[
  {
    "category": "security",
    "tool": "agent-audit",
    "rule": "AGENT-004",
    "severity": "HIGH",
    "confidence": "possible",
    "file": "C:\\Users\\Chris4K\\Projekte\\autoscan#scanners\\trufflehog_runner.py",
    "line": 47,
    "message": "[Hardcoded Credentials] Found Generic Secret/Password",
    "owasp": [
      "ASI-04"
    ],
    "remediation": "Use environment variables or a secrets manager",
    "score": 5
  },
  {
    "category": "security",
    "tool": "agent-audit",
    "rule": "AGENT-034",
    "severity": "HIGH",
    "confidence": "possible",
    "file": "C:\\Users\\Chris4K\\Projekte\\autoscan#serve_local_llm.py",
    "line": 51,
    "message": "[Tool Function Without Input Validation] A tool function accepts string or Any parameters without performing input validation in the function body. This enables tool misuse where attackers can pass malicious inputs to trigger unauthorized ac",
    "owasp": [
      "ASI-02"
    ],
    "remediation": "Add input validation at the start of tool functions. Use isinstance() checks, regex validation, or pydantic Field constraints to ensure inputs are safe before processing.",
    "score": 5
  },
  {
    "category": "performance",
    "tool": "Semgrep:Perf",
    "rule": "string-concat-in-loop",
    "severity": "WARNING",
    "confidence": "likely",
    "file": "C:\\Users\\Chris4K\\Projekte\\autoscan#scanners\\fickling_runner.py",
    "line": 24,
    "message": "String concatenation in loop is O(n^2) - use list + ''.join().",
    "owasp": [
      "UNMAPPED"
    ],
    "remediation": "Use ''.join(parts) or io.StringIO.",
    "score": 5
  },
  {
    "category": "performance",
    "tool": "Semgrep:Perf",
    "rule": "string-concat-in-loop",
    "severity": "WARNING",
    "confidence": "likely",
    "file": "C:\\Users\\Chris4K\\Projekte\\autoscan#scanners\\garak_runner.py",
    "line": 47,
    "message": "String concatenation in loop is O(n^2) - use list + ''.join().",
    "owasp": [
      "UNMAPPED"
    ],
    "remediation": "Use ''.join(parts) or io.StringIO.",
    "score": 5
  },
  {
    "category": "performance",
    "tool": "Semgrep:Perf",
    "rule": "string-concat-in-loop",
    "severity": "WARNING",
    "confidence": "likely",
    "file": "C:\\Users\\Chris4K\\Projekte\\autoscan#scanners\\garak_runner.py",
    "line": 48,
    "message": "String concatenation in loop is O(n^2) - use list + ''.join().",
    "owasp": [
      "UNMAPPED"
    ],
    "remediation": "Use ''.join(parts) or io.StringIO.",
    "score": 5
  },
  {
    "category": "performance",
    "tool": "Semgrep:Perf",
    "rule": "string-concat-in-loop",
    "severity": "WARNING",
    "confidence": "likely",
    "file": "C:\\Users\\Chris4K\\Projekte\\autoscan#scanners\\grype_runner.py",
    "line": 52,
    "message": "String concatenation in loop is O(n^2) - use list + ''.join().",
    "owasp": [
      "UNMAPPED"
    ],
    "remediation": "Use ''.join(parts) or io.StringIO.",
    "score": 5
  },
  {
    "category": "performance",
    "tool": "Semgrep:Perf",
    "rule": "string-concat-in-loop",
    "severity": "WARNING",
    "confidence": "likely",
    "file": "C:\\Users\\Chris4K\\Projekte\\autoscan#scanners\\guardrailsai_runner.py",
    "line": 36,
    "message": "String concatenation in loop is O(n^2) - use list + ''.join().",
    "owasp": [
      "UNMAPPED"
    ],
    "remediation": "Use ''.join(parts) or io.StringIO.",
    "score": 5
  },
  {
    "category": "performance",
    "tool": "Semgrep:Perf",
    "rule": "string-concat-in-loop",
    "severity": "WARNING",
    "confidence": "likely",
    "file": "C:\\Users\\Chris4K\\Projekte\\autoscan#scanners\\llmguard_runner.py",
    "line": 30,
    "message": "String concatenation in loop is O(n^2) - use list + ''.join().",
    "owasp": [
      "UNMAPPED"
    ],
    "remediation": "Use ''.join(parts) or io.StringIO.",
    "score": 5
  },
  {
    "category": "performance",
    "tool": "Semgrep:Perf",
    "rule": "string-concat-in-loop",
    "severity": "WARNING",
    "confidence": "likely",
    "file": "C:\\Users\\Chris4K\\Projekte\\autoscan#scanners\\llmguard_runner.py",
    "line": 31,
    "message": "String concatenation in loop is O(n^2) - use list + ''.join().",
    "owasp": [
      "UNMAPPED"
    ],
    "remediation": "Use ''.join(parts) or io.StringIO.",
    "score": 5
  },
  {
    "category": "performance",
    "tool": "Semgrep:Perf",
    "rule": "string-concat-in-loop",
    "severity": "WARNING",
    "confidence": "likely",
    "file": "C:\\Users\\Chris4K\\Projekte\\autoscan#scanners\\llmguard_runner.py",
    "line": 38,
    "message": "String concatenation in loop is O(n^2) - use list + ''.join().",
    "owasp": [
      "UNMAPPED"
    ],
    "remediation": "Use ''.join(parts) or io.StringIO.",
    "score": 5
  },
  {
    "category": "performance",
    "tool": "Semgrep:Perf",
    "rule": "string-concat-in-loop",
    "severity": "WARNING",
    "confidence": "likely",
    "file": "C:\\Users\\Chris4K\\Projekte\\autoscan#scanners\\llmguard_runner.py",
    "line": 39,
    "message": "String concatenation in loop is O(n^2) - use list + ''.join().",
    "owasp": [
      "UNMAPPED"
    ],
    "remediation": "Use ''.join(parts) or io.StringIO.",
    "score": 5
  },
  {
    "category": "performance",
    "tool": "Semgrep:Perf",
    "rule": "string-concat-in-loop",
    "severity": "WARNING",
    "confidence": "likely",
    "file": "C:\\Users\\Chris4K\\Projekte\\autoscan#scanners\\nemo_runner.py",
    "line": 27,
    "message": "String concatenation in loop is O(n^2) - use list + ''.join().",
    "owasp": [
      "UNMAPPED"
    ],
    "remediation": "Use ''.join(parts) or io.StringIO.",
    "score": 5
  },
  {
    "category": "performance",
    "tool": "Semgrep:Perf",
    "rule": "string-concat-in-loop",
    "severity": "WARNING",
    "confidence": "likely",
    "file": "C:\\Users\\Chris4K\\Projekte\\autoscan#scanners\\picklescan_runner.py",
    "line": 53,
    "message": "String concatenation in loop is O(n^2) - use list + ''.join().",
    "owasp": [
      "UNMAPPED"
    ],
    "remediation": "Use ''.join(parts) or io.StringIO.",
    "score": 5
  },
  {
    "category": "performance",
    "tool": "Semgrep:Perf",
    "rule": "string-concat-in-loop",
    "severity": "WARNING",
    "confidence": "likely",
    "file": "C:\\Users\\Chris4K\\Projekte\\autoscan#scanners\\trivy_runner.py",
    "line": 50,
    "message": "String concatenation in loop is O(n^2) - use list + ''.join().",
    "owasp": [
      "UNMAPPED"
    ],
    "remediation": "Use ''.join(parts) or io.StringIO.",
    "score": 5
  },
  {
    "category": "performance",
    "tool": "Semgrep:Perf",
    "rule": "string-concat-in-loop",
    "severity": "WARNING",
    "confidence": "likely",
    "file": "C:\\Users\\Chris4K\\Projekte\\autoscan#scanners\\trivy_runner.py",
    "line": 54,
    "message": "String concatenation in loop is O(n^2) - use list + ''.join().",
    "owasp": [
      "UNMAPPED"
    ],
    "remediation": "Use ''.join(parts) or io.StringIO.",
    "score": 5
  },
  {
    "category": "performance",
    "tool": "Semgrep:Perf",
    "rule": "string-concat-in-loop",
    "severity": "WARNING",
    "confidence": "likely",
    "file": "C:\\Users\\Chris4K\\Projekte\\autoscan#scanners\\trivy_runner.py",
    "line": 72,
    "message": "String concatenation in loop is O(n^2) - use list + ''.join().",
    "owasp": [
      "UNMAPPED"
    ],
    "remediation": "Use ''.join(parts) or io.StringIO.",
    "score": 5
  },
  {
    "category": "performance",
    "tool": "Semgrep:Perf",
    "rule": "string-concat-in-loop",
    "severity": "WARNING",
    "confidence": "likely",
    "file": "C:\\Users\\Chris4K\\Projekte\\autoscan#scanners\\trivy_runner.py",
    "line": 86,
    "message": "String concatenation in loop is O(n^2) - use list + ''.join().",
    "owasp": [
      "UNMAPPED"
    ],
    "remediation": "Use ''.join(parts) or io.StringIO.",
    "score": 5
  },
  {
    "category": "performance",
    "tool": "Semgrep:Perf",
    "rule": "string-concat-in-loop",
    "severity": "WARNING",
    "confidence": "likely",
    "file": "C:\\Users\\Chris4K\\Projekte\\autoscan#scanners\\vigil_runner.py",
    "line": 34,
    "message": "String concatenation in loop is O(n^2) - use list + ''.join().",
    "owasp": [
      "UNMAPPED"
    ],
    "remediation": "Use ''.join(parts) or io.StringIO.",
    "score": 5
  },
  {
    "category": "performance",
    "tool": "Semgrep:Perf",
    "rule": "string-concat-in-loop",
    "severity": "WARNING",
    "confidence": "likely",
    "file": "C:\\Users\\Chris4K\\Projekte\\autoscan#scanners\\vigil_runner.py",
    "line": 35,
    "message": "String concatenation in loop is O(n^2) - use list + ''.join().",
    "owasp": [
      "UNMAPPED"
    ],
    "remediation": "Use ''.join(parts) or io.StringIO.",
    "score": 5
  },
  {
    "category": "performance",
    "tool": "Semgrep:Perf",
    "rule": "string-concat-in-loop",
    "severity": "WARNING",
    "confidence": "likely",
    "file": "C:\\Users\\Chris4K\\Projekte\\autoscan#scanners\\vigil_runner.py",
    "line": 40,
    "message": "String concatenation in loop is O(n^2) - use list + ''.join().",
    "owasp": [
      "UNMAPPED"
    ],
    "remediation": "Use ''.join(parts) or io.StringIO.",
    "score": 5
  },
  {
    "category": "performance",
    "tool": "Semgrep:Perf",
    "rule": "string-concat-in-loop",
    "severity": "WARNING",
    "confidence": "likely",
    "file": "C:\\Users\\Chris4K\\Projekte\\autoscan#scanners\\vigil_runner.py",
    "line": 41,
    "message": "String concatenation in loop is O(n^2) - use list + ''.join().",
    "owasp": [
      "UNMAPPED"
    ],
    "remediation": "Use ''.join(parts) or io.StringIO.",
    "score": 5
  },
  {
    "category": "ml-security",
    "tool": "Semgrep:ML-GradioSSRF",
    "rule": "from-pretrained-no-revision-pin",
    "severity": "WARNING",
    "confidence": "possible",
    "file": "C:\\Users\\Chris4K\\Projekte\\autoscan#serve_local_llm.py",
    "line": 39,
    "message": "from_pretrained() without revision= always pulls HEAD. If the upstream repo is compromised and pushes new code, the next Space restart silently executes it. Pin to a commit hash: revision=\"abc123\".",
    "owasp": [
      "A08:2021-Software_and_Data_Integrity_Failures"
    ],
    "remediation": "Add revision='<commit-sha>' to pin to a specific trusted commit. Prevents supply-chain attacks via HEAD changes.",
    "score": 4
  },
  {
    "category": "ml-security",
    "tool": "Semgrep:ML-GradioSSRF",
    "rule": "from-pretrained-no-revision-pin",
    "severity": "WARNING",
    "confidence": "possible",
    "file": "C:\\Users\\Chris4K\\Projekte\\autoscan#serve_local_llm.py",
    "line": 43,
    "message": "from_pretrained() without revision= always pulls HEAD. If the upstream repo is compromised and pushes new code, the next Space restart silently executes it. Pin to a commit hash: revision=\"abc123\".",
    "owasp": [
      "A08:2021-Software_and_Data_Integrity_Failures"
    ],
    "remediation": "Add revision='<commit-sha>' to pin to a specific trusted commit. Prevents supply-chain attacks via HEAD changes.",
    "score": 4
  }
]