codacy-opengrep/docs/multiple-tests/codacy-rules/results.xml at 336b1c7c32f64a66e0d6daa0c7b984ad79a04c34 · codacy/codacy-opengrep · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
<?xml version="1.0" encoding="utf-8" ?>
<checkstyle version="1.5">
    <file name="codacy-csharp-security-hard-coded-password.cs">
        <error source="codacy.csharp.security.hard-coded-password" line="9" message="Hardcoded passwords are a security risk." severity="error" />
        <error source="codacy.csharp.security.hard-coded-password" line="10" message="Hardcoded passwords are a security risk." severity="error" />
        <error source="codacy.csharp.security.null-dereference" line="25" message="Potential null dereference detected." severity="error" />
        <error source="codacy.csharp.security.null-dereference" line="28" message="Potential null dereference detected." severity="error" />
        <error source="codacy.csharp.security.null-dereference" line="28" message="Potential null dereference detected." severity="error" />
    </file>
    <file name="test_find_all_passwords_and_empty_string.pls">
        <error source="codacy.generic.plsql.empty-strings" line="33" message="Empty strings can lead to unexpected behavior and should be handled carefully." severity="warning" />
        <error source="codacy.generic.plsql.find-all-passwords" line="6" message="Hardcoded or exposed passwords are a security risk." severity="error" />
        <error source="codacy.generic.plsql.find-all-passwords" line="7" message="Hardcoded or exposed passwords are a security risk." severity="error" />
        <error source="codacy.generic.plsql.find-all-passwords" line="8" message="Hardcoded or exposed passwords are a security risk." severity="error" />
        <error source="codacy.generic.plsql.find-all-passwords" line="9" message="Hardcoded or exposed passwords are a security risk." severity="error" />
        <error source="codacy.generic.plsql.find-all-passwords" line="10" message="Hardcoded or exposed passwords are a security risk." severity="error" />
    </file>
    <file name="test_resource_injection.pls">
        <error source="codacy.generic.plsql.resource-injection" line="16" message="Resource injection detected." severity="error" />
        <error source="codacy.generic.plsql.resource-injection" line="17" message="Resource injection detected." severity="error" />
        <error source="codacy.generic.plsql.resource-injection" line="18" message="Resource injection detected." severity="error" />
        <error source="codacy.generic.plsql.resource-injection" line="19" message="Resource injection detected." severity="error" />
        <error source="codacy.generic.plsql.resource-injection" line="20" message="Resource injection detected." severity="error" />
        <error source="codacy.generic.plsql.resource-injection" line="21" message="Resource injection detected." severity="error" />
        <error source="codacy.generic.plsql.resource-injection" line="22" message="Resource injection detected." severity="error" />
        <error source="codacy.generic.plsql.resource-injection" line="23" message="Resource injection detected." severity="error" />
        <error source="codacy.generic.plsql.resource-injection" line="24" message="Resource injection detected." severity="error" />
        <error source="codacy.generic.plsql.resource-injection" line="25" message="Resource injection detected." severity="error" />
        <error source="codacy.generic.plsql.resource-injection" line="26" message="Resource injection detected." severity="error" />
    </file>
    <file name="codacy.generic.security.detect-invisible-unicode.yaml">
        <error source="codacy.generic.security.detect-invisible-unicode" line="2" message="It's possible to embed malicious secret instructions to AI rules files using unicode characters that are invisible to human reviewers.This can lead to future AI-generated code that has security vulnerabilities or other weaknesses baked in which may not be noticed." severity="warning" />
    </file>
    <file name="codacy.csharp-lowercase.cs">
        <error source="codacy.generic.csharp-lowercase-variables" line="5" message="Variable names should be lowercase" severity="info" />
    </file>
    <file name="codacy_apenai_non_guardrails.py">
        <error source="codacy.python.openai.non-guardrails-direct-call" line="6" message="Direct OpenAI SDK call detected." severity="warning" />
        <error source="codacy.python.openai.non-guardrails-client-usage" line="3" message="OpenAI client used without Guardrails." severity="warning" />
        <error source="codacy.python.openai.non-guardrails-client-usage" line="3" message="OpenAI client used without Guardrails." severity="warning" />
        <error source="codacy.python.openai.import-without-guardrails" line="2" message="OpenAI SDK imported without Guardrails import." severity="info" />
    </file>
    <file name="codacy-csharp-injection.cs">
        <error source="codacy.csharp.security.sql-injection.dynamic-query" line="36" message="Possible SQL Injection via dynamic SQL (SELECT/INSERT/UPDATE/DELETE/EXEC) concatenation; use parameterized queries (command.Parameters.Add / AddWithValue) instead." severity="error" />
    </file>
    <file name="codacy-csharp-exception.cs">
        <error source="codacy.csharp.best-practice.misleading-exception-class-name" line="26" message="Class name contains 'Exception' but does not inherit from System.Exception or its subclasses." severity="warning" />
        <error source="codacy.csharp.best-practice.misleading-exception-class-name" line="33" message="Class name contains 'Exception' but does not inherit from System.Exception or its subclasses." severity="warning" />
    </file>
    <file name="codacy.k8s.ingress.nginx.retirement.yaml">
        <error source="codacy.k8s.ingress.nginx.retirement.ingress-resource" line="5" message="This Ingress is configured to use the Ingress NGINX controller (kubernetes.io/ingress.class: nginx or ingressClassName: nginx). Ingress NGINX is scheduled for retirement (no fixes after March 2026). Plan to migrate to Gateway API or another Ingress controller." severity="error" />
        <error source="codacy.k8s.ingress.nginx.retirement.ingress-resource" line="26" message="This Ingress is configured to use the Ingress NGINX controller (kubernetes.io/ingress.class: nginx or ingressClassName: nginx). Ingress NGINX is scheduled for retirement (no fixes after March 2026). Plan to migrate to Gateway API or another Ingress controller." severity="error" />
        <error source="codacy.k8s.ingress.nginx.retirement.ingress-class" line="46" message="This IngressClass is wired to the Ingress NGINX controller (spec.controller: k8s.io/ingress-nginx). Ingress NGINX is scheduled for retirement (no fixes after March 2026). Plan to migrate to Gateway API or another Ingress controller." severity="error" />
        <error source="codacy.k8s.ingress.nginx.retirement.workload" line="55" message="This Kubernetes resource is labelled as part of the Ingress NGINX controller stack (app.kubernetes.io/name: ingress-nginx). Ingress NGINX is scheduled for retirement (no fixes after March 2026). Plan to migrate to Gateway API or another Ingress controller." severity="error" />
    </file>
    <file name="codacy-shell.sh">
        <error source="codacy.bash.security.hard-coded-password" line="1" message="Hardcoded passwords are a security risk." severity="error" />
    </file>
</checkstyle>