|
1 | 1 | [ |
2 | 2 | { |
3 | | - "candidate_id": "ec_ijx4x1v9tgpk7gnh", |
| 3 | + "candidate_id": "ec_p3dj1wjbl6oyn44o", |
4 | 4 | "source_tool": { |
5 | 5 | "name": "caesar-ai-scan", |
6 | 6 | "version": "0.5.0" |
7 | 7 | }, |
8 | | - "generated_at": "2026-05-22T17:16:30.840Z", |
| 8 | + "generated_at": "2026-05-22T17:30:11.114Z", |
9 | 9 | "evidence_type": "environment_credential", |
10 | 10 | "status": "draft", |
11 | | - "finding_ref": "find_env_jqzs4kzy", |
| 11 | + "finding_ref": "find_env_jc7hdi6t", |
12 | 12 | "proposed_payload": { |
13 | 13 | "matched_name": "OPENAI_API_KEY", |
14 | 14 | "file_path": ".env.example", |
|
18 | 18 | "remediation_suggestion": "Never hardcode API keys. Verify that this key is supplied securely at runtime via secrets manager." |
19 | 19 | }, |
20 | 20 | "review_required": true, |
21 | | - "integration_notes": "Offline candidate assessment generated for finding ID: find_env_jqzs4kzy. Blocked from export due to 4 unresolved blocking evidence gaps.", |
| 21 | + "integration_notes": "Offline candidate assessment generated for finding ID: find_env_jc7hdi6t. Blocked from export due to 4 unresolved blocking evidence gaps.", |
22 | 22 | "review_status": "blocked_missing_context", |
23 | 23 | "evidence_gaps": [ |
24 | 24 | { |
|
66 | 66 | ] |
67 | 67 | }, |
68 | 68 | { |
69 | | - "candidate_id": "ec_bdmxdo7rlbpwm5i6", |
| 69 | + "candidate_id": "ec_1dfa2w448fzfo4k5", |
70 | 70 | "source_tool": { |
71 | 71 | "name": "caesar-ai-scan", |
72 | 72 | "version": "0.5.0" |
73 | 73 | }, |
74 | | - "generated_at": "2026-05-22T17:16:30.840Z", |
| 74 | + "generated_at": "2026-05-22T17:30:11.114Z", |
75 | 75 | "evidence_type": "environment_credential", |
76 | 76 | "status": "draft", |
77 | | - "finding_ref": "find_env_n9y62oly", |
| 77 | + "finding_ref": "find_env_xgsbjx2x", |
78 | 78 | "proposed_payload": { |
79 | 79 | "matched_name": "ANTHROPIC_API_KEY", |
80 | 80 | "file_path": ".env.example", |
|
84 | 84 | "remediation_suggestion": "Ensure API key is removed from repository commits immediately." |
85 | 85 | }, |
86 | 86 | "review_required": true, |
87 | | - "integration_notes": "Offline candidate assessment generated for finding ID: find_env_n9y62oly. Blocked from export due to 4 unresolved blocking evidence gaps.", |
| 87 | + "integration_notes": "Offline candidate assessment generated for finding ID: find_env_xgsbjx2x. Blocked from export due to 4 unresolved blocking evidence gaps.", |
88 | 88 | "review_status": "blocked_missing_context", |
89 | 89 | "evidence_gaps": [ |
90 | 90 | { |
|
132 | 132 | ] |
133 | 133 | }, |
134 | 134 | { |
135 | | - "candidate_id": "ec_z2erqzbkl7xvv9jb", |
| 135 | + "candidate_id": "ec_4khy9p20owtj8r9m", |
136 | 136 | "source_tool": { |
137 | 137 | "name": "caesar-ai-scan", |
138 | 138 | "version": "0.5.0" |
139 | 139 | }, |
140 | | - "generated_at": "2026-05-22T17:16:30.840Z", |
| 140 | + "generated_at": "2026-05-22T17:30:11.114Z", |
141 | 141 | "evidence_type": "codebase_dependency", |
142 | 142 | "status": "draft", |
143 | | - "finding_ref": "find_dep_pmh5c1qi", |
| 143 | + "finding_ref": "find_dep_1wvj5s42", |
144 | 144 | "proposed_payload": { |
145 | 145 | "matched_name": "openai", |
146 | 146 | "file_path": "package.json", |
|
150 | 150 | "remediation_suggestion": "Verify usage complies with company data privacy policy. Ensure no proprietary data is sent to external LLMs without explicit authorization." |
151 | 151 | }, |
152 | 152 | "review_required": true, |
153 | | - "integration_notes": "Offline candidate assessment generated for finding ID: find_dep_pmh5c1qi. Blocked from export due to 6 unresolved blocking evidence gaps.", |
| 153 | + "integration_notes": "Offline candidate assessment generated for finding ID: find_dep_1wvj5s42. Blocked from export due to 6 unresolved blocking evidence gaps.", |
154 | 154 | "review_status": "blocked_missing_context", |
155 | 155 | "evidence_gaps": [ |
156 | 156 | { |
|
227 | 227 | ] |
228 | 228 | }, |
229 | 229 | { |
230 | | - "candidate_id": "ec_8qa11xo43tdcqmde", |
| 230 | + "candidate_id": "ec_io4vhv7imbpe4rw3", |
231 | 231 | "source_tool": { |
232 | 232 | "name": "caesar-ai-scan", |
233 | 233 | "version": "0.5.0" |
234 | 234 | }, |
235 | | - "generated_at": "2026-05-22T17:16:30.840Z", |
| 235 | + "generated_at": "2026-05-22T17:30:11.114Z", |
236 | 236 | "evidence_type": "codebase_dependency", |
237 | 237 | "status": "draft", |
238 | | - "finding_ref": "find_dep_1net28cl", |
| 238 | + "finding_ref": "find_dep_50xq8esf", |
239 | 239 | "proposed_payload": { |
240 | 240 | "matched_name": "langchain", |
241 | 241 | "file_path": "package.json", |
|
245 | 245 | "remediation_suggestion": "LangChain pipelines dynamically construct chains. Trace all active prompts and integrations to ensure there are no un-monitored model connections." |
246 | 246 | }, |
247 | 247 | "review_required": true, |
248 | | - "integration_notes": "Offline candidate assessment generated for finding ID: find_dep_1net28cl. Blocked from export due to 6 unresolved blocking evidence gaps.", |
| 248 | + "integration_notes": "Offline candidate assessment generated for finding ID: find_dep_50xq8esf. Blocked from export due to 6 unresolved blocking evidence gaps.", |
249 | 249 | "review_status": "blocked_missing_context", |
250 | 250 | "evidence_gaps": [ |
251 | 251 | { |
|
322 | 322 | ] |
323 | 323 | }, |
324 | 324 | { |
325 | | - "candidate_id": "ec_41ubfd9hjr6y2voq", |
| 325 | + "candidate_id": "ec_oscob4zg2znz83wj", |
326 | 326 | "source_tool": { |
327 | 327 | "name": "caesar-ai-scan", |
328 | 328 | "version": "0.5.0" |
329 | 329 | }, |
330 | | - "generated_at": "2026-05-22T17:16:30.840Z", |
| 330 | + "generated_at": "2026-05-22T17:30:11.114Z", |
331 | 331 | "evidence_type": "prompt_configuration", |
332 | 332 | "status": "draft", |
333 | | - "finding_ref": "find_prompt_3jgygftv", |
| 333 | + "finding_ref": "find_prompt_5he7qszv", |
334 | 334 | "proposed_payload": { |
335 | 335 | "matched_name": "system.prompt.md", |
336 | 336 | "file_path": "prompts/system.prompt.md", |
|
340 | 340 | "remediation_suggestion": "Review prompt content for bias, safety, and proprietary data." |
341 | 341 | }, |
342 | 342 | "review_required": true, |
343 | | - "integration_notes": "Offline candidate assessment generated for finding ID: find_prompt_3jgygftv. Blocked from export due to 2 unresolved blocking evidence gaps.", |
| 343 | + "integration_notes": "Offline candidate assessment generated for finding ID: find_prompt_5he7qszv. Blocked from export due to 2 unresolved blocking evidence gaps.", |
344 | 344 | "review_status": "blocked_missing_context", |
345 | 345 | "evidence_gaps": [ |
346 | 346 | { |
|
398 | 398 | ] |
399 | 399 | }, |
400 | 400 | { |
401 | | - "candidate_id": "ec_adxvkiszctq78sx4", |
| 401 | + "candidate_id": "ec_l8rix0qs98lwqih1", |
402 | 402 | "source_tool": { |
403 | 403 | "name": "caesar-ai-scan", |
404 | 404 | "version": "0.5.0" |
405 | 405 | }, |
406 | | - "generated_at": "2026-05-22T17:16:30.840Z", |
| 406 | + "generated_at": "2026-05-22T17:30:11.114Z", |
407 | 407 | "evidence_type": "codebase_dependency", |
408 | 408 | "status": "draft", |
409 | | - "finding_ref": "find_dep_rdkvt9sn", |
| 409 | + "finding_ref": "find_dep_3yswrbvr", |
410 | 410 | "proposed_payload": { |
411 | 411 | "matched_name": "llama-index", |
412 | 412 | "file_path": "requirements.txt", |
|
416 | 416 | "remediation_suggestion": "LlamaIndex connects files to LLMs. Audit all document parsing pipelines and local index stores to prevent leaking restricted intellectual property." |
417 | 417 | }, |
418 | 418 | "review_required": true, |
419 | | - "integration_notes": "Offline candidate assessment generated for finding ID: find_dep_rdkvt9sn. Blocked from export due to 6 unresolved blocking evidence gaps.", |
| 419 | + "integration_notes": "Offline candidate assessment generated for finding ID: find_dep_3yswrbvr. Blocked from export due to 6 unresolved blocking evidence gaps.", |
420 | 420 | "review_status": "blocked_missing_context", |
421 | 421 | "evidence_gaps": [ |
422 | 422 | { |
|
493 | 493 | ] |
494 | 494 | }, |
495 | 495 | { |
496 | | - "candidate_id": "ec_2v6mfjxpfiqyd4o2", |
| 496 | + "candidate_id": "ec_gxvx0wlrcy0ta08q", |
497 | 497 | "source_tool": { |
498 | 498 | "name": "caesar-ai-scan", |
499 | 499 | "version": "0.5.0" |
500 | 500 | }, |
501 | | - "generated_at": "2026-05-22T17:16:30.840Z", |
| 501 | + "generated_at": "2026-05-22T17:30:11.114Z", |
502 | 502 | "evidence_type": "codebase_dependency", |
503 | 503 | "status": "draft", |
504 | | - "finding_ref": "find_dep_niksypvb", |
| 504 | + "finding_ref": "find_dep_71fpnu4r", |
505 | 505 | "proposed_payload": { |
506 | 506 | "matched_name": "chromadb", |
507 | 507 | "file_path": "requirements.txt", |
|
511 | 511 | "remediation_suggestion": "Ensure persistent database directories are located in secure environments. Block unauthorized exports." |
512 | 512 | }, |
513 | 513 | "review_required": true, |
514 | | - "integration_notes": "Offline candidate assessment generated for finding ID: find_dep_niksypvb. Blocked from export due to 6 unresolved blocking evidence gaps.", |
| 514 | + "integration_notes": "Offline candidate assessment generated for finding ID: find_dep_71fpnu4r. Blocked from export due to 6 unresolved blocking evidence gaps.", |
515 | 515 | "review_status": "blocked_missing_context", |
516 | 516 | "evidence_gaps": [ |
517 | 517 | { |
|
588 | 588 | ] |
589 | 589 | }, |
590 | 590 | { |
591 | | - "candidate_id": "ec_5394c8rttiwut7ai", |
| 591 | + "candidate_id": "ec_k6s5hpz9b21u5y7s", |
592 | 592 | "source_tool": { |
593 | 593 | "name": "caesar-ai-scan", |
594 | 594 | "version": "0.5.0" |
595 | 595 | }, |
596 | | - "generated_at": "2026-05-22T17:16:30.840Z", |
| 596 | + "generated_at": "2026-05-22T17:30:11.114Z", |
597 | 597 | "evidence_type": "environment_credential", |
598 | 598 | "status": "draft", |
599 | | - "finding_ref": "find_env_9xh8kbdp", |
| 599 | + "finding_ref": "find_env_sww8hfl7", |
600 | 600 | "proposed_payload": { |
601 | 601 | "matched_name": "OPENAI_API_KEY", |
602 | 602 | "file_path": "src/example.js", |
|
606 | 606 | "remediation_suggestion": "Never hardcode API keys. Verify that this key is supplied securely at runtime via secrets manager." |
607 | 607 | }, |
608 | 608 | "review_required": true, |
609 | | - "integration_notes": "Offline candidate assessment generated for finding ID: find_env_9xh8kbdp. Blocked from export due to 4 unresolved blocking evidence gaps.", |
| 609 | + "integration_notes": "Offline candidate assessment generated for finding ID: find_env_sww8hfl7. Blocked from export due to 4 unresolved blocking evidence gaps.", |
610 | 610 | "review_status": "blocked_missing_context", |
611 | 611 | "evidence_gaps": [ |
612 | 612 | { |
|
654 | 654 | ] |
655 | 655 | }, |
656 | 656 | { |
657 | | - "candidate_id": "ec_h8uufp54dzgmoik2", |
| 657 | + "candidate_id": "ec_w1jxlxxu623gpadb", |
658 | 658 | "source_tool": { |
659 | 659 | "name": "caesar-ai-scan", |
660 | 660 | "version": "0.5.0" |
661 | 661 | }, |
662 | | - "generated_at": "2026-05-22T17:16:30.840Z", |
| 662 | + "generated_at": "2026-05-22T17:30:11.114Z", |
663 | 663 | "evidence_type": "vector_storage", |
664 | 664 | "status": "draft", |
665 | | - "finding_ref": "find_vector_4g7pzl4c", |
| 665 | + "finding_ref": "find_vector_l818ajk8", |
666 | 666 | "proposed_payload": { |
667 | 667 | "matched_name": "Chroma DB", |
668 | 668 | "file_path": "src/example.js", |
|
672 | 672 | "remediation_suggestion": "Ensure persistent database directories are located in secure environments. Block unauthorized exports." |
673 | 673 | }, |
674 | 674 | "review_required": true, |
675 | | - "integration_notes": "Offline candidate assessment generated for finding ID: find_vector_4g7pzl4c. Blocked from export due to 3 unresolved blocking evidence gaps.", |
| 675 | + "integration_notes": "Offline candidate assessment generated for finding ID: find_vector_l818ajk8. Blocked from export due to 3 unresolved blocking evidence gaps.", |
676 | 676 | "review_status": "blocked_missing_context", |
677 | 677 | "evidence_gaps": [ |
678 | 678 | { |
|
721 | 721 | ] |
722 | 722 | }, |
723 | 723 | { |
724 | | - "candidate_id": "ec_ygfdr3mqrsj3daf9", |
| 724 | + "candidate_id": "ec_81hxygcaddduppiy", |
725 | 725 | "source_tool": { |
726 | 726 | "name": "caesar-ai-scan", |
727 | 727 | "version": "0.5.0" |
728 | 728 | }, |
729 | | - "generated_at": "2026-05-22T17:16:30.840Z", |
| 729 | + "generated_at": "2026-05-22T17:30:11.114Z", |
730 | 730 | "evidence_type": "vector_storage", |
731 | 731 | "status": "draft", |
732 | | - "finding_ref": "find_vector_i9zkkhpe", |
| 732 | + "finding_ref": "find_vector_paispucs", |
733 | 733 | "proposed_payload": { |
734 | 734 | "matched_name": "Chroma DB", |
735 | 735 | "file_path": "src/example.js", |
|
739 | 739 | "remediation_suggestion": "Ensure persistent database directories are located in secure environments. Block unauthorized exports." |
740 | 740 | }, |
741 | 741 | "review_required": true, |
742 | | - "integration_notes": "Offline candidate assessment generated for finding ID: find_vector_i9zkkhpe. Blocked from export due to 3 unresolved blocking evidence gaps.", |
| 742 | + "integration_notes": "Offline candidate assessment generated for finding ID: find_vector_paispucs. Blocked from export due to 3 unresolved blocking evidence gaps.", |
743 | 743 | "review_status": "blocked_missing_context", |
744 | 744 | "evidence_gaps": [ |
745 | 745 | { |
|
788 | 788 | ] |
789 | 789 | }, |
790 | 790 | { |
791 | | - "candidate_id": "ec_j8p22sjq3tvcspdj", |
| 791 | + "candidate_id": "ec_73duywb2zeaddpov", |
792 | 792 | "source_tool": { |
793 | 793 | "name": "caesar-ai-scan", |
794 | 794 | "version": "0.5.0" |
795 | 795 | }, |
796 | | - "generated_at": "2026-05-22T17:16:30.840Z", |
| 796 | + "generated_at": "2026-05-22T17:30:11.114Z", |
797 | 797 | "evidence_type": "vector_storage", |
798 | 798 | "status": "draft", |
799 | | - "finding_ref": "find_vector_zo63duos", |
| 799 | + "finding_ref": "find_vector_ti54r6x4", |
800 | 800 | "proposed_payload": { |
801 | 801 | "matched_name": "Chroma DB", |
802 | 802 | "file_path": "src/example.js", |
|
806 | 806 | "remediation_suggestion": "Ensure persistent database directories are located in secure environments. Block unauthorized exports." |
807 | 807 | }, |
808 | 808 | "review_required": true, |
809 | | - "integration_notes": "Offline candidate assessment generated for finding ID: find_vector_zo63duos. Blocked from export due to 3 unresolved blocking evidence gaps.", |
| 809 | + "integration_notes": "Offline candidate assessment generated for finding ID: find_vector_ti54r6x4. Blocked from export due to 3 unresolved blocking evidence gaps.", |
810 | 810 | "review_status": "blocked_missing_context", |
811 | 811 | "evidence_gaps": [ |
812 | 812 | { |
|
0 commit comments