| { |
| "findings": [ |
| { |
| "file": "env", |
| "type": "Secret", |
| "id": "huggingface-token", |
| "severity": "SECRET", |
| "source": "gitleaks", |
| "explanation": null, |
| "why_dangerous": null, |
| "fix": null, |
| "cwe": null |
| }, |
| { |
| "file": "vulnerable_code.py", |
| "type": "Secret", |
| "id": "generic-api-token", |
| "severity": "SECRET", |
| "source": "gitleaks", |
| "explanation": null, |
| "why_dangerous": null, |
| "fix": null, |
| "cwe": null |
| }, |
| { |
| "file": "test_secret.py", |
| "type": "Secret", |
| "id": "generic-api-token", |
| "severity": "SECRET", |
| "source": "gitleaks", |
| "explanation": null, |
| "why_dangerous": null, |
| "fix": null, |
| "cwe": null |
| }, |
| { |
| "file": "test_secret.py", |
| "type": "Secret", |
| "id": "test-api-key", |
| "severity": "SECRET", |
| "source": "gitleaks", |
| "explanation": null, |
| "why_dangerous": null, |
| "fix": null, |
| "cwe": null |
| }, |
| { |
| "file": "app/main.py", |
| "type": "Vulnerability", |
| "id": "B110", |
| "severity": "LOW", |
| "source": "bandit", |
| "explanation": null, |
| "why_dangerous": null, |
| "fix": null, |
| "cwe": "CWE-703" |
| }, |
| { |
| "file": "app/api.py", |
| "type": "Vulnerability", |
| "id": "B110", |
| "severity": "LOW", |
| "source": "bandit", |
| "explanation": null, |
| "why_dangerous": null, |
| "fix": null, |
| "cwe": "CWE-703" |
| }, |
| { |
| "file": "app/api.py", |
| "type": "Vulnerability", |
| "id": "B104", |
| "severity": "MEDIUM", |
| "source": "bandit", |
| "explanation": null, |
| "why_dangerous": null, |
| "fix": null, |
| "cwe": "CWE-605" |
| }, |
| { |
| "file": "vulnerable_code.py", |
| "type": "Vulnerability", |
| "id": "B404", |
| "severity": "LOW", |
| "source": "bandit", |
| "explanation": null, |
| "why_dangerous": null, |
| "fix": null, |
| "cwe": "CWE-78" |
| }, |
| { |
| "file": "app/scanner.py", |
| "type": "Vulnerability", |
| "id": "B404", |
| "severity": "LOW", |
| "source": "bandit", |
| "explanation": null, |
| "why_dangerous": null, |
| "fix": null, |
| "cwe": "CWE-78" |
| }, |
| { |
| "file": "app/scanner.py", |
| "type": "Vulnerability", |
| "id": "B603", |
| "severity": "LOW", |
| "source": "bandit", |
| "explanation": null, |
| "why_dangerous": null, |
| "fix": null, |
| "cwe": "CWE-78" |
| }, |
| { |
| "file": "vulnerable_code.py", |
| "type": "Vulnerability", |
| "id": "B105", |
| "severity": "LOW", |
| "source": "bandit", |
| "explanation": null, |
| "why_dangerous": null, |
| "fix": null, |
| "cwe": "CWE-259" |
| }, |
| { |
| "file": "test_secret.py", |
| "type": "Vulnerability", |
| "id": "B105", |
| "severity": "LOW", |
| "source": "bandit", |
| "explanation": null, |
| "why_dangerous": null, |
| "fix": null, |
| "cwe": "CWE-259" |
| }, |
| { |
| "file": "vulnerable_code.py", |
| "type": "Vulnerability", |
| "id": "B605", |
| "severity": "HIGH", |
| "source": "bandit", |
| "explanation": null, |
| "why_dangerous": null, |
| "fix": null, |
| "cwe": "CWE-78" |
| }, |
| { |
| "file": "vulnerable_code.py", |
| "type": "Vulnerability", |
| "id": "B607", |
| "severity": "LOW", |
| "source": "bandit", |
| "explanation": null, |
| "why_dangerous": null, |
| "fix": null, |
| "cwe": "CWE-78" |
| }, |
| { |
| "file": "vulnerable_code.py", |
| "type": "Vulnerability", |
| "id": "B602", |
| "severity": "LOW", |
| "source": "bandit", |
| "explanation": null, |
| "why_dangerous": null, |
| "fix": null, |
| "cwe": "CWE-78" |
| }, |
| { |
| "file": "requirements.txt", |
| "type": "Vulnerability", |
| "id": "CVE-2026-28684", |
| "severity": "MEDIUM", |
| "source": "trivy", |
| "explanation": null, |
| "why_dangerous": null, |
| "fix": null, |
| "cwe": null |
| }, |
| { |
| "file": "requirements.txt", |
| "type": "Vulnerability", |
| "id": "CVE-2026-33682", |
| "severity": "MEDIUM", |
| "source": "trivy", |
| "explanation": null, |
| "why_dangerous": null, |
| "fix": null, |
| "cwe": null |
| }, |
| { |
| "file": "env", |
| "type": "Vulnerability", |
| "id": "hugging-face-access-token", |
| "severity": "CRITICAL", |
| "source": "trivy", |
| "explanation": null, |
| "why_dangerous": null, |
| "fix": null, |
| "cwe": null |
| }, |
| { |
| "file": "env", |
| "type": "Secret", |
| "id": "hugging-face-access-token", |
| "severity": "SECRET", |
| "source": "trivy", |
| "explanation": null, |
| "why_dangerous": null, |
| "fix": null, |
| "cwe": null |
| } |
| ], |
| "stats": { |
| "files": 32, |
| "vulns": 11, |
| "secrets": 4, |
| "high_critical": 2 |
| }, |
| "source": "static_demo" |
| } |