Skip to content

Commit b4fc402

Browse files
author
hypatia-estate-rescan
committed
scan: estate rescan (6 repos, panic-attack refresh)
1 parent 064d5a7 commit b4fc402

6 files changed

Lines changed: 23904 additions & 11128 deletions

File tree

‎scans/bag-of-actions.json‎

Lines changed: 168 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,168 @@
1+
{
2+
"schema_version": "2.5",
3+
"program_path": "bag-of-actions",
4+
"language": "elixir",
5+
"frameworks": [
6+
"OTP"
7+
],
8+
"weak_points": [
9+
{
10+
"category": "MutationGap",
11+
"location": "bag/test/bag_test.exs",
12+
"file": "bag/test/bag_test.exs",
13+
"severity": "Low",
14+
"description": "Elixir test file bag/test/bag_test.exs uses ExUnit.Case but has no ExUnitProperties/StreamData — add property-based tests to improve mutation coverage",
15+
"recommended_attack": [
16+
"cpu"
17+
],
18+
"test_context": "test_only"
19+
},
20+
{
21+
"category": "CommandInjection",
22+
"location": "bag/lib/bag/executor.ex",
23+
"file": "bag/lib/bag/executor.ex",
24+
"severity": "Medium",
25+
"description": "System command execution in bag/lib/bag/executor.ex",
26+
"recommended_attack": [
27+
"cpu",
28+
"disk"
29+
],
30+
"test_context": "production"
31+
}
32+
],
33+
"statistics": {
34+
"total_lines": 899,
35+
"unsafe_blocks": 0,
36+
"panic_sites": 0,
37+
"unwrap_calls": 0,
38+
"allocation_sites": 1,
39+
"io_operations": 5,
40+
"threading_constructs": 1
41+
},
42+
"file_statistics": [
43+
{
44+
"file_path": "bag/lib/bag/mesh.ex",
45+
"lines": 98,
46+
"unsafe_blocks": 0,
47+
"panic_sites": 0,
48+
"unwrap_calls": 0,
49+
"allocation_sites": 0,
50+
"io_operations": 0,
51+
"threading_constructs": 1
52+
},
53+
{
54+
"file_path": "bag/lib/bag/executor.ex",
55+
"lines": 70,
56+
"unsafe_blocks": 0,
57+
"panic_sites": 0,
58+
"unwrap_calls": 0,
59+
"allocation_sites": 0,
60+
"io_operations": 2,
61+
"threading_constructs": 0
62+
},
63+
{
64+
"file_path": "src/root.zig",
65+
"lines": 25,
66+
"unsafe_blocks": 0,
67+
"panic_sites": 0,
68+
"unwrap_calls": 0,
69+
"allocation_sites": 0,
70+
"io_operations": 1,
71+
"threading_constructs": 0
72+
},
73+
{
74+
"file_path": "src/main.zig",
75+
"lines": 145,
76+
"unsafe_blocks": 0,
77+
"panic_sites": 0,
78+
"unwrap_calls": 0,
79+
"allocation_sites": 1,
80+
"io_operations": 2,
81+
"threading_constructs": 0
82+
}
83+
],
84+
"recommended_attacks": [
85+
"disk",
86+
"cpu"
87+
],
88+
"dependency_graph": {
89+
"edges": [
90+
{
91+
"from": "src/root.zig",
92+
"to": "src/main.zig",
93+
"relation": "shared_dir:src",
94+
"weight": 1.0
95+
},
96+
{
97+
"from": "bag/lib/bag/mesh.ex",
98+
"to": "bag/lib/bag/executor.ex",
99+
"relation": "shared_dir:bag/lib/bag",
100+
"weight": 1.0
101+
},
102+
{
103+
"from": "bag/lib/bag/mesh.ex",
104+
"to": "OTP",
105+
"relation": "framework",
106+
"weight": 2.0
107+
},
108+
{
109+
"from": "bag/lib/bag/executor.ex",
110+
"to": "OTP",
111+
"relation": "framework",
112+
"weight": 1.0
113+
},
114+
{
115+
"from": "src/root.zig",
116+
"to": "OTP",
117+
"relation": "framework",
118+
"weight": 1.0
119+
},
120+
{
121+
"from": "src/main.zig",
122+
"to": "OTP",
123+
"relation": "framework",
124+
"weight": 1.0
125+
}
126+
]
127+
},
128+
"taint_matrix": {
129+
"rows": [
130+
{
131+
"source_category": "MutationGap",
132+
"sink_axis": "cpu",
133+
"severity_value": 1.0,
134+
"files": [
135+
"bag/test/bag_test.exs"
136+
],
137+
"frameworks": [
138+
"OTP"
139+
],
140+
"relation": "MutationGap->Cpu"
141+
},
142+
{
143+
"source_category": "CommandInjection",
144+
"sink_axis": "cpu",
145+
"severity_value": 2.5,
146+
"files": [
147+
"bag/lib/bag/executor.ex"
148+
],
149+
"frameworks": [
150+
"OTP"
151+
],
152+
"relation": "CommandInjection->Cpu"
153+
},
154+
{
155+
"source_category": "CommandInjection",
156+
"sink_axis": "disk",
157+
"severity_value": 2.5,
158+
"files": [
159+
"bag/lib/bag/executor.ex"
160+
],
161+
"frameworks": [
162+
"OTP"
163+
],
164+
"relation": "CommandInjection->Disk"
165+
}
166+
]
167+
}
168+
}

0 commit comments

Comments
 (0)