1 line
14 KiB
JSON
1 line
14 KiB
JSON
{"repo": "baldr27/gather", "files": {"consolidated_data/tracehubpm/reports-check-action/reports-check.json": {"0be785be636c529d5b649cfc6911fca7fd3dfa24": {"t": 1785674606.6090603, "n": 13176, "h": "d552f89585578552", "c": "{\n \"repo_owner\": \"tracehubpm\",\n \"repo_name\": \"reports-check-action\",\n \"workflow_name\": \"reports-check\",\n \"history\": {\n \"2024-03-09T11-21-47Z\": {\n \"vulnerability_list\": [\n {\n \"ruleId\": \"actions/missing-workflow-permissions\",\n \"ruleIndex\": 0,\n \"kind\": \"fail\",\n \"level\": \"warning\",\n \"correlationGuid\": \"workflow-5945ffbb-e489-5b49-9433-e3bc343b7d9f\",\n \"message\": {\n \"text\": \"Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {{contents: read}}\"\n },\n \"locations\": [\n {\n \"physicalLocation\": {\n \"artifactLocation\": {\n \"uri\": \".github/workflows/reports-check__2024-03-09T11-21-47Z__8857a76f3ce8fbc9473daabd3bb50880421e0c4d.yml\",\n \"uriBaseId\": \"%SRCROOT%\"\n },\n \"region\": {\n \"startLine\": 8,\n \"startColumn\": 5,\n \"endLine\": 14,\n \"endColumn\": 53\n }\n }\n }\n ],\n \"partialFingerprints\": {\n \"primaryLocationLineHash\": \"a413f3e9966fd4a8:1\"\n },\n \"baselineState\": \"new\",\n \"properties\": {\n \"cwe\": \"CWE-275\",\n \"precision\": \"high\",\n \"security_severity\": \"5.0\",\n \"triage\": \"medium\"\n }\n }\n ],\n \"workflow_metadata\": {\n \"workflow_metadata\": {\n \"file_name\": \"reports-check__2024-03-09T11-21-47Z__8857a76f3ce8fbc9473daabd3bb50880421e0c4d.yml\",\n \"workflow_name\": \"reports-check\",\n \"triggers\": {\n \"issues\": {\n \"types\": [\n \"opened\"\n ]\n }\n },\n \"permissions\": null,\n \"concurrency\": null,\n \"defaults\": null,\n \"line_count\": 14,\n \"num_jobs\": 1,\n \"steps_per_job\": {\n \"check\": 2\n }\n },\n \"workflow_metrics\": {\n \"workflow_level\": {\n \"num_jobs\": 1,\n \"num_dependencies_between_jobs\": 0,\n \"num_matrix_strategies\": 0,\n \"num_triggers_defined\": 1\n },\n \"job_level\": {\n \"num_steps_per_job\": {\n \"check\": 2\n },\n \"jobs_with_timeout\": 0,\n \"jobs_with_continue_on_error\": 0,\n \"num_distinct_runs_on\": 1,\n \"jobs_with_container\": 0,\n \"jobs_with_services\": 0\n },\n \"step_level\": {\n \"num_actions_uses\": 2,\n \"actions_used\": [\n \"actions/checkout@v4\",\n \"tracehubpm/reports-check-action@latest\"\n ],\n \"num_run_commands\": 0,\n \"steps_with_conditionals\": 0,\n \"steps_with_continue_on_error\": 0\n }\n }\n },\n \"workflow_json\": {\n \"name\": \"reports-check\",\n \"jobs\": {\n \"check\": {\n \"runs-on\": \"ubuntu-22.04\",\n \"steps\": [\n {\n \"uses\": \"actions/checkout@v4\"\n },\n {\n \"uses\": \"tracehubpm/reports-check-action@latest\",\n \"with\": {\n \"openai_token\": \"${{ secrets.OPENAI_TOKEN }}\",\n \"github_token\": \"${{ secrets.GITHUB_TOKEN }}\"\n }\n }\n ]\n }\n },\n \"on\": {\n \"issues\": {\n \"types\": [\n \"opened\"\n ]\n }\n }\n }\n },\n \"2024-03-09T12-15-09Z\": {\n \"vulnerability_list\": [\n {\n \"ruleId\": \"actions/missing-workflow-permissions\",\n \"ruleIndex\": 0,\n \"kind\": \"fail\",\n \"level\": \"warning\",\n \"correlationGuid\": \"workflow-6fde1479-de69-5031-bf7a-a732af6fd717\",\n \"message\": {\n \"text\": \"Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {{contents: read}}\"\n },\n \"locations\": [\n {\n \"physicalLocation\": {\n \"artifactLocation\": {\n \"uri\": \".github/workflows/reports-check__2024-03-09T12-15-09Z__c52b2d5bfe9b3d5507b110b5b5410f2b2696e954.yml\",\n \"uriBaseId\": \"%SRCROOT%\"\n },\n \"region\": {\n \"startLine\": 8,\n \"startColumn\": 5,\n \"endLine\": 14,\n \"endColumn\": 53\n }\n }\n }\n ],\n \"partialFingerprints\": {\n \"primaryLocationLineHash\": \"a413f3ffae515037:1\"\n },\n \"baselineState\": \"new\",\n \"properties\": {\n \"cwe\": \"CWE-275\",\n \"precision\": \"high\",\n \"security_severity\": \"5.0\",\n \"triage\": \"medium\"\n }\n }\n ],\n \"workflow_metadata\": {\n \"workflow_metadata\": {\n \"file_name\": \"reports-check__2024-03-09T12-15-09Z__c52b2d5bfe9b3d5507b110b5b5410f2b2696e954.yml\",\n \"workflow_name\": \"reports-check\",\n \"triggers\": {\n \"issues\": {\n \"types\": [\n \"opened\"\n ]\n }\n },\n \"permissions\": null,\n \"concurrency\": null,\n \"defaults\": null,\n \"line_count\": 14,\n \"num_jobs\": 1,\n \"steps_per_job\": {\n \"check\": 2\n }\n },\n \"workflow_metrics\": {\n \"workflow_level\": {\n \"num_jobs\": 1,\n \"num_dependencies_between_jobs\": 0,\n \"num_matrix_strategies\": 0,\n \"num_triggers_defined\": 1\n },\n \"job_level\": {\n \"num_steps_per_job\": {\n \"check\": 2\n },\n \"jobs_with_timeout\": 0,\n \"jobs_with_continue_on_error\": 0,\n \"num_distinct_runs_on\": 1,\n \"jobs_with_container\": 0,\n \"jobs_with_services\": 0\n },\n \"step_level\": {\n \"num_actions_uses\": 2,\n \"actions_used\": [\n \"actions/checkout@v4\",\n \"tracehubpm/reports-check-action@master\"\n ],\n \"num_run_commands\": 0,\n \"steps_with_conditionals\": 0,\n \"steps_with_continue_on_error\": 0\n }\n }\n },\n \"workflow_json\": {\n \"name\": \"reports-check\",\n \"jobs\": {\n \"check\": {\n \"runs-on\": \"ubuntu-22.04\",\n \"steps\": [\n {\n \"uses\": \"actions/checkout@v4\"\n },\n {\n \"uses\": \"tracehubpm/reports-check-action@master\",\n \"with\": {\n \"openai_token\": \"${{ secrets.OPENAI_TOKEN }}\",\n \"github_token\": \"${{ secrets.GITHUB_TOKEN }}\"\n }\n }\n ]\n }\n },\n \"on\": {\n \"issues\": {\n \"types\": [\n \"opened\"\n ]\n }\n }\n }\n },\n \"2024-03-12T08-40-11Z\": {\n \"vulnerability_list\": [\n {\n \"ruleId\": \"actions/missing-workflow-permissions\",\n \"ruleIndex\": 0,\n \"kind\": \"fail\",\n \"level\": \"warning\",\n \"correlationGuid\": \"workflow-9ea61302-feeb-5fd2-af05-9c2396ca8b9b\",\n \"message\": {\n \"text\": \"Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {{contents: read}}\"\n },\n \"locations\": [\n {\n \"physicalLocation\": {\n \"artifactLocation\": {\n \"uri\": \".github/workflows/reports-check__2024-03-12T08-40-11Z__5f6210e96ab41ba3f7711a3571406167ff77e659.yml\",\n \"uriBaseId\": \"%SRCROOT%\"\n },\n \"region\": {\n \"startLine\": 8,\n \"startColumn\": 5,\n \"endLine\": 14,\n \"endColumn\": 59\n }\n }\n }\n ],\n \"partialFingerprints\": {\n \"primaryLocationLineHash\": \"a413f3ffae515037:1\"\n },\n \"baselineState\": \"new\",\n \"properties\": {\n \"cwe\": \"CWE-275\",\n \"precision\": \"high\",\n \"security_severity\": \"5.0\",\n \"triage\": \"medium\"\n }\n }\n ],\n \"workflow_metadata\": {\n \"workflow_metadata\": {\n \"file_name\": \"reports-check__2024-03-12T08-40-11Z__5f6210e96ab41ba3f7711a3571406167ff77e659.yml\",\n \"workflow_name\": \"reports-check\",\n \"triggers\": {\n \"issues\": {\n \"types\": [\n \"opened\"\n ]\n }\n },\n \"permissions\": null,\n \"concurrency\": null,\n \"defaults\": null,\n \"line_count\": 14,\n \"num_jobs\": 1,\n \"steps_per_job\": {\n \"check\": 2\n }\n },\n \"workflow_metrics\": {\n \"workflow_level\": {\n \"num_jobs\": 1,\n \"num_dependencies_between_jobs\": 0,\n \"num_matrix_strategies\": 0,\n \"num_triggers_defined\": 1\n },\n \"job_level\": {\n \"num_steps_per_job\": {\n \"check\": 2\n },\n \"jobs_with_timeout\": 0,\n \"jobs_with_continue_on_error\": 0,\n \"num_distinct_runs_on\": 1,\n \"jobs_with_container\": 0,\n \"jobs_with_services\": 0\n },\n \"step_level\": {\n \"num_actions_uses\": 2,\n \"actions_used\": [\n \"actions/checkout@v4\",\n \"tracehubpm/reports-check-action@master\"\n ],\n \"num_run_commands\": 0,\n \"steps_with_conditionals\": 0,\n \"steps_with_continue_on_error\": 0\n }\n }\n },\n \"workflow_json\": {\n \"name\": \"reports-check\",\n \"jobs\": {\n \"check\": {\n \"runs-on\": \"ubuntu-22.04\",\n \"steps\": [\n {\n \"uses\": \"actions/checkout@v4\"\n },\n {\n \"uses\": \"tracehubpm/reports-check-action@master\",\n \"with\": {\n \"github_token\": \"${{ secrets.GITHUB_TOKEN }}\",\n \"deepinfra_token\": \"${{ secrets.DEEPINFRA_TOKEN }}\"\n }\n }\n ]\n }\n },\n \"on\": {\n \"issues\": {\n \"types\": [\n \"opened\"\n ]\n }\n }\n }\n },\n \"2024-03-18T08-59-13Z\": {\n \"vulnerability_list\": [],\n \"workflow_metadata\": {\n \"workflow_metadata\": {\n \"file_name\": \"reports-check__2024-03-18T08-59-13Z__72c96e96cc3524653af1c004c30d444e357851a0.yml\",\n \"workflow_name\": \"reports-check\",\n \"triggers\": {\n \"issues\": {\n \"types\": [\n \"opened\"\n ]\n }\n },\n \"permissions\": {\n \"issues\": \"write\",\n \"contents\": \"read\"\n },\n \"concurrency\": null,\n \"defaults\": null,\n \"line_count\": 18,\n \"num_jobs\": 1,\n \"steps_per_job\": {\n \"check\": 2\n }\n },\n \"workflow_metrics\": {\n \"workflow_level\": {\n \"num_jobs\": 1,\n \"num_dependencies_between_jobs\": 0,\n \"num_matrix_strategies\": 0,\n \"num_triggers_defined\": 1\n },\n \"job_level\": {\n \"num_steps_per_job\": {\n \"check\": 2\n },\n \"jobs_with_timeout\": 0,\n \"jobs_with_continue_on_error\": 0,\n \"num_distinct_runs_on\": 1,\n \"jobs_with_container\": 0,\n \"jobs_with_services\": 0\n },\n \"step_level\": {\n \"num_actions_uses\": 2,\n \"actions_used\": [\n \"actions/checkout@v4\",\n \"tracehubpm/reports-check-action@master\"\n ],\n \"num_run_commands\": 0,\n \"steps_with_conditionals\": 0,\n \"steps_with_continue_on_error\": 0\n }\n }\n },\n \"workflow_json\": {\n \"name\": \"reports-check\",\n \"permissions\": {\n \"issues\": \"write\",\n \"contents\": \"read\"\n },\n \"jobs\": {\n \"check\": {\n \"runs-on\": \"ubuntu-22.04\",\n \"steps\": [\n {\n \"uses\": \"actions/checkout@v4\"\n },\n {\n \"uses\": \"tracehubpm/reports-check-action@master\",\n \"with\": {\n \"github_token\": \"${{ secrets.GITHUB_TOKEN }}\",\n \"deepinfra_token\": \"${{ secrets.DEEPINFRA_TOKEN }}\",\n \"exclude\": \"[\\\"^We should*.+$\\\"]\"\n }\n }\n ]\n }\n },\n \"on\": {\n \"issues\": {\n \"types\": [\n \"opened\"\n ]\n }\n }\n }\n }\n }\n}"}}}} |