devsecops-radar/sample_semgrep.json at main · Mehrdoost/devsecops-radar · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
{
    "results": [
      {
        "path": "src/api.py",
        "check_id": "python.lang.security.audit.dynamic-http-request.dynamic-http-request",
        "extra": {
          "severity": "HIGH",
          "message": "detected dynamic http request"
        },
        "start": {
          "line": 42
        }
      },
      {
        "path": "src/db.py",
        "check_id": "python.lang.security.audit.sqlalchemy-sqli.sqlalchemy-sqli",
        "extra": {
          "severity": "MEDIUM",
          "message": "SQLAlchemy potential SQL injection"
        },
        "start": {
          "line": 17
        }
      },
      {
        "path": "src/views.py",
        "check_id": "python.lang.security.audit.xss.avoid-jinja2-autoescape-off.avoid-jinja2-autoescape-off",
        "extra": {
          "severity": "LOW",
          "message": "Jinja2 autoescape is off"
        },
        "start": {
          "line": 5
        }
      }
    ]
  }