.13, instability 0.00, distance 0.88 \u2014 zone of pain \u2014 concrete and heavily depended-on, so it\u0027s rigid to change."},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"141b30fda8ec77b441c5c44a40d83dfb310ca3d24d9c7bfd1a584cf7a7c1b893"}},{"ruleId":"D5","level":"warning","message":{"text":"Off the main sequence: RestAirline.Booking.Commands: RestAirline.Booking.Commands: abstractness 0.00, instability 0.15, distance 0.85 \u2014 zone of pain \u2014 concrete and heavily depended-on, so it\u0027s rigid to change."},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"8947955fdce299f03662d6409f50a0e728cc7d8ca7fe53621cdc1681ea7a6c47"}},{"ruleId":"D5","level":"warning","message":{"text":"Off the main sequence: RestAirline.Booking.ReadModel.EntityFramework: RestAirline.Booking.ReadModel.EntityFramework: abstractness 0.00, instability 0.25, distance 0.75 \u2014 zone of pain \u2014 concrete and heavily depended-on, so it\u0027s rigid to change."},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"4d5154e5a6dd3f57f07c89a73fa276471b8ff01e2f8d2334943e2830507292a7"}},{"ruleId":"D5","level":"warning","message":{"text":"Off the main sequence: RestAirline.Booking.ReadModel.InMemory: RestAirline.Booking.ReadModel.InMemory: abstractness 0.00, instability 0.25, distance 0.75 \u2014 zone of pain \u2014 concrete and heavily depended-on, so it\u0027s rigid to change."},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"69b1e76da6ebc04a0b5cd6b28a8938ba68b9994c0aa5ddb775c0bddcff68fc9c"}},{"ruleId":"D5","level":"warning","message":{"text":"Off the main sequence: RestAirline.Booking.CommandHandlers: RestAirline.Booking.CommandHandlers: abstractness 0.00, instability 0.27, distance 0.73 \u2014 zone of pain \u2014 concrete and heavily depended-on, so it\u0027s rigid to change."},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"e5cebe8d1597814abecf863e8f385d813d36df005ab1d1ba6e417e4f16677184"}},{"ruleId":"D5","level":"warning","message":{"text":"Off the main sequence: RestAirline.Booking.ReadModel.MongoDB: RestAirline.Booking.ReadModel.MongoDB: abstractness 0.00, instability 0.29, distance 0.71 \u2014 zone of pain \u2014 concrete and heavily depended-on, so it\u0027s rigid to change."},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"bcc5b62e7d59355a310e067f35d73631843af7eccc2571c88274e139429dd7a2"}},{"ruleId":"D5","level":"warning","message":{"text":"Off the main sequence: RestAirline.FlightAvailability.Commands: RestAirline.FlightAvailability.Commands: abstractness 0.00, instability 0.29, distance 0.71 \u2014 zone of pain \u2014 concrete and heavily depended-on, so it\u0027s rigid to change."},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"019c6f81bdd119d2553b4e66f0d7833ede8fe847038d176e751ec5864b241de9"}},{"ruleId":"D13","level":"error","message":{"text":"Leaked secret: hardcoded-credential: hardcoded-credential detected."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"k8s/temp-will-delete-soon/conf_local.yaml"},"region":{"startLine":8}}}],"partialFingerprints":{"codehealthFindingId/v1":"72d4763fa2411fa775389a06ad1f9ba346ec252ca973c24ddc620d08517e58e7"}},{"ruleId":"D13","level":"error","message":{"text":"Leaked secret: hardcoded-credential: hardcoded-credential detected."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"k8s/temp-will-delete-soon/mssql/step.txt"},"region":{"startLine":6}}}],"partialFingerprints":{"codehealthFindingId/v1":"fdf3f1f7ade0fba090ca8325bb05e795bfa433b7ab93e84943aea56d8f1e4598"}},{"ruleId":"D13","level":"error","message":{"text":"Leaked secret: hardcoded-credential: hardcoded-credential detected."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"k8s/temp-will-delete-soon/mssql/mssql-secret.yaml"},"region":{"startLine":8}}}],"partialFingerprints":{"codehealthFindingId/v1":"b27b89101f5b09edab17c8110d2e36b5898e8c9ac39799f5d5123243a0840226"}},{"ruleId":"D13","level":"error","message":{"text":"Leaked secret: hardcoded-credential: hardcoded-credential detected."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/FlightAvailability/RestAirline.FlightAvailability.Domain/EventSourcing/EventStoreContext.cs"},"region":{"startLine":25}}}],"partialFingerprints":{"codehealthFindingId/v1":"25e7c865152a481d0d2d03e371ae5852f01c8ab50e1e00538e68e10c524d8a8f"}},{"ruleId":"D13","level":"error","message":{"text":"Leaked secret: hardcoded-credential: hardcoded-credential detected."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/Booking/RestAirline.Booking.ReadModel.EntityFramework/DBContext/RestAirlineReadModelContext.cs"},"region":{"startLine":46}}}],"partialFingerprints":{"codehealthFindingId/v1":"6754208f32e7bc655f9f1297f13f375e122ab103bb77761d0ceb44ffc63f6f21"}},{"ruleId":"D13","level":"error","message":{"text":"Leaked secret: hardcoded-credential: hardcoded-credential detected."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/Booking/RestAirline.Booking.Domain/EventSourcing/EventStoreContext.cs"},"region":{"startLine":26}}}],"partialFingerprints":{"codehealthFindingId/v1":"5fc720ff1c9e8a5afb4fea76ab4368ce60727f3e09c075d06ce43efd64cb1b90"}},{"ruleId":"D16","level":"note","message":{"text":"Small-team knowledge concentration: 0 file(s) are concentrated to one author \u2014 the ambient state with 2 active author(s), not 0 separate risks. The signal becomes meaningful as ownership spreads; no per-file action implied now."},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"8aa75b6daa18f1b578387fa04036c50b3163d47f957c8f5601bf083ed4489b0c"}},{"ruleId":"D17","level":"note","message":{"text":"ObsoleteWithoutCallers: [Obsolete] .ctor"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/Booking/RestAirline.Booking.Api/Resources/Booking/BookingResource.cs"},"region":{"startLine":15}}}],"partialFingerprints":{"codehealthFindingId/v1":"efd0630713afeb0c7099cb8e0ab3fcd86e65873916418bee2be8aff13319fd69"}},{"ruleId":"D17","level":"note","message":{"text":"ObsoleteWithoutCallers: [Obsolete] .ctor"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/Booking/RestAirline.Booking.Api/Resources/Booking/BookingResource.cs"},"region":{"startLine":41}}}],"partialFingerprints":{"codehealthFindingId/v1":"efd0630713afeb0c7099cb8e0ab3fcd86e65873916418bee2be8aff13319fd69"}},{"ruleId":"D17","level":"note","message":{"text":"ObsoleteWithoutCallers: [Obsolete] .ctor"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/Booking/RestAirline.Booking.Api/Resources/Booking/Journey/JourneysSelectedResource.cs"},"region":{"startLine":14}}}],"partialFingerprints":{"codehealthFindingId/v1":"d988e7a46a25d72dd50cfdfd0f9e2d77b0fe6baf0d21aa7aa9f0e7e8f4f08a0d"}},{"ruleId":"D17","level":"note","message":{"text":"ObsoleteWithoutCallers: [Obsolete] .ctor"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/Booking/RestAirline.Booking.Api/Resources/Booking/Journey/JourneysSelectedResource.cs"},"region":{"startLine":36}}}],"partialFingerprints":{"codehealthFindingId/v1":"d988e7a46a25d72dd50cfdfd0f9e2d77b0fe6baf0d21aa7aa9f0e7e8f4f08a0d"}},{"ruleId":"D17","level":"note","message":{"text":"ObsoleteWithoutCallers: [Obsolete] .ctor"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/Booking/RestAirline.Booking.Api/Resources/Booking/Journey/JourneysSelectedResource.cs"},"region":{"startLine":58}}}],"partialFingerprints":{"codehealthFindingId/v1":"d988e7a46a25d72dd50cfdfd0f9e2d77b0fe6baf0d21aa7aa9f0e7e8f4f08a0d"}},{"ruleId":"D17","level":"note","message":{"text":"ObsoleteWithoutCallers: [Obsolete] .ctor"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/Booking/RestAirline.Booking.Api/Resources/RestAirlineHomeResource.cs"},"region":{"startLine":12}}}],"partialFingerprints":{"codehealthFindingId/v1":"db7ead3da1eaa83985bdc6c9a4b9de31d3467131f3d5cedc4bdfbe83cefd9f24"}},{"ruleId":"D17","level":"note","message":{"text":"ObsoleteWithoutCallers: [Obsolete] .ctor"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/Booking/RestAirline.Booking.Api/Resources/RestAirlineHomeResource.cs"},"region":{"startLine":32}}}],"partialFingerprints":{"codehealthFindingId/v1":"db7ead3da1eaa83985bdc6c9a4b9de31d3467131f3d5cedc4bdfbe83cefd9f24"}},{"ruleId":"D17","level":"note","message":{"text":"ObsoleteWithoutCallers: [Obsolete] .ctor"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/Booking/RestAirline.Booking.Api/Resources/RestAirlineHomeResource.cs"},"region":{"startLine":50}}}],"partialFingerprints":{"codehealthFindingId/v1":"db7ead3da1eaa83985bdc6c9a4b9de31d3467131f3d5cedc4bdfbe83cefd9f24"}},{"ruleId":"D17","level":"note","message":{"text":"ObsoleteWithoutCallers: [Obsolete] .ctor"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/Booking/RestAirline.Booking.Commands/Passenger/AddPassengerCommand.cs"},"region":{"startLine":18}}}],"partialFingerprints":{"codehealthFindingId/v1":"3f70c689fadb33a1fe0bbf427d174042f58f776a9b14edbd02d4eb19d52f7ee2"}},{"ruleId":"D17","level":"note","message":{"text":"ObsoleteWithoutCallers: [Obsolete] .ctor"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/FlightAvailability/RestAirline.FlightAvailability.Api/Resources/FlightAvailabilityHomeResource.cs"},"region":{"startLine":10}}}],"partialFingerprints":{"codehealthFindingId/v1":"32487a2ea9fe875afcb8f11ff4db5959acfa9e6c15e02b4992bab964c7310d54"}},{"ruleId":"D17","level":"note","message":{"text":"ObsoleteWithoutCallers: [Obsolete] .ctor"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/FlightAvailability/RestAirline.FlightAvailability.Api/Resources/FlightAvailabilityHomeResource.cs"},"region":{"startLine":28}}}],"partialFingerprints":{"codehealthFindingId/v1":"32487a2ea9fe875afcb8f11ff4db5959acfa9e6c15e02b4992bab964c7310d54"}},{"ruleId":"D17","level":"note","message":{"text":"ObsoleteWithoutCallers: [Obsolete] .ctor"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/FlightAvailability/RestAirline.FlightAvailability.Api/Resources/FlightAvailabilityHomeResource.cs"},"region":{"startLine":45}}}],"partialFingerprints":{"codehealthFindingId/v1":"32487a2ea9fe875afcb8f11ff4db5959acfa9e6c15e02b4992bab964c7310d54"}},{"ruleId":"D17","level":"note","message":{"text":"ObsoleteWithoutCallers: [Obsolete] .ctor"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/FlightAvailability/RestAirline.FlightAvailability.Api/Resources/FlightAvailabilityResource.cs"},"region":{"startLine":12}}}],"partialFingerprints":{"codehealthFindingId/v1":"3cb13d944feb2504db61ce5d7454e5dd72959e04843f0b8c7eeea97050d16ea2"}},{"ruleId":"D17","level":"note","message":{"text":"ObsoleteWithoutCallers: [Obsolete] .ctor"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/FlightAvailability/RestAirline.FlightAvailability.Api/Resources/FlightAvailabilityResource.cs"},"region":{"startLine":32}}}],"partialFingerprints":{"codehealthFindingId/v1":"3cb13d944feb2504db61ce5d7454e5dd72959e04843f0b8c7eeea97050d16ea2"}},{"ruleId":"D17","level":"note","message":{"text":"ObsoleteWithoutCallers: [Obsolete] .ctor"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/FlightAvailability/RestAirline.FlightAvailability.Api/Resources/FlightAvailabilityResource.cs"},"region":{"startLine":48}}}],"partialFingerprints":{"codehealthFindingId/v1":"3cb13d944feb2504db61ce5d7454e5dd72959e04843f0b8c7eeea97050d16ea2"}},{"ruleId":"D17","level":"note","message":{"text":"ObsoleteWithoutCallers: [Obsolete] .ctor"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/Shared/RestAirline.Web/Hypermedia/Link.cs"},"region":{"startLine":9}}}],"partialFingerprints":{"codehealthFindingId/v1":"1932df720e6fbd31c93e3343ba84c6083ee2b3824c3b7bfa2202895bddfc06a4"}},{"ruleId":"D17","level":"warning","message":{"text":"TodoComment: //TODO: Not sure why there is not element in passenger list \u2014 source code is not a task system: move the work to your tracker and leave a reference instead (e.g. \u0060// REF: PROJ-123\u0060), so the task is planned where tasks live and the ticket links back to the code."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/Booking/RestAirline.Booking.ReadModel.EntityFramework/BookingReadModel.cs"},"region":{"startLine":54}}}],"partialFingerprints":{"codehealthFindingId/v1":"8ce65b0b15dfd0eee3a1b2b638c8b0872db9e9a7975de54d180604d4952a7ac5"}},{"ruleId":"D17","level":"warning","message":{"text":"CommentedOutCode: 3 consecutive commented-code lines"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/Shared/RestAirline.Web/Hypermedia/TypedUrlHelper.cs"},"region":{"startLine":18}}}],"partialFingerprints":{"codehealthFindingId/v1":"d3cc9fddaa8c5278943ddbf51856b0327ce7a0ed2832698097dc32da3e54e4e3"}},{"ruleId":"D17","level":"error","message":{"text":"NoWarnInCsproj: 1591"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/FlightAvailability/RestAirline.FlightAvailability.Api/RestAirline.FlightAvailability.Api.csproj"},"region":{"startLine":41}}}],"partialFingerprints":{"codehealthFindingId/v1":"1f6091d5fe3305cd196740c4a3eee5989e7d46e9da4c9ae4fe91c2426eca1ae4"}},{"ruleId":"D17","level":"error","message":{"text":"NoWarnInCsproj: 1591"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/Booking/RestAirline.Booking.Api/RestAirline.Booking.Api.csproj"},"region":{"startLine":42}}}],"partialFingerprints":{"codehealthFindingId/v1":"a6b20e162562e560767f7cc4fe418bf258587f11f4fa924e6f73e973addeb492"}},{"ruleId":"D18","level":"note","message":{"text":"Shell project: docker-compose: \u0060docker-compose\u0060 contributes only 0 significant line(s) \u2014 an empty/placeholder project is structural noise. Remove it or fold its contents into a real project."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docker-compose/docker-compose.csproj"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"6e71c73333466cec9cf912875fa86d189f58a24a7f952af89114b10667966886"}},{"ruleId":"D18","level":"note","message":{"text":"Thin analysable surface across projects: 10 project(s) carry only a thin slice of real code (e.g. \u0060RestAirline.FlightAvailability.Queries.Elasticsearch\u0060 with 14 significant line(s)). The mean analysable-surface weight is 84 %, lowering Solution Shape by about 1.3 point(s). Consolidate thin projects or grow them into substantial, well-scoped assemblies."},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"dd0b92fd965c2065080f16843920964ee00f7696ea03d87cdf61aed4cd2c746a"}},{"ruleId":"D20","level":"note","message":{"text":"No ADRs found: No ADRs found at common paths; consider documenting architectural decisions in Docs/ADL/ or similar."},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"d2bea044ff79d7d275f5a91a6e2f548586178eaf480274c33960ad020c854631"}},{"ruleId":"D21","level":"note","message":{"text":"Inconsistent naming for the read model of a Flight. Some symbols use the prefix \u0027Flight\u0027 directly (e.g., \u0060Flight.Id\u0060, \u0060Flight.ArriveStation\u0060), while others use a nested structure or different naming convention (e.g., \u0060Journey.Flight\u0060, \u0060Flight.Aircraft\u0060). Specifically, \u0060RestAirline.ReadModel.MongoDb.Booking.Flight\u0060 is used for some properties, while \u0060RestAirline.ReadModel.MongoDb.Booking.Journey.Flight\u0060 is used for others, creating ambiguity about whether the property belongs to a Flight or a Journey.: Standardize the naming of the Flight read model. If a Flight is part of a Journey, consider using \u0060Journey.Flight\u0060 consistently or flatten the structure to \u0060Flight.*\u0060 if the context allows. Ensure all properties related to a Flight in the read model follow the same path convention. (symbols: RestAirline.ReadModel.MongoDb.Booking.Journey.Flight, RestAirline.ReadModel.MongoDb.Booking.Flight.Id, RestAirline.ReadModel.MongoDb.Booking.Flight.ArriveStation, RestAirline.ReadModel.MongoDb.Booking.Flight.Aircraft, RestAirline.ReadModel.MongoDb.Booking.Flight.DepartureDate, RestAirline.ReadModel.MongoDb.Booking.Journey.DepartureStation, RestAirline.ReadModel.MongoDb.BookingReadModel.Passengers, RestAirline.ReadModel.MongoDb.Booking.Flight.ArriveDate, RestAirline.ReadModel.MongoDb.Booking.Flight.DepartureDate, RestAirline.ReadModel.MongoDb.Booking.Flight.Aircraft, RestAirline.ReadModel.MongoDb.Booking.Journey.Flight, RestAirline.ReadModel.MongoDb.Booking.Flight.ArriveStation, RestAirline.ReadModel.MongoDb.Booking.Flight.Aircraft, RestAirline.ReadModel.MongoDb.Booking.Flight.DepartureDate, RestAirline.ReadModel.MongoDb.Booking.Journey.DepartureStation, RestAirline.ReadModel.MongoDb.BookingReadModel.Passengers)"},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"60f16d26a84e9b972681252812791055aab4567cc44203080e4c1a98e914f106"}},{"ruleId":"D21","level":"note","message":{"text":"Inconsistent naming for the read model of a Flight in EntityFramework. Some properties are under \u0060Booking.Flight.*\u0060 while others are under \u0060Booking.Journey.Flight\u0060 or \u0060Booking.Flight.Journey\u0060. This creates confusion about the hierarchy and relationship of the Flight data in the read model.: Align the naming convention for Flight in the EntityFramework read model. Choose either \u0060Booking.Flight.*\u0060 or \u0060Booking.Journey.Flight.*\u0060 consistently. (symbols: RestAirline.ReadModel.EntityFramework.Booking.Journey.Flight, RestAirline.ReadModel.EntityFramework.Booking.Flight.Aircraft, RestAirline.ReadModel.EntityFramework.Booking.Flight.Journey, RestAirline.ReadModel.EntityFramework.Booking.Flight.Aircraft, RestAirline.ReadModel.EntityFramework.Booking.Flight.Aircraft)"},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"466e7e14526a4674812b0cdd4915e06fac6f49d044e8c0457f1c4326258b19a4"}},{"ruleId":"D21","level":"note","message":{"text":"Inconsistent naming for the read model of a Flight in Elasticsearch. Some properties are under \u0060Booking.Flight.*\u0060 while others are under \u0060Booking.Passenger.*\u0060 or \u0060Booking.Flight.ArriveStation\u0060. This creates ambiguity about the structure of the Flight data in the read model.: Standardize the naming of the Flight read model in Elasticsearch. Ensure all Flight-related properties follow the same path convention, e.g., \u0060Booking.Flight.*\u0060. (symbols: RestAirline.ReadModel.Elasticsearch.Booking.Flight.Number, RestAirline.ReadModel.Elasticsearch.Booking.Passenger.Email, RestAirline.ReadModel.Elasticsearch.Booking.Flight.ArriveStation, RestAirline.ReadModel.Elasticsearch.Booking.Flight.ArriveStation)"},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"60e0d26a732e41e7004dc97b4572684be7762211a3c9bf995037efc2e0ba6c0b"}},{"ruleId":"D21","level":"note","message":{"text":"Inconsistent naming for the read model of a Flight in In-Memory storage. Some properties are under \u0060Booking.Flight.*\u0060 while others are under \u0060Booking.Journey.Flight\u0060. This creates ambiguity about the structure of the Flight data in the read model.: Standardize the naming of the Flight read model in In-Memory storage. Ensure all Flight-related properties follow the same path convention, e.g., \u0060Booking.Flight.*\u0060. (symbols: RestAirline.ReadModel.InMemory.Booking.Journey.Flight, RestAirline.ReadModel.InMemory.Booking.Flight.ArriveDate, RestAirline.ReadModel.InMemory.Booking.Flight.DepartureDate, RestAirline.ReadModel.InMemory.Booking.Flight.ArriveDate, RestAirline.ReadModel.InMemory.Booking.Flight.DepartureDate)"},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"613d5ab3b64c78f41c54b55989b5da8735d791948807509e16cfa672de51537d"}},{"ruleId":"D21","level":"note","message":{"text":"Duplicate property names for Flight.Aircraft in MongoDb read model, which may indicate a copy-paste error or redundant definition.: Remove duplicate definitions or ensure each property is defined only once. (symbols: RestAirline.ReadModel.MongoDb.Booking.Flight.Aircraft, RestAirline.ReadModel.MongoDb.Booking.Flight.Aircraft)"},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"45e4e06d632817a8fbd7d27347530fc679b7b960e85a208162eade3de4f577ba"}},{"ruleId":"D23","level":"note","message":{"text":"Bounded contexts not declared: At 4548 LoC spread over 37 projects the codebase is large and multi-module, so explicit bounded contexts are needed. Declare architecture.contexts (\u22652) in config to assess cross-boundary type coupling."},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"1c7e276c9c682731f01819ed5378b90ca320cde1b583c90920172911598362b3"}},{"ruleId":"D24","level":"note","message":{"text":"redundant comment: \u0022.RegisterModule\u003CEntityFrameworkQueryHandlersModule\u003E();\u0022 \u2014 delete - the Module registration is self-evident"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/Booking/RestAirline.Booking.Api/ApplicationBootstrap.cs"},"region":{"startLine":61}}}],"partialFingerprints":{"codehealthFindingId/v1":"dd1a7aac85507a3d9b8265cbe3acd543dd4aa3059eb8d246c2a3aad1a88c6a94"}},{"ruleId":"D30","level":"error","message":{"text":"Critical CVE: System.Text.Encodings.Web 4.3.1: System.Text.Encodings.Web 4.3.1 (transitive) has a Critical advisory; affects 3 projects \u2014 one upgrade fixes all. https://github.com/advisories/[GHSA redacted]"},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"9a8b3d43577586b9b83453948bf5580a85158ab4d0a5040f5622cd32b7a13586"}},{"ruleId":"D30","level":"error","message":{"text":"Critical CVE: System.Text.Encodings.Web 4.7.0: System.Text.Encodings.Web 4.7.0 (transitive) has a Critical advisory; affects 20 projects \u2014 one upgrade fixes all. https://github.com/advisories/[GHSA redacted]"},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"42b0ea1af89d010656c957ad070f53506bd3a354dfcb9fd0797ed1d946d2bcd3"}},{"ruleId":"D30","level":"error","message":{"text":"High CVE: Microsoft.AspNetCore.Http 1.0.2: Microsoft.AspNetCore.Http 1.0.2 (transitive) has a High advisory; affects 3 projects \u2014 one upgrade fixes all. https://github.com/advisories/[GHSA redacted]"},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"2012086bdb0574a6e80c3eef05bd3c490c6d3fc7b57d1f1c524cdead99f0cefe"}},{"ruleId":"D30","level":"error","message":{"text":"High CVE: Microsoft.Data.SqlClient 1.0.19269.1: Microsoft.Data.SqlClient 1.0.19269.1 (transitive) has a High advisory; affects 34 projects \u2014 one upgrade fixes all. https://github.com/advisories/[GHSA redacted]"},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"680cf4fcf72026193c8be5523289aa9dd5c7a2cc432f1b80fc7a28a95a9aeb18"}},{"ruleId":"D30","level":"error","message":{"text":"High CVE: MongoDB.Driver 2.10.1: MongoDB.Driver 2.10.1 (transitive) has a High advisory; affects 6 projects \u2014 one upgrade fixes all. https://github.com/advisories/[GHSA redacted]"},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"5df43c618b3c82ed0c5b71943fccd21f6f8e8fe0bb3207aadd24ae50c5914b25"}},{"ruleId":"D30","level":"error","message":{"text":"High CVE: Newtonsoft.Json 12.0.3: Newtonsoft.Json 12.0.3 (transitive) has a High advisory; affects 36 projects \u2014 one upgrade fixes all. https://github.com/advisories/[GHSA redacted]"},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"9ae15deacd8d65304febbc4286307d74123e6c6fe9b7a2d543fbda4f0528528a"}},{"ruleId":"D30","level":"error","message":{"text":"High CVE: System.Data.SqlClient 4.7.0: System.Data.SqlClient 4.7.0 (transitive) has a High advisory; affects 3 projects \u2014 one upgrade fixes all. https://github.com/advisories/[GHSA redacted]"},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"bb969ce7284783fdc6f46250d4a949dc4eafb7c7bb1f7179b88add5a7464b12d"}},{"ruleId":"D30","level":"error","message":{"text":"High CVE: System.Net.Http 4.3.0: System.Net.Http 4.3.0 (transitive) has a High advisory; affects 35 projects \u2014 one upgrade fixes all. https://github.com/advisories/[GHSA redacted]"},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"7cf85abffe732f2645ef95a624d6badc26f0263616284d6a4cc46ca8e983031d"}},{"ruleId":"D30","level":"error","message":{"text":"High CVE: System.Text.RegularExpressions 4.3.0: System.Text.RegularExpressions 4.3.0 (transitive) has a High advisory; affects 35 projects \u2014 one upgrade fixes all. https://github.com/advisories/[GHSA redacted]"},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"b96b7173c4377d5bea4d6fd7b52323631c631c44172b743bec6f266c10a4e538"}},{"ruleId":"D30","level":"error","message":{"text":"High CVE: MongoDB.Driver 2.7.2: MongoDB.Driver 2.7.2 (transitive) has a High advisory; affects 29 projects \u2014 one upgrade fixes all. https://github.com/advisories/[GHSA redacted]"},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"9ec405a2373eb6d27cf6ed469b0b0502edbcb0df78c686a2c351bea03a2ef5cf"}},{"ruleId":"D30","level":"error","message":{"text":"High CVE: System.Net.Security 4.0.0: System.Net.Security 4.0.0 (transitive) has a High advisory; affects 29 projects \u2014 one upgrade fixes all. https://github.com/advisories/[GHSA redacted]"},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"7162cd2b13916667377362733b086e6f99f2c2c920f0f78239f8401e6f92f351"}},{"ruleId":"D30","level":"error","message":{"text":"High CVE: System.Net.Security 4.0.0: System.Net.Security 4.0.0 (transitive) has a High advisory; affects 29 projects \u2014 one upgrade fixes all. https://github.com/advisories/[GHSA redacted]"},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"7162cd2b13916667377362733b086e6f99f2c2c920f0f78239f8401e6f92f351"}},{"ruleId":"D30","level":"warning","message":{"text":"Medium CVE: Microsoft.Data.SqlClient 1.0.19269.1: Microsoft.Data.SqlClient 1.0.19269.1 (transitive) has a Medium advisory; affects 34 projects \u2014 one upgrade fixes all. https://github.com/advisories/[GHSA redacted]"},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"4a355c66a5a0bcac48f1da7971dcaf09a7da4f662a43818ff5e8844988d36b0f"}},{"ruleId":"D30","level":"warning","message":{"text":"Medium CVE: SharpCompress 0.23.0: SharpCompress 0.23.0 (transitive) has a Medium advisory; affects 6 projects \u2014 one upgrade fixes all. https://github.com/advisories/[GHSA redacted]"},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"d0a77efe3b4e647fe8429610599281dc3edd0b6e584000a679d33e8d63e029ca"}},{"ruleId":"D30","level":"warning","message":{"text":"Medium CVE: SharpCompress 0.23.0: SharpCompress 0.23.0 (transitive) has a Medium advisory; affects 6 projects \u2014 one upgrade fixes all. https://github.com/advisories/[GHSA redacted]"},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"d0a77efe3b4e647fe8429610599281dc3edd0b6e584000a679d33e8d63e029ca"}},{"ruleId":"D30","level":"warning","message":{"text":"Medium CVE: Swashbuckle.AspNetCore.SwaggerUI 5.0.0: Swashbuckle.AspNetCore.SwaggerUI 5.0.0 (transitive) has a Medium advisory; affects 3 projects \u2014 one upgrade fixes all. https://github.com/advisories/[GHSA redacted]"},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"822c8066e81730d2ceb8ac1b2c4a73dda6b5bf562f807981ba64cca3b3a5bbfb"}},{"ruleId":"D30","level":"warning","message":{"text":"Medium CVE: System.Data.SqlClient 4.7.0: System.Data.SqlClient 4.7.0 (transitive) has a Medium advisory; affects 3 projects \u2014 one upgrade fixes all. https://github.com/advisories/[GHSA redacted]"},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"6ab1b9283314cdd2ca3ada4afa0d58b33a4e51a3c4fe3857b8230642fc6e1992"}},{"ruleId":"D30","level":"warning","message":{"text":"Medium CVE: System.Net.Security 4.0.0: System.Net.Security 4.0.0 (transitive) has a Medium advisory; affects 29 projects \u2014 one upgrade fixes all. https://github.com/advisories/[GHSA redacted]"},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"5938d98cb26d990980d373487cd250d1ae4d36cb2b6a5f12fc5dcfbd5bae4235"}},{"ruleId":"D30","level":"warning","message":{"text":"Medium CVE: System.Net.Security 4.0.0: System.Net.Security 4.0.0 (transitive) has a Medium advisory; affects 29 projects \u2014 one upgrade fixes all. https://github.com/advisories/[GHSA redacted]"},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"5938d98cb26d990980d373487cd250d1ae4d36cb2b6a5f12fc5dcfbd5bae4235"}},{"ruleId":"D31","level":"error","message":{"text":"High IaC: KSV-0109: ConfigMap with secrets"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"k8s/temp-will-delete-soon/conf_local.yaml"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"167c56b9c3f2370ce8d8bb5205eab9810e3a932a6a2cd64b19aa2e3d482156bf"}},{"ruleId":"D31","level":"error","message":{"text":"High IaC: KSV-0014: Root file system is not read-only"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"k8s/temp-will-delete-soon/mssql/sql-deployment.yaml"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"f5281a1de4d7d619239a03e17b55b714c129432cddc46194ed7f8f75371e388d"}},{"ruleId":"D31","level":"error","message":{"text":"High IaC: KSV-0118: Default security context configured"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"k8s/temp-will-delete-soon/mssql/sql-deployment.yaml"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"8fa56deb9c3d6f66ce684543caedf109bb36b83609164a9ea3228e55cc17df55"}},{"ruleId":"D31","level":"error","message":{"text":"High IaC: KSV-0118: Default security context configured"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"k8s/temp-will-delete-soon/mssql/sql-deployment.yaml"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"8fa56deb9c3d6f66ce684543caedf109bb36b83609164a9ea3228e55cc17df55"}},{"ruleId":"D31","level":"error","message":{"text":"High IaC: KSV-0014: Root file system is not read-only"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"k8s/temp-will-delete-soon/restairlineapi.yaml"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"62bee4b0d570e44a6440492ae710b89923004c387eb726006b24e968459900a1"}},{"ruleId":"D31","level":"error","message":{"text":"High IaC: KSV-0118: Default security context configured"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"k8s/temp-will-delete-soon/restairlineapi.yaml"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"e95d280d0791117099ead0e5455e9acafb2bd981cf5c5552d6c530b208fd453b"}},{"ruleId":"D31","level":"error","message":{"text":"High IaC: KSV-0118: Default security context configured"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"k8s/temp-will-delete-soon/restairlineapi.yaml"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"e95d280d0791117099ead0e5455e9acafb2bd981cf5c5552d6c530b208fd453b"}},{"ruleId":"D31","level":"error","message":{"text":"High IaC: KSV-0014: Root file system is not read-only"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"k8s/temp-will-delete-soon/sql-data.yaml"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"2ed3fcdf4b371e9415a1d31688703ca08a78c5933b026f0b3f1af2aa4d33f4ec"}},{"ruleId":"D31","level":"error","message":{"text":"High IaC: KSV-0118: Default security context configured"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"k8s/temp-will-delete-soon/sql-data.yaml"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"793e463efa20926f03447fba52f6fbfcea5f1b110117b617a7af35419f2b585e"}},{"ruleId":"D31","level":"error","message":{"text":"High IaC: KSV-0118: Default security context configured"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"k8s/temp-will-delete-soon/sql-data.yaml"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"793e463efa20926f03447fba52f6fbfcea5f1b110117b617a7af35419f2b585e"}},{"ruleId":"D31","level":"error","message":{"text":"High IaC: DS-0002: Image user should not be \u0027root\u0027"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/Booking/RestAirline.Booking.Api/Dockerfile"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"633931b87ebd3b65ca896e4f06df20044a8440271a36ff9eb8c55d2741f897d2"}},{"ruleId":"D31","level":"error","message":{"text":"High IaC: DS-0009: WORKDIR path not absolute"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/Booking/RestAirline.Booking.Api/Dockerfile"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"e9a9a378ab94df5f19152a1797edcf1e524ae0f3c8d4600c8116dfe3d3ed2ae6"}},{"ruleId":"D31","level":"error","message":{"text":"High IaC: DS-0002: Image user should not be \u0027root\u0027"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/FlightAvailability/RestAirline.FlightAvailability.Api/Dockerfile"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"f6d39531f5c10962fdd92199eae0220a69762284b82c11f7205f5d8ce4715548"}},{"ruleId":"D31","level":"error","message":{"text":"High IaC: DS-0009: WORKDIR path not absolute"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/FlightAvailability/RestAirline.FlightAvailability.Api/Dockerfile"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"f5d3cf786e5fb03fe230a8da9539d49bc9dc7089b46820c5cfad593385936271"}},{"ruleId":"D31","level":"error","message":{"text":"High IaC: AWS-0030: ECR repository has image scans disabled."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"terraform/04-ecr/main.tf"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"5daca1286fbf8edf3e35324c2e27751fe45715051839df2d3d684a82a5804ead"}},{"ruleId":"D31","level":"error","message":{"text":"High IaC: AWS-0031: ECR images tags shouldn\u0027t be mutable."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"terraform/04-ecr/main.tf"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"c4c10d6e5ca761c0e2e57e0f2e31a548054bbbc18f8338bdcef5d8ced0416dcc"}},{"ruleId":"D31","level":"error","message":{"text":"High IaC: AWS-0032: ECR repository policy must block public access"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"terraform/04-ecr/main.tf"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"3e72861fa4624f782038dc120584b729f7136c28619a9087bf69995282803e17"}},{"ruleId":"D31","level":"error","message":{"text":"High IaC: AWS-0011: CloudFront distribution does not have a WAF in front."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"terraform/07-cloud-front/main.tf"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"e8e7f7d0de17316cdcbbd0705fbd5171c375cf73c8fc589256710a98799a6607"}},{"ruleId":"D31","level":"error","message":{"text":"High IaC: AWS-0013: CloudFront distribution uses outdated SSL/TLS protocols."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"terraform/07-cloud-front/main.tf"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"23ad480cc4f6c045c717e661bb8b612259ff984f60afca417a392760002bbf25"}},{"ruleId":"D31","level":"error","message":{"text":"High IaC: AWS-0028: aws_instance should activate session tokens for Instance Metadata Service."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"terraform/elasticsearch/main.tf"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"ea6f76b840c5de69f4faa053196fbddf027c5fcc1ea5e7766add20068b9de2e0"}},{"ruleId":"D31","level":"error","message":{"text":"High IaC: AWS-0131: Instance with unencrypted block device."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"terraform/elasticsearch/main.tf"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"587114885a9aa7ec95ea6a5e1753c3501538bd1e1286871cbddd25fc11fc7995"}},{"ruleId":"D31","level":"warning","message":{"text":"Medium IaC: KSV-0001: Can elevate its own privileges"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"k8s/temp-will-delete-soon/mssql/sql-deployment.yaml"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"82403ad5fbf09614a91bb80f14ab2efb9d237cc516ecd6c882705c85a3c92fea"}},{"ruleId":"D31","level":"warning","message":{"text":"Medium IaC: KSV-0012: Runs as root user"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"k8s/temp-will-delete-soon/mssql/sql-deployment.yaml"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"77da7159d03ffb5343d6511730586de0f5626856f2e8150a6a0eb90e826b1cc3"}},{"ruleId":"D31","level":"warning","message":{"text":"Medium IaC: KSV-0104: Seccomp policies disabled"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"k8s/temp-will-delete-soon/mssql/sql-deployment.yaml"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"a5db6a8ded2c1fd480f7464c4425ed8bfb05d5354f7a509da5c719d889130775"}},{"ruleId":"D31","level":"warning","message":{"text":"Medium IaC: KSV-0125: Restrict container images to trusted registries"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"k8s/temp-will-delete-soon/mssql/sql-deployment.yaml"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"6cec366fd69b87cb4a8db45309ddde7a04a894b7cb580853b919a713ab8a87f4"}},{"ruleId":"D31","level":"warning","message":{"text":"Medium IaC: KSV-0001: Can elevate its own privileges"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"k8s/temp-will-delete-soon/restairlineapi.yaml"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"a812b70bcb7770698b610837b894fe0d45bf690642d4430696ecb4e9eba90f4e"}},{"ruleId":"D31","level":"warning","message":{"text":"Medium IaC: KSV-0012: Runs as root user"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"k8s/temp-will-delete-soon/restairlineapi.yaml"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"eaaf219d17af8a9125af251609fbd776db814a1fdffbc1fd867570086506d1f8"}},{"ruleId":"D31","level":"warning","message":{"text":"Medium IaC: KSV-0104: Seccomp policies disabled"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"k8s/temp-will-delete-soon/restairlineapi.yaml"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"ad6daf935f67db1f2b3f94a2362fcfd5b5dc2f1414911f6f31c1f5a8e60172bc"}},{"ruleId":"D31","level":"warning","message":{"text":"Medium IaC: KSV-0117: Prevent binding to privileged ports"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"k8s/temp-will-delete-soon/restairlineapi.yaml"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"6861e74302d46aa100321f485e854252baccfdc0b81b02397c810169aa6e952a"}},{"ruleId":"D31","level":"warning","message":{"text":"Medium IaC: KSV-0001: Can elevate its own privileges"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"k8s/temp-will-delete-soon/sql-data.yaml"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"4784a7247e7768854f17d5bf34d81f92a36d82bda386a0b6d98821acfd80676c"}},{"ruleId":"D31","level":"warning","message":{"text":"Medium IaC: KSV-0012: Runs as root user"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"k8s/temp-will-delete-soon/sql-data.yaml"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"b46ee1724660327dede8b5498bc6d6f69bfaf71110cdea0af935d45aabf899a5"}},{"ruleId":"D31","level":"warning","message":{"text":"Medium IaC: KSV-0104: Seccomp policies disabled"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"k8s/temp-will-delete-soon/sql-data.yaml"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"220df83c98cb103a070e660b7c33a0794842e98a2ec9c98b622970c31f08c96b"}},{"ruleId":"D31","level":"warning","message":{"text":"Medium IaC: KSV-0125: Restrict container images to trusted registries"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"k8s/temp-will-delete-soon/sql-data.yaml"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"3ce5f49a34f72b581e55c8517c407ce136c1e863c0901f41a1e91ee6d61d633d"}},{"ruleId":"D31","level":"warning","message":{"text":"Medium IaC: KSV-0111: User with admin access"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"terraform/05-eks/kubernetes-dashboard-admin.rbac.yaml"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"03fa6728cdd9d9628810127d55b63a35ccb8f49bb1ea6b67834e03161188ee79"}},{"ruleId":"D31","level":"warning","message":{"text":"Medium IaC: AWS-0010: Cloudfront distribution should have Access Logging configured"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"terraform/07-cloud-front/main.tf"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"f9fbcd16b25b8fcf80d477a1dad075ca2e962cd895b0d96b5071cab29956b8c9"}},{"ruleId":"D31","level":"note","message":{"text":"Low IaC: KSV-0003: Default capabilities: some containers do not drop all"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"k8s/temp-will-delete-soon/mssql/sql-deployment.yaml"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"bd3bd50d716212c4d433018a116d6f4bc1765cb3f9e9b580800ab6ffef81d04a"}},{"ruleId":"D31","level":"note","message":{"text":"Low IaC: KSV-0004: Default capabilities: some containers do not drop any"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"k8s/temp-will-delete-soon/mssql/sql-deployment.yaml"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"8fd09a0ee614a5cd7e1ea32bf29a56617f548f2aa513bf51ceba8de00a522e9a"}},{"ruleId":"D31","level":"note","message":{"text":"Low IaC: KSV-0011: CPU not limited"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"k8s/temp-will-delete-soon/mssql/sql-deployment.yaml"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"53a1bdcf9e33bb645c822ab45cd4f4adafa5860be5c12eb70951a0eab1838a72"}},{"ruleId":"D31","level":"note","message":{"text":"Low IaC: KSV-0015: CPU requests not specified"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"k8s/temp-will-delete-soon/mssql/sql-deployment.yaml"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"9ce66af2d5fd8ec56e132a01831c24eb9084800bc36b955c5179846f5f32ce01"}},{"ruleId":"D31","level":"note","message":{"text":"Low IaC: KSV-0016: Memory requests not specified"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"k8s/temp-will-delete-soon/mssql/sql-deployment.yaml"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"4b9e4c534d6f1a6fe60464c49f3cf7e3de677108478dab767d358f7b162836c2"}},{"ruleId":"D31","level":"note","message":{"text":"Low IaC: KSV-0018: Memory not limited"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"k8s/temp-will-delete-soon/mssql/sql-deployment.yaml"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"24ce85d3f71f9df41afe0ce8f35ba693b93c536405da3716cecbb316d996d2f3"}},{"ruleId":"D31","level":"note","message":{"text":"Low IaC: KSV-0020: Runs with UID \u003C= 10000"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"k8s/temp-will-delete-soon/mssql/sql-deployment.yaml"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"c8ad80d99ae79e10ac5b49b3c8856bce9a434857147a4afbaee2b1619d5e6375"}},{"ruleId":"D31","level":"note","message":{"text":"Low IaC: KSV-0021: Runs with GID \u003C= 10000"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"k8s/temp-will-delete-soon/mssql/sql-deployment.yaml"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"5070e3d11daf69dd331a34d180205f3abbb83f5ed2dfc0636c60199989cdcff7"}},{"ruleId":"D31","level":"note","message":{"text":"Low IaC: KSV-0030: Runtime/Default Seccomp profile not set"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"k8s/temp-will-delete-soon/mssql/sql-deployment.yaml"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"ab3072a9a25a9e35bb1b5207757e4f1bcd2c13633c93d8273721a8199b1d568e"}},{"ruleId":"D31","level":"note","message":{"text":"Low IaC: KSV-0106: Container capabilities must only include NET_BIND_SERVICE"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"k8s/temp-will-delete-soon/mssql/sql-deployment.yaml"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"f5a75d4f6e651a4dd1eab29f15cddc448eb77214db18304502514285f399bace"}},{"ruleId":"D31","level":"note","message":{"text":"Low IaC: KSV-0110: Workloads in the default namespace"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"k8s/temp-will-delete-soon/mssql/sql-deployment.yaml"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"55022cf846ecf6bb92ba6f390a472befa754ca5be114707b1eba825028b1708c"}},{"ruleId":"D31","level":"note","message":{"text":"Low IaC: KSV-0003: Default capabilities: some containers do not drop all"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"k8s/temp-will-delete-soon/restairlineapi.yaml"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"0b257e6cce88380d6ca1e3e3f9b70af77458218a617e0e86b55b663aebca4339"}},{"ruleId":"D31","level":"note","message":{"text":"Low IaC: KSV-0004: Default capabilities: some containers do not drop any"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"k8s/temp-will-delete-soon/restairlineapi.yaml"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"5f039b429cfcc61133abefb83fdb06d9f91a01aa12d042eadeb2ab1d71513bae"}},{"ruleId":"D31","level":"note","message":{"text":"Low IaC: KSV-0011: CPU not limited"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"k8s/temp-will-delete-soon/restairlineapi.yaml"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"04fbc9683976282b4d30d320ad76a6b97f84088929eba3e9a9c815a9ffa06292"}},{"ruleId":"D31","level":"note","message":{"text":"Low IaC: KSV-0015: CPU requests not specified"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"k8s/temp-will-delete-soon/restairlineapi.yaml"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"5c878f1375042bb384d19c2dd1016f06804cbf6a345b6e81fafa9cf17194377e"}},{"ruleId":"D34","level":"note","message":{"text":"Further orphaned files (smaller): 2 smaller file(s) also have no living knowledge \u2014 folded into the freshness score and metrics rather than listed individually (2 orphaned of 2 analysed files in total)."},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"ce861fd78f6935114d3a342cb90ad25870f984e1042954fcbbe27c0e23be3658"}}],"taxonomies":[{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d","organization":"MITRE","shortDescription":{"text":"The MITRE Common Weakness Enumeration (CWE)."},"taxa":[{"id":"CWE-1395","name":"Dependency on Vulnerable Third-Party Component"},{"id":"CWE-798","name":"Use of Hard-coded Credentials"}]}],"properties":{"codehealthPublication":{"public":true,"notice":"This is the PUBLIC form of this artifact. Findings are listed in full, but the details of SECURITY findings \u2014 which rule fired, in which file, on which line, and how to fix it \u2014 are deliberately withheld, and any secret-scanner results are excluded entirely. Where detail is absent here it was REMOVED FOR PUBLICATION; it is not missing from the analysis. The complete artifact is available from the repository owner.","securityFindingsRedacted":0,"secretScannerRunsExcluded":0}}}]}