DevGuard-AI/examples/devguard-report-v1.example.json at main · BurakKocDev/DevGuard-AI · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
{
  "schema_version": "1.0.0",
  "scan": {
    "id": "7b786e39-b2d8-42d9-9c61-d55c7f39661a",
    "mode": "pull_request",
    "started_at": "2026-08-10T10:00:00Z",
    "finished_at": "2026-08-10T10:00:03Z",
    "target": {
      "repository_id": "repo_dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd",
      "commit": "1111111111111111111111111111111111111111",
      "base_commit": "2222222222222222222222222222222222222222"
    },
    "privacy_mode": "strict-local"
  },
  "tools": [
    {
      "name": "bandit",
      "version": "1.x-pinned",
      "required": true,
      "status": "success",
      "duration_ms": 428,
      "config_sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
      "artifact": {
        "format": "bandit-json",
        "sha256": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc",
        "retained": false
      }
    }
  ],
  "summary": {
    "total_findings": 1,
    "severity_counts": {
      "critical": 0,
      "high": 1,
      "medium": 0,
      "low": 0,
      "info": 0
    },
    "new_findings": 1,
    "suppressed_findings": 0
  },
  "metrics": {
    "coverage": [],
    "complexity": [],
    "duplication": []
  },
  "findings": [
    {
      "id": "dgf_aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
      "fingerprint": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
      "origin": "tool",
      "category": "security",
      "severity": "high",
      "confidence": "high",
      "baseline_state": "new",
      "changed_code": true,
      "language": "python",
      "title": "Shell command may execute untrusted input",
      "description": "Bandit reported a high-severity subprocess shell usage finding.",
      "tool": {
        "name": "bandit",
        "version": "1.x-pinned",
        "rule_id": "B602",
        "original_severity": "HIGH",
        "original_confidence": "HIGH"
      },
      "location": {
        "path": "src/runner.py",
        "start_line": 42,
        "start_column": 5,
        "end_line": 42,
        "end_column": 29,
        "symbol": "run_command"
      },
      "identifiers": {
        "cwe": ["CWE-78"]
      },
      "references": [
        "https://bandit.readthedocs.io/en/latest/plugins/b602_subprocess_popen_with_shell_equals_true.html"
      ],
      "remediation": {
        "origin": "rule_metadata",
        "summary": "Avoid a shell and pass a validated argument vector to the subprocess API.",
        "fix_available": false
      },
      "triage": {
        "state": "open"
      }
    }
  ],
  "policy": {
    "policy_version": "1.0.0",
    "decision": "fail",
    "evaluated_at": "2026-08-10T10:00:04Z",
    "baseline_status": "found",
    "reasons": [
      {
        "code": "NEW_HIGH_CONFIRMED",
        "effect": "fail",
        "message": "A new high-severity finding with high confidence was detected.",
        "finding_ids": [
          "dgf_aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
        ]
      }
    ]
  },
  "llm": {
    "enabled": false,
    "mode": "disabled",
    "payload_policy": "1.0.0",
    "findings_explained": 0
  }
}