{"schema_version":"2","scorer_version":"0.1.0","scoring_version":"prov-5+qual-2+sec-2","generated_at":"2026-11-14T15:46:54.128823Z","repo":{"ref":{"host":"github.com","owner":"FuelLabs","name":"fuel-core"},"default_branch":"master","clone_url":"https://github.com/FuelLabs/fuel-core.git","html_url":"https://github.com/FuelLabs/fuel-core","description":"Rust full node implementation of the Fuel v2 protocol.","stars":56755,"forks":2873,"is_fork":false,"is_archived":false,"is_private":false,"size_kb":911889,"primary_language":"Rust","license_spdx":"Apache-2.0","created_at":"2020-08-27T21:12:14Z","pushed_at":"2026-11-11T00:38:54Z","security_policy_url":"https://github.com/FuelLabs/fuel-core/security/policy","distribution":{"owner_created_at":"2019-09-30T15:56:25Z","owner_type":"Organization","release_assets":[{"name":"fuel-core-0.48.4-aarch64-apple-darwin.tar.gz","size":26395622,"download_count":5,"release_tag":"v0.48.4","url":"https://github.com/FuelLabs/fuel-core/releases/download/v0.48.4/fuel-core-0.48.4-aarch64-apple-darwin.tar.gz"},{"name":"fuel-core-0.48.4-aarch64-unknown-linux-gnu.tar.gz","size":28808897,"download_count":6,"release_tag":"v0.48.4","url":"https://github.com/FuelLabs/fuel-core/releases/download/v0.48.4/fuel-core-0.48.4-aarch64-unknown-linux-gnu.tar.gz"},{"name":"fuel-core-0.48.4-x86_64-apple-darwin.tar.gz","size":29633628,"download_count":5,"release_tag":"v0.48.4","url":"https://github.com/FuelLabs/fuel-core/releases/download/v0.48.4/fuel-core-0.48.4-x86_64-apple-darwin.tar.gz"},{"name":"fuel-core-0.48.4-x86_64-unknown-linux-gnu.tar.gz","size":30861671,"download_count":23,"release_tag":"v0.48.4","url":"https://github.com/FuelLabs/fuel-core/releases/download/v0.48.4/fuel-core-0.48.4-x86_64-unknown-linux-gnu.tar.gz"},{"name":"fuel-core-0.48.3-aarch64-apple-darwin.tar.gz","size":26719218,"download_count":237,"release_tag":"v0.48.3","url":"https://github.com/FuelLabs/fuel-core/releases/download/v0.48.3/fuel-core-0.48.3-aarch64-apple-darwin.tar.gz"},{"name":"fuel-core-0.48.3-aarch64-unknown-linux-gnu.tar.gz","size":28902626,"download_count":304,"release_tag":"v0.48.3","url":"https://github.com/FuelLabs/fuel-core/releases/download/v0.48.3/fuel-core-0.48.3-aarch64-unknown-linux-gnu.tar.gz"},{"name":"fuel-core-0.48.3-x86_64-apple-darwin.tar.gz","size":29405737,"download_count":191,"release_tag":"v0.48.3","url":"https://github.com/FuelLabs/fuel-core/releases/download/v0.48.3/fuel-core-0.48.3-x86_64-apple-darwin.tar.gz"},{"name":"fuel-core-0.48.3-x86_64-unknown-linux-gnu.tar.gz","size":30588970,"download_count":1726,"release_tag":"v0.48.3","url":"https://github.com/FuelLabs/fuel-core/releases/download/v0.48.3/fuel-core-0.48.3-x86_64-unknown-linux-gnu.tar.gz"},{"name":"fuel-core-0.48.2-aarch64-apple-darwin.tar.gz","size":26674478,"download_count":82,"release_tag":"v0.48.2","url":"https://github.com/FuelLabs/fuel-core/releases/download/v0.48.2/fuel-core-0.48.2-aarch64-apple-darwin.tar.gz"},{"name":"fuel-core-0.48.2-aarch64-unknown-linux-gnu.tar.gz","size":28877756,"download_count":2641,"release_tag":"v0.48.2","url":"https://github.com/FuelLabs/fuel-core/releases/download/v0.48.2/fuel-core-0.48.2-aarch64-unknown-linux-gnu.tar.gz"},{"name":"fuel-core-0.48.2-x86_64-apple-darwin.tar.gz","size":29339377,"download_count":28,"release_tag":"v0.48.2","url":"https://github.com/FuelLabs/fuel-core/releases/download/v0.48.2/fuel-core-0.48.2-x86_64-apple-darwin.tar.gz"},{"name":"fuel-core-0.48.2-x86_64-unknown-linux-gnu.tar.gz","size":30567442,"download_count":25165,"release_tag":"v0.48.2","url":"https://github.com/FuelLabs/fuel-core/releases/download/v0.48.2/fuel-core-0.48.2-x86_64-unknown-linux-gnu.tar.gz"},{"name":"fuel-core-0.48.1-aarch64-apple-darwin.tar.gz","size":26627642,"download_count":23,"release_tag":"v0.48.1","url":"https://github.com/FuelLabs/fuel-core/releases/download/v0.48.1/fuel-core-0.48.1-aarch64-apple-darwin.tar.gz"},{"name":"fuel-core-0.48.1-aarch64-unknown-linux-gnu.tar.gz","size":28825989,"download_count":15,"release_tag":"v0.48.1","url":"https://github.com/FuelLabs/fuel-core/releases/download/v0.48.1/fuel-core-0.48.1-aarch64-unknown-linux-gnu.tar.gz"},{"name":"fuel-core-0.48.1-x86_64-apple-darwin.tar.gz","size":29293979,"download_count":12,"release_tag":"v0.48.1","url":"https://github.com/FuelLabs/fuel-core/releases/download/v0.48.1/fuel-core-0.48.1-x86_64-apple-darwin.tar.gz"},{"name":"fuel-core-0.48.1-x86_64-unknown-linux-gnu.tar.gz","size":30524506,"download_count":653,"release_tag":"v0.48.1","url":"https://github.com/FuelLabs/fuel-core/releases/download/v0.48.1/fuel-core-0.48.1-x86_64-unknown-linux-gnu.tar.gz"},{"name":"fuel-core-0.47.4-aarch64-apple-darwin.tar.gz","size":25374347,"download_count":7,"release_tag":"v0.47.4","url":"https://github.com/FuelLabs/fuel-core/releases/download/v0.47.4/fuel-core-0.47.4-aarch64-apple-darwin.tar.gz"},{"name":"fuel-core-0.47.4-aarch64-unknown-linux-gnu.tar.gz","size":26838108,"download_count":7,"release_tag":"v0.47.4","url":"https://github.com/FuelLabs/fuel-core/releases/download/v0.47.4/fuel-core-0.47.4-aarch64-unknown-linux-gnu.tar.gz"},{"name":"fuel-core-0.47.4-x86_64-apple-darwin.tar.gz","size":27878811,"download_count":7,"release_tag":"v0.47.4","url":"https://github.com/FuelLabs/fuel-core/releases/download/v0.47.4/fuel-core-0.47.4-x86_64-apple-darwin.tar.gz"},{"name":"fuel-core-0.47.4-x86_64-unknown-linux-gnu.tar.gz","size":28583951,"download_count":24,"release_tag":"v0.47.4","url":"https://github.com/FuelLabs/fuel-core/releases/download/v0.47.4/fuel-core-0.47.4-x86_64-unknown-linux-gnu.tar.gz"},{"name":"fuel-core-0.48.0-aarch64-apple-darwin.tar.gz","size":26582769,"download_count":44,"release_tag":"v0.48.0","url":"https://github.com/FuelLabs/fuel-core/releases/download/v0.48.0/fuel-core-0.48.0-aarch64-apple-darwin.tar.gz"},{"name":"fuel-core-0.48.0-aarch64-unknown-linux-gnu.tar.gz","size":28779519,"download_count":17,"release_tag":"v0.48.0","url":"https://github.com/FuelLabs/fuel-core/releases/download/v0.48.0/fuel-core-0.48.0-aarch64-unknown-linux-gnu.tar.gz"},{"name":"fuel-core-0.48.0-x86_64-apple-darwin.tar.gz","size":29180844,"download_count":12,"release_tag":"v0.48.0","url":"https://github.com/FuelLabs/fuel-core/releases/download/v0.48.0/fuel-core-0.48.0-x86_64-apple-darwin.tar.gz"},{"name":"fuel-core-0.48.0-x86_64-unknown-linux-gnu.tar.gz","size":30415370,"download_count":6428,"release_tag":"v0.48.0","url":"https://github.com/FuelLabs/fuel-core/releases/download/v0.48.0/fuel-core-0.48.0-x86_64-unknown-linux-gnu.tar.gz"},{"name":"fuel-core-0.47.3-aarch64-apple-darwin.tar.gz","size":25352654,"download_count":5,"release_tag":"v0.47.3","url":"https://github.com/FuelLabs/fuel-core/releases/download/v0.47.3/fuel-core-0.47.3-aarch64-apple-darwin.tar.gz"},{"name":"fuel-core-0.47.3-aarch64-unknown-linux-gnu.tar.gz","size":26814924,"download_count":6,"release_tag":"v0.47.3","url":"https://github.com/FuelLabs/fuel-core/releases/download/v0.47.3/fuel-core-0.47.3-aarch64-unknown-linux-gnu.tar.gz"},{"name":"fuel-core-0.47.3-x86_64-apple-darwin.tar.gz","size":27854320,"download_count":6,"release_tag":"v0.47.3","url":"https://github.com/FuelLabs/fuel-core/releases/download/v0.47.3/fuel-core-0.47.3-x86_64-apple-darwin.tar.gz"},{"name":"fuel-core-0.47.3-x86_64-unknown-linux-gnu.tar.gz","size":28563224,"download_count":347,"release_tag":"v0.47.3","url":"https://github.com/FuelLabs/fuel-core/releases/download/v0.47.3/fuel-core-0.47.3-x86_64-unknown-linux-gnu.tar.gz"},{"name":"fuel-core-0.47.2-aarch64-apple-darwin.tar.gz","size":25358760,"download_count":6,"release_tag":"v0.47.2","url":"https://github.com/FuelLabs/fuel-core/releases/download/v0.47.2/fuel-core-0.47.2-aarch64-apple-darwin.tar.gz"},{"name":"fuel-core-0.47.2-aarch64-unknown-linux-gnu.tar.gz","size":26779827,"download_count":21,"release_tag":"v0.47.2","url":"https://github.com/FuelLabs/fuel-core/releases/download/v0.47.2/fuel-core-0.47.2-aarch64-unknown-linux-gnu.tar.gz"},{"name":"fuel-core-0.47.2-x86_64-apple-darwin.tar.gz","size":27876262,"download_count":6,"release_tag":"v0.47.2","url":"https://github.com/FuelLabs/fuel-core/releases/download/v0.47.2/fuel-core-0.47.2-x86_64-apple-darwin.tar.gz"},{"name":"fuel-core-0.47.2-x86_64-unknown-linux-gnu.tar.gz","size":28516417,"download_count":66,"release_tag":"v0.47.2","url":"https://github.com/FuelLabs/fuel-core/releases/download/v0.47.2/fuel-core-0.47.2-x86_64-unknown-linux-gnu.tar.gz"},{"name":"fuel-core-0.47.1-aarch64-apple-darwin.tar.gz","size":25119116,"download_count":218,"release_tag":"v0.47.1","url":"https://github.com/FuelLabs/fuel-core/releases/download/v0.47.1/fuel-core-0.47.1-aarch64-apple-darwin.tar.gz"},{"name":"fuel-core-0.47.1-aarch64-unknown-linux-gnu.tar.gz","size":26544528,"download_count":4250,"release_tag":"v0.47.1","url":"https://github.com/FuelLabs/fuel-core/releases/download/v0.47.1/fuel-core-0.47.1-aarch64-unknown-linux-gnu.tar.gz"},{"name":"fuel-core-0.47.1-x86_64-apple-darwin.tar.gz","size":27621707,"download_count":54,"release_tag":"v0.47.1","url":"https://github.com/FuelLabs/fuel-core/releases/download/v0.47.1/fuel-core-0.47.1-x86_64-apple-darwin.tar.gz"},{"name":"fuel-core-0.47.1-x86_64-unknown-linux-gnu.tar.gz","size":28259222,"download_count":42733,"release_tag":"v0.47.1","url":"https://github.com/FuelLabs/fuel-core/releases/download/v0.47.1/fuel-core-0.47.1-x86_64-unknown-linux-gnu.tar.gz"},{"name":"fuel-core-0.46.0-aarch64-apple-darwin.tar.gz","size":24497397,"download_count":136,"release_tag":"v0.46.0","url":"https://github.com/FuelLabs/fuel-core/releases/download/v0.46.0/fuel-core-0.46.0-aarch64-apple-darwin.tar.gz"},{"name":"fuel-core-0.46.0-aarch64-unknown-linux-gnu.tar.gz","size":25796823,"download_count":422,"release_tag":"v0.46.0","url":"https://github.com/FuelLabs/fuel-core/releases/download/v0.46.0/fuel-core-0.46.0-aarch64-unknown-linux-gnu.tar.gz"},{"name":"fuel-core-0.46.0-x86_64-apple-darwin.tar.gz","size":26944980,"download_count":20,"release_tag":"v0.46.0","url":"https://github.com/FuelLabs/fuel-core/releases/download/v0.46.0/fuel-core-0.46.0-x86_64-apple-darwin.tar.gz"},{"name":"fuel-core-0.46.0-x86_64-unknown-linux-gnu.tar.gz","size":27719386,"download_count":17083,"release_tag":"v0.46.0","url":"https://github.com/FuelLabs/fuel-core/releases/download/v0.46.0/fuel-core-0.46.0-x86_64-unknown-linux-gnu.tar.gz"}]}},"commit_sha":"8bd82d4d1ff4e6da7a0e9febbe96e6a864d79f1f","profile":{"lines_by_language":{"Rust":198819,"Shell":251,"Lua":181,"Python":17},"files_by_category":{"source":687,"config":103,"test":100,"other":67,"docs":40,"oversized":4,"binary":4,"generated":2},"source_lines":167762,"test_lines":31506},"pillars":{"ai_provenance":{"score":1.7,"confidence":0.95,"coverage":1.0,"label":"explicit","breakdown":{"attributed_share":0.0169,"suspected_share":0.0172,"estimated_share":0.0169,"ai_artifacts":1.0,"flagged_work_units":1.0,"flagged_releases":0.0,"style_index":0.012},"summary":"Explicit AI attribution on 2% of first-party code added; an estimated 2% including velocity signals."},"quality":{"score":74.7,"confidence":0.9,"coverage":1.0,"label":"adequate","breakdown":{"complexity":67.0,"duplication":38.0,"lint":100.0,"testing":84.4,"docs":100.0,"type_safety":40.0,"process":null},"summary":"Code quality is adequate: test-to-source ratio 0.19, CI runs tests; 13% of function code in complex or long functions; 16% duplicated lines. Weakest area: duplication."},"security":{"score":33.4,"confidence":0.85,"coverage":1.0,"label":"poor","breakdown":{"secrets":17.4,"sast":97.6,"dependencies":0.9,"ci_actions":0.0,"posture":60.0,"scorecard":null},"summary":"Security posture is poor: 1 possible secret(s) in the tree, 0 only in history; 167 known vulnerabilities in 63 dependencies; 3 high-severity SAST findings; 114 high-severity workflow issues. Weakest area: ci actions."}},"analyzer_results":[{"analyzer":"sec-scorecard","pillar":"security","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":"no published OpenSSF Scorecard result for this repo"},{"analyzer":"sec-registry","pillar":"security","status":"ok","tool_version":null,"metrics":{"declared":137.0,"checked":137.0,"missing":0.0,"recent":0.0,"lookup_errors":0.0},"findings":[],"evidence":[],"data":{"phantom":false},"error":null},{"analyzer":"ai-attribution","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"commits":1517.0,"attributed_commits":14.0,"attributed_commit_share":0.00922874093605801,"effective_loc":378339.0,"attributed_loc":6379.0,"attributed_loc_share":0.01686054041481317,"tools_detected":2.0},"findings":[],"evidence":[{"kind":"attribution-summary","description":"Claude Code: 9 attributed commits, 1,274 lines added","ref":null,"url":null,"weight":1.0},{"kind":"attribution-summary","description":"Cursor agent: 5 attributed commits, 5,105 lines added","ref":null,"url":null,"weight":1.0},{"kind":"attributed-commit","description":"Cursor agent: trailer 'Co-authored-by: Cursor'","ref":"8bd82d4d1ff4e6da7a0e9febbe96e6a864d79f1f","url":"https://github.com/FuelLabs/fuel-core/commit/8bd82d4d1ff4e6da7a0e9febbe96e6a864d79f1f","weight":0.9},{"kind":"attributed-commit","description":"Cursor agent: trailer 'Co-authored-by: Cursor'","ref":"773481623431b84b9f7179b9bfeb811b9d8d3073","url":"https://github.com/FuelLabs/fuel-core/commit/773481623431b84b9f7179b9bfeb811b9d8d3073","weight":0.9},{"kind":"attributed-commit","description":"Cursor agent: trailer 'Co-authored-by: Cursor'","ref":"fec988ebe877c4298e2cc0dcc539dec6d080f00b","url":"https://github.com/FuelLabs/fuel-core/commit/fec988ebe877c4298e2cc0dcc539dec6d080f00b","weight":0.9},{"kind":"attributed-commit","description":"Cursor agent: trailer 'Co-authored-by: Cursor'","ref":"93a5400ecee3f36cc85dd294bfceab412e3ee5ab","url":"https://github.com/FuelLabs/fuel-core/commit/93a5400ecee3f36cc85dd294bfceab412e3ee5ab","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-authored-by: Claude'","ref":"5a8c7f85cf5795df52384ef3a28331df14118716","url":"https://github.com/FuelLabs/fuel-core/commit/5a8c7f85cf5795df52384ef3a28331df14118716","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-authored-by: Claude'","ref":"e40b9b3ee8912a82a78576fba082f7f7a2380dca","url":"https://github.com/FuelLabs/fuel-core/commit/e40b9b3ee8912a82a78576fba082f7f7a2380dca","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-authored-by: Claude'","ref":"eceb72b9a07315828afec06100e8c8970ea68b43","url":"https://github.com/FuelLabs/fuel-core/commit/eceb72b9a07315828afec06100e8c8970ea68b43","weight":0.9},{"kind":"attributed-commit","description":"Cursor agent: trailer 'Co-authored-by: Cursor'","ref":"ad8c75564a67d8b598217e25d05e09d1ef664fd0","url":"https://github.com/FuelLabs/fuel-core/commit/ad8c75564a67d8b598217e25d05e09d1ef664fd0","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-authored-by: Claude'","ref":"b9d4d170da3a31c9ace5f963d633b326348e0d42","url":"https://github.com/FuelLabs/fuel-core/commit/b9d4d170da3a31c9ace5f963d633b326348e0d42","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-authored-by: Claude'","ref":"bafc0a4f40589839cd901e38e7b83d711e0cd079","url":"https://github.com/FuelLabs/fuel-core/commit/bafc0a4f40589839cd901e38e7b83d711e0cd079","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-authored-by: Claude'","ref":"540fb5f1afdb94e84190834d757e8452640228cb","url":"https://github.com/FuelLabs/fuel-core/commit/540fb5f1afdb94e84190834d757e8452640228cb","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-authored-by: Claude'","ref":"d7b0ac856a139ad25268a392782e95fd5ae15a3a","url":"https://github.com/FuelLabs/fuel-core/commit/d7b0ac856a139ad25268a392782e95fd5ae15a3a","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-authored-by: Claude'","ref":"dd7fd89a700e16c729a6f1ff4d55fc584979c57b","url":"https://github.com/FuelLabs/fuel-core/commit/dd7fd89a700e16c729a6f1ff4d55fc584979c57b","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-authored-by: Claude'","ref":"a433b39ada31f93c1452ee53ae6520419678ffb1","url":"https://github.com/FuelLabs/fuel-core/commit/a433b39ada31f93c1452ee53ae6520419678ffb1","weight":0.9}],"data":{"attributed_loc_by_commit":{"a433b39ada31f93c1452ee53ae6520419678ffb1":419,"dd7fd89a700e16c729a6f1ff4d55fc584979c57b":39,"d7b0ac856a139ad25268a392782e95fd5ae15a3a":168,"540fb5f1afdb94e84190834d757e8452640228cb":30,"bafc0a4f40589839cd901e38e7b83d711e0cd079":99,"b9d4d170da3a31c9ace5f963d633b326348e0d42":281,"ad8c75564a67d8b598217e25d05e09d1ef664fd0":3323,"eceb72b9a07315828afec06100e8c8970ea68b43":2,"e40b9b3ee8912a82a78576fba082f7f7a2380dca":142,"5a8c7f85cf5795df52384ef3a28331df14118716":94,"93a5400ecee3f36cc85dd294bfceab412e3ee5ab":1780,"fec988ebe877c4298e2cc0dcc539dec6d080f00b":2,"773481623431b84b9f7179b9bfeb811b9d8d3073":0,"8bd82d4d1ff4e6da7a0e9febbe96e6a864d79f1f":0},"tools":{"claude-code":{"name":"Claude Code","commits":9,"loc":1274,"first_seen":1778701173,"last_seen":1788002018},"cursor":{"name":"Cursor agent","commits":5,"loc":5105,"first_seen":1787628709,"last_seen":1794244919}},"monthly":{"2020-08":{"loc":0,"attributed_loc":0},"2020-11":{"loc":2934,"attributed_loc":0},"2020-12":{"loc":1457,"attributed_loc":0},"2021-05":{"loc":3757,"attributed_loc":0},"2021-06":{"loc":631,"attributed_loc":0},"2021-07":{"loc":232,"attributed_loc":0},"2021-08":{"loc":1977,"attributed_loc":0},"2021-09":{"loc":42,"attributed_loc":0},"2021-10":{"loc":101,"attributed_loc":0},"2021-11":{"loc":9472,"attributed_loc":0},"2021-12":{"loc":630,"attributed_loc":0},"2022-01":{"loc":939,"attributed_loc":0},"2022-02":{"loc":6272,"attributed_loc":0},"2022-03":{"loc":4732,"attributed_loc":0},"2022-04":{"loc":2287,"attributed_loc":0},"2022-05":{"loc":5171,"attributed_loc":0},"2022-06":{"loc":5519,"attributed_loc":0},"2022-07":{"loc":3487,"attributed_loc":0},"2022-08":{"loc":4151,"attributed_loc":0},"2022-09":{"loc":12358,"attributed_loc":0},"2022-10":{"loc":12810,"attributed_loc":0},"2022-11":{"loc":5191,"attributed_loc":0},"2022-12":{"loc":14884,"attributed_loc":0},"2023-01":{"loc":16176,"attributed_loc":0},"2023-02":{"loc":5788,"attributed_loc":0},"2023-03":{"loc":4838,"attributed_loc":0},"2023-04":{"loc":4149,"attributed_loc":0},"2023-05":{"loc":4105,"attributed_loc":0},"2023-06":{"loc":3479,"attributed_loc":0},"2023-07":{"loc":2391,"attributed_loc":0},"2023-08":{"loc":4413,"attributed_loc":0},"2023-09":{"loc":2080,"attributed_loc":0},"2023-10":{"loc":5115,"attributed_loc":0},"2023-11":{"loc":5045,"attributed_loc":0},"2023-12":{"loc":4954,"attributed_loc":0},"2024-01":{"loc":9311,"attributed_loc":0},"2024-02":{"loc":5231,"attributed_loc":0},"2024-03":{"loc":24091,"attributed_loc":0},"2024-04":{"loc":11253,"attributed_loc":0},"2024-05":{"loc":2211,"attributed_loc":0},"2024-06":{"loc":6928,"attributed_loc":0},"2024-07":{"loc":6522,"attributed_loc":0},"2024-08":{"loc":7788,"attributed_loc":0},"2024-09":{"loc":8199,"attributed_loc":0},"2024-10":{"loc":23688,"attributed_loc":0},"2024-11":{"loc":5448,"attributed_loc":0},"2024-12":{"loc":3763,"attributed_loc":0},"2025-01":{"loc":14240,"attributed_loc":0},"2025-02":{"loc":16283,"attributed_loc":0},"2025-03":{"loc":21856,"attributed_loc":0},"2025-04":{"loc":7210,"attributed_loc":0},"2025-05":{"loc":998,"attributed_loc":0},"2025-06":{"loc":1356,"attributed_loc":0},"2025-07":{"loc":379,"attributed_loc":0},"2025-08":{"loc":762,"attributed_loc":0},"2025-09":{"loc":3584,"attributed_loc":0},"2025-10":{"loc":4847,"attributed_loc":0},"2025-11":{"loc":1437,"attributed_loc":0},"2025-12":{"loc":322,"attributed_loc":0},"2026-01":{"loc":7482,"attributed_loc":0},"2026-02":{"loc":1304,"attributed_loc":0},"2026-03":{"loc":8099,"attributed_loc":0},"2026-04":{"loc":4335,"attributed_loc":0},"2026-05":{"loc":759,"attributed_loc":626},"2026-06":{"loc":30,"attributed_loc":30},"2026-08":{"loc":3941,"attributed_loc":3941},"2026-09":{"loc":1112,"attributed_loc":0},"2026-10":{"loc":221,"attributed_loc":0},"2026-11":{"loc":1782,"attributed_loc":1782}}},"error":null},{"analyzer":"ai-artifacts","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"artifacts":1.0,"workflow_agents":0.0,"tools_configured":1.0,"earliest_adoption":1787628709.0},"findings":[],"evidence":[{"kind":"ai-artifact","description":"AGENTS.md (generic-agent configuration)","ref":"AGENTS.md","url":"https://github.com/FuelLabs/fuel-core/blob/8bd82d4d1ff4e6da7a0e9febbe96e6a864d79f1f/AGENTS.md","weight":0.5}],"data":{"artifacts":[{"tool":"generic-agent","path":"AGENTS.md","added_at":1787628709}],"workflows":[],"tools":["generic-agent"]},"error":null},{"analyzer":"ai-velocity","pillar":"ai_provenance","status":"ok","tool_version":"prov-5","metrics":{"work_units":1107.0,"flagged_units":1.0,"pre_ai_era_bursts":0.0,"pre_ai_era_measured_loc":5648.0,"pre_ai_era_burst_loc":0.0,"measured_loc":338213.0,"flagged_loc":6504.0,"flagged_loc_share":0.01923048493109372,"max_loc_per_hour":1380.0,"median_loc_per_hour":3.5150441776091883,"pr_timed_units":1100.0,"excluded_import_loc":40126.0},"findings":[],"evidence":[{"kind":"velocity-burst","description":"6,504 lines of first-party code in ~10.9h (599 lines/hour, PR #3241)","ref":"1023559f9d795151c850839fb81e3b9e578131e4","url":"https://github.com/FuelLabs/fuel-core/commit/1023559f9d795151c850839fb81e3b9e578131e4","weight":0.17966850828729283}],"data":{"flagged_loc_by_commit":{"1023559f9d795151c850839fb81e3b9e578131e4":6504},"excluded_import_commits":["07a2888f2ae45bebab83c7219b717f3e30a1990e","142fc328684e9263f377a24ce1db74683e502160","36e33631c21ed13c86e00e79a82957918d67b414","6c27bc1e961ed3ff04cc5b32bef0641a5f718a9f","8ec4c88cb21831b34ce1dd0760d220e804da3fd8","cc5bbc1573961b4ec56d3d9f241ecc65a26141bc","ce72eeaf5c9490f87aa3a39ae7f92087908e7d79","fdcec1cf22d0243c7f0eea6ce3bfcbbf091d1b9c"]},"error":null},{"analyzer":"ai-release-velocity","pillar":"ai_provenance","status":"ok","tool_version":"prov-5","metrics":{"releases":90.0,"flagged_releases":0.0,"max_loc_per_day":1587.9},"findings":[],"evidence":[],"data":{"releases":[{"from":"v0.1.0","to":"v0.1.1","loc":0,"days":0.07,"loc_per_day":0.0,"flagged":false},{"from":"v0.1.1","to":"v0.1.2","loc":55,"days":0.06,"loc_per_day":939.7,"flagged":false},{"from":"v0.1.2","to":"v0.2.0","loc":864,"days":24.92,"loc_per_day":34.7,"flagged":false},{"from":"v0.2.0","to":"v0.2.1","loc":5,"days":3.09,"loc_per_day":1.6,"flagged":false},{"from":"v0.2.1","to":"v0.3.0","loc":2377,"days":13.9,"loc_per_day":171.0,"flagged":false},{"from":"v0.3.0","to":"v0.3.1","loc":0,"days":0.04,"loc_per_day":0.0,"flagged":false},{"from":"v0.3.1","to":"v0.3.2","loc":1639,"days":12.94,"loc_per_day":126.7,"flagged":false},{"from":"v0.3.2","to":"v0.4.1","loc":5144,"days":16.29,"loc_per_day":315.7,"flagged":false},{"from":"v0.4.1","to":"v0.4.2","loc":1692,"days":17.05,"loc_per_day":99.2,"flagged":false},{"from":"v0.4.2","to":"v0.5.0","loc":167,"days":3.93,"loc_per_day":42.5,"flagged":false},{"from":"v0.5.0","to":"v0.6.1","loc":2038,"days":31.96,"loc_per_day":63.8,"flagged":false},{"from":"v0.6.1","to":"v0.6.2","loc":90,"days":0.8,"loc_per_day":112.2,"flagged":false},{"from":"v0.6.2","to":"v0.6.3","loc":214,"days":0.93,"loc_per_day":229.7,"flagged":false},{"from":"v0.6.3","to":"v0.6.4","loc":3466,"days":11.49,"loc_per_day":301.6,"flagged":false},{"from":"v0.6.4","to":"v0.7.0","loc":103,"days":8.78,"loc_per_day":11.7,"flagged":false},{"from":"v0.7.0","to":"v0.7.1","loc":218,"days":4.18,"loc_per_day":52.1,"flagged":false},{"from":"v0.7.1","to":"v0.8.0","loc":1105,"days":1.89,"loc_per_day":583.9,"flagged":false},{"from":"v0.8.0","to":"v0.9.0","loc":4349,"days":20.84,"loc_per_day":208.6,"flagged":false},{"from":"v0.9.0","to":"v0.9.1","loc":0,"days":0.62,"loc_per_day":0.0,"flagged":false},{"from":"v0.9.1","to":"v0.9.2","loc":280,"days":1.3,"loc_per_day":215.5,"flagged":false},{"from":"v0.9.2","to":"v0.9.3","loc":205,"days":5.02,"loc_per_day":40.8,"flagged":false},{"from":"v0.9.3","to":"v0.9.4","loc":728,"days":3.1,"loc_per_day":234.9,"flagged":false},{"from":"v0.9.4","to":"v0.10.0","loc":6109,"days":46.0,"loc_per_day":132.8,"flagged":false},{"from":"v0.10.0","to":"v0.10.1","loc":21,"days":0.97,"loc_per_day":21.6,"flagged":false},{"from":"v0.10.1","to":"v0.11.0","loc":14502,"days":63.1,"loc_per_day":229.8,"flagged":false},{"from":"v0.11.0","to":"v0.11.1","loc":0,"days":0.83,"loc_per_day":0.0,"flagged":false},{"from":"v0.11.1","to":"v0.11.2","loc":13,"days":0.17,"loc_per_day":76.2,"flagged":false},{"from":"v0.11.2","to":"v0.12.0","loc":5089,"days":11.38,"loc_per_day":447.2,"flagged":false},{"from":"v0.12.0","to":"v0.13.0","loc":2693,"days":1.7,"loc_per_day":1587.9,"flagged":false},{"from":"v0.13.0","to":"v0.13.1","loc":145,"days":4.05,"loc_per_day":35.8,"flagged":false},{"from":"v0.13.1","to":"v0.13.2","loc":58,"days":0.66,"loc_per_day":87.6,"flagged":false},{"from":"v0.13.2","to":"v0.14.0","loc":1066,"days":3.93,"loc_per_day":271.0,"flagged":false},{"from":"v0.14.0","to":"v0.14.1","loc":2892,"days":3.58,"loc_per_day":808.7,"flagged":false},{"from":"v0.14.1","to":"v0.15.0","loc":4094,"days":30.59,"loc_per_day":133.8,"flagged":false},{"from":"v0.15.0","to":"v0.15.1","loc":2527,"days":4.48,"loc_per_day":564.1,"flagged":false},{"from":"v0.15.1","to":"v0.16.0","loc":19704,"days":43.67,"loc_per_day":451.2,"flagged":false},{"from":"v0.16.0","to":"v0.16.1","loc":1057,"days":0.76,"loc_per_day":1382.6,"flagged":false},{"from":"v0.16.1","to":"v0.17.0","loc":2952,"days":11.25,"loc_per_day":262.5,"flagged":false},{"from":"v0.17.0","to":"v0.17.1","loc":103,"days":1.88,"loc_per_day":54.9,"flagged":false},{"from":"v0.17.1","to":"v0.17.2","loc":359,"days":5.07,"loc_per_day":70.9,"flagged":false},{"from":"v0.17.2","to":"v0.17.3","loc":1921,"days":6.95,"loc_per_day":276.4,"flagged":false},{"from":"v0.17.3","to":"v0.18.0","loc":9548,"days":64.83,"loc_per_day":147.3,"flagged":false},{"from":"v0.18.0","to":"v0.18.1","loc":54,"days":6.11,"loc_per_day":8.8,"flagged":false},{"from":"v0.18.1","to":"v0.19.0","loc":6245,"days":41.1,"loc_per_day":152.0,"flagged":false},{"from":"v0.19.0","to":"v0.19.1","loc":28,"days":3.04,"loc_per_day":9.2,"flagged":false},{"from":"v0.19.1","to":"v0.20.0","loc":2726,"days":30.89,"loc_per_day":88.3,"flagged":false},{"from":"v0.20.0","to":"v0.20.1","loc":24,"days":0.46,"loc_per_day":52.1,"flagged":false},{"from":"v0.20.1","to":"v0.20.2","loc":952,"days":9.38,"loc_per_day":101.5,"flagged":false},{"from":"v0.20.2","to":"v0.20.3","loc":402,"days":8.12,"loc_per_day":49.5,"flagged":false},{"from":"v0.20.3","to":"v0.20.4","loc":339,"days":5.24,"loc_per_day":64.7,"flagged":false},{"from":"v0.20.4","to":"v0.21.0-rc.1","loc":12320,"days":97.72,"loc_per_day":126.1,"flagged":false},{"from":"v0.21.0-rc.1","to":"v0.21.0","loc":3396,"days":8.22,"loc_per_day":413.2,"flagged":false},{"from":"v0.21.0","to":"v0.22.0","loc":3647,"days":18.05,"loc_per_day":202.1,"flagged":false},{"from":"v0.22.0","to":"v0.23.0","loc":17745,"days":83.86,"loc_per_day":211.6,"flagged":false},{"from":"v0.23.0","to":"v0.24.1","loc":10960,"days":25.56,"loc_per_day":428.8,"flagged":false},{"from":"v0.24.1","to":"v0.24.2","loc":637,"days":5.76,"loc_per_day":110.6,"flagged":false},{"from":"v0.24.2","to":"v0.25.2","loc":7909,"days":14.64,"loc_per_day":540.4,"flagged":false},{"from":"v0.25.2","to":"v0.26.0","loc":2707,"days":10.49,"loc_per_day":258.1,"flagged":false},{"from":"v0.26.0","to":"v0.27.0","loc":1611,"days":29.43,"loc_per_day":54.7,"flagged":false},{"from":"v0.27.0","to":"v0.28.0","loc":2181,"days":8.4,"loc_per_day":259.6,"flagged":false},{"from":"v0.28.0","to":"v0.29.0","loc":877,"days":7.56,"loc_per_day":115.9,"flagged":false},{"from":"v0.29.0","to":"v0.30.0","loc":386,"days":1.96,"loc_per_day":197.3,"flagged":false},{"from":"v0.30.0","to":"v0.31.0","loc":7820,"days":19.16,"loc_per_day":408.2,"flagged":false},{"from":"v0.31.0","to":"v0.32.0","loc":4100,"days":32.01,"loc_per_day":128.1,"flagged":false},{"from":"v0.32.0","to":"v0.32.1","loc":534,"days":3.33,"loc_per_day":160.2,"flagged":false},{"from":"v0.32.1","to":"v0.33.0","loc":2805,"days":8.32,"loc_per_day":337.1,"flagged":false},{"from":"v0.33.0","to":"v0.34.0","loc":1453,"days":2.11,"loc_per_day":688.9,"flagged":false},{"from":"v0.34.0","to":"v0.35.0","loc":1617,"days":7.87,"loc_per_day":205.4,"flagged":false},{"from":"v0.35.0","to":"v0.36.0","loc":5022,"days":20.71,"loc_per_day":242.5,"flagged":false},{"from":"v0.36.0","to":"v0.37.0","loc":13913,"days":17.68,"loc_per_day":786.9,"flagged":false},{"from":"v0.37.0","to":"v0.37.1","loc":261,"days":1.11,"loc_per_day":236.1,"flagged":false},{"from":"v0.37.1","to":"v0.38.0","loc":1192,"days":1.09,"loc_per_day":1091.9,"flagged":false},{"from":"v0.38.0","to":"v0.39.0","loc":2058,"days":3.52,"loc_per_day":584.7,"flagged":false},{"from":"v0.39.0","to":"v0.40.0","loc":2018,"days":3.28,"loc_per_day":615.2,"flagged":false},{"from":"v0.40.0","to":"v0.41.0","loc":22897,"days":92.23,"loc_per_day":248.3,"flagged":false},{"from":"v0.41.0","to":"v0.41.1","loc":1388,"days":7.88,"loc_per_day":176.1,"flagged":false},{"from":"v0.41.1","to":"v0.41.3","loc":5,"days":1.34,"loc_per_day":3.7,"flagged":false},{"from":"v0.41.3","to":"v0.41.4","loc":2,"days":0.39,"loc_per_day":5.2,"flagged":false},{"from":"v0.41.4","to":"v0.41.5","loc":1626,"days":10.13,"loc_per_day":160.5,"flagged":false},{"from":"v0.41.5","to":"v0.41.6","loc":564,"days":1.97,"loc_per_day":286.9,"flagged":false},{"from":"v0.41.6","to":"v0.42.0","loc":33148,"days":40.78,"loc_per_day":812.8,"flagged":false},{"from":"v0.42.0","to":"v0.43.0","loc":8099,"days":22.32,"loc_per_day":362.8,"flagged":false},{"from":"v0.43.0","to":"v0.44.0","loc":4294,"days":46.79,"loc_per_day":91.8,"flagged":false},{"from":"v0.44.0","to":"v0.45.1","loc":1743,"days":61.77,"loc_per_day":28.2,"flagged":false},{"from":"v0.45.1","to":"v0.46.0","loc":684,"days":6.37,"loc_per_day":107.3,"flagged":false},{"from":"v0.46.0","to":"v0.47.1","loc":7007,"days":79.38,"loc_per_day":88.3,"flagged":false},{"from":"v0.47.1","to":"v0.48.0","loc":13129,"days":162.27,"loc_per_day":80.9,"flagged":false},{"from":"v0.48.0","to":"v0.48.1","loc":4318,"days":28.51,"loc_per_day":151.5,"flagged":false},{"from":"v0.48.1","to":"v0.48.2","loc":759,"days":17.64,"loc_per_day":43.0,"flagged":false},{"from":"v0.48.2","to":"v0.48.3","loc":3735,"days":102.16,"loc_per_day":36.6,"flagged":false}]},"error":null},{"analyzer":"ai-stylometry","pillar":"ai_provenance","status":"ok","tool_version":null,"metrics":{"lines_scanned":167762.0,"index":0.012,"count:narrated_steps":2.0,"per_kloc:narrated_steps":0.012,"files:narrated_steps":2.0,"count:placeholder":0.0,"per_kloc:placeholder":0.0,"files:placeholder":0.0,"count:emoji_in_code":0.0,"per_kloc:emoji_in_code":0.0,"files:emoji_in_code":0.0,"count:assistant_voice":0.0,"per_kloc:assistant_voice":0.0,"files:assistant_voice":0.0},"findings":[],"evidence":[{"kind":"stylometry:narrated_steps","description":"step-by-step narration comment: // first, because it adds additional information to the final response.","ref":"crates/fuel-core/src/graphql_api/api_service.rs:436","url":"https://github.com/FuelLabs/fuel-core/blob/8bd82d4d1ff4e6da7a0e9febbe96e6a864d79f1f/crates/fuel-core/src/graphql_api/api_service.rs#L436","weight":0.0},{"kind":"stylometry:narrated_steps","description":"step-by-step narration comment: // First, update the adaptive page sizer, to have the updated page size.","ref":"crates/services/relayer/src/service/get_logs.rs:84","url":"https://github.com/FuelLabs/fuel-core/blob/8bd82d4d1ff4e6da7a0e9febbe96e6a864d79f1f/crates/services/relayer/src/service/get_logs.rs#L84","weight":0.0}],"data":{},"error":null},{"analyzer":"sec-secrets","pillar":"security","status":"ok","tool_version":"gitleaks 8.30.1","metrics":{"secrets_current":1.0,"secrets_history":0.0,"secrets_nonprod":10.0,"secrets_low_confidence":30.0},"findings":[{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in the current tree (test/docs/example file)","path":"bin/fuel-core/chainspec/local-testnet/README.md","line":7,"fingerprint":"bin/fuel-core/chainspec/local-testnet/README.md:generic-api-key:7"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in the current tree (test/docs/example file)","path":"bin/e2e-test-client/src/tests/test_data/large_state/chain_config.json","line":275,"fingerprint":"bin/e2e-test-client/src/tests/test_data/large_state/chain_config.json:generic-api-key:275"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in the current tree","path":"crates/chain-config/src/snapshots/fuel_core_chain_config__config__tests__snapshot_contract_with_state.snap","line":278,"fingerprint":"crates/chain-config/src/snapshots/fuel_core_chain_config__config__tests__snapshot_contract_with_state.snap:generic-api-key:278"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in the current tree","path":"crates/chain-config/src/snapshots/fuel_core_chain_config__config__tests__snapshot_contract_with_tx_pointer.snap","line":274,"fingerprint":"crates/chain-config/src/snapshots/fuel_core_chain_config__config__tests__snapshot_contract_with_tx_pointer.snap:generic-api-key:274"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in the current tree","path":"crates/chain-config/src/snapshots/fuel_core_chain_config__config__tests__snapshot_contract_with_balances.snap","line":278,"fingerprint":"crates/chain-config/src/snapshots/fuel_core_chain_config__config__tests__snapshot_contract_with_balances.snap:generic-api-key:278"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in the current tree","path":"crates/chain-config/src/snapshots/fuel_core_chain_config__config__tests__snapshot_contract_with_utxo_id.snap","line":274,"fingerprint":"crates/chain-config/src/snapshots/fuel_core_chain_config__config__tests__snapshot_contract_with_utxo_id.snap:generic-api-key:274"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in the current tree","path":"crates/chain-config/src/snapshots/fuel_core_chain_config__config__tests__snapshot_local_testnet_config.snap","line":264,"fingerprint":"crates/chain-config/src/snapshots/fuel_core_chain_config__config__tests__snapshot_local_testnet_config.snap:generic-api-key:264"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in the current tree","path":"crates/chain-config/src/snapshots/fuel_core_chain_config__config__tests__snapshot_simple_contract.snap","line":272,"fingerprint":"crates/chain-config/src/snapshots/fuel_core_chain_config__config__tests__snapshot_simple_contract.snap:generic-api-key:272"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in the current tree (test/docs/example file)","path":"bin/e2e-test-client/README.md","line":17,"fingerprint":"bin/e2e-test-client/README.md:generic-api-key:17"},{"rule_id":"gitleaks/coinbase-access-token","severity":"low","message":"Possible coinbase-access-token secret in the current tree (test/docs/example file)","path":"bin/e2e-test-client/README.md","line":13,"fingerprint":"bin/e2e-test-client/README.md:coinbase-access-token:13"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in the current tree","path":"crates/chain-config/src/config/snapshots/fuel_core_chain_config__config__chain__tests__snapshot_configurable_block_height.snap","line":259,"fingerprint":"crates/chain-config/src/config/snapshots/fuel_core_chain_config__config__chain__tests__snapshot_configurable_block_height.snap:generic-api-key:259"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in the current tree","path":"bin/fuel-core/chainspec/local-testnet/chain_config.json","line":316,"fingerprint":"bin/fuel-core/chainspec/local-testnet/chain_config.json:generic-api-key:316"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in the current tree","path":"bin/fuel-core/chainspec/local-testnet/state_config.json","line":8,"fingerprint":"bin/fuel-core/chainspec/local-testnet/state_config.json:generic-api-key:8"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in the current tree","path":"crates/chain-config/src/snapshots/fuel_core_chain_config__config__tests__snapshot_configurable_block_height.snap","line":264,"fingerprint":"crates/chain-config/src/snapshots/fuel_core_chain_config__config__tests__snapshot_configurable_block_height.snap:generic-api-key:264"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in the current tree","path":"crates/chain-config/src/config/snapshots/fuel_core_chain_config__config__chain__tests__snapshot_local_testnet_config.snap","line":320,"fingerprint":"crates/chain-config/src/config/snapshots/fuel_core_chain_config__config__chain__tests__snapshot_local_testnet_config.snap:generic-api-key:320"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in the current tree","path":"crates/chain-config/src/snapshots/fuel_core_chain_config__config__tests__snapshot_simple_coin_state.snap","line":277,"fingerprint":"crates/chain-config/src/snapshots/fuel_core_chain_config__config__tests__snapshot_simple_coin_state.snap:generic-api-key:277"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in the current tree","path":"bin/e2e-test-client/src/snapshots/fuel_core_e2e_client__config__tests__default_config_snapshot.snap","line":11,"fingerprint":"bin/e2e-test-client/src/snapshots/fuel_core_e2e_client__config__tests__default_config_snapshot.snap:generic-api-key:11"},{"rule_id":"gitleaks/coinbase-access-token","severity":"high","message":"Possible coinbase-access-token secret in the current tree","path":"bin/e2e-test-client/src/snapshots/fuel_core_e2e_client__config__tests__default_config_snapshot.snap","line":8,"fingerprint":"bin/e2e-test-client/src/snapshots/fuel_core_e2e_client__config__tests__default_config_snapshot.snap:coinbase-access-token:8"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in the current tree","path":"crates/chain-config/src/snapshots/fuel_core_chain_config__config__tests__snapshot_simple_message_state.snap","line":276,"fingerprint":"crates/chain-config/src/snapshots/fuel_core_chain_config__config__tests__snapshot_simple_message_state.snap:generic-api-key:276"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in the current tree","path":"crates/chain-config/src/config/state/snapshots/fuel_core_chain_config__config__state__writer__tests__json_snapshot_is_human_readable.snap","line":64,"fingerprint":"crates/chain-config/src/config/state/snapshots/fuel_core_chain_config__config__state__writer__tests__json_snapshot_is_human_readable.snap:generic-api-key:64"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in the current tree (test/docs/example file)","path":"version-compatibility/forkless-upgrade/chain-configurations/ignition-v21/README.md","line":7,"fingerprint":"version-compatibility/forkless-upgrade/chain-configurations/ignition-v21/README.md:generic-api-key:7"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in the current tree (test/docs/example file)","path":"version-compatibility/forkless-upgrade/chain-configurations/ignition/README.md","line":6,"fingerprint":"version-compatibility/forkless-upgrade/chain-configurations/ignition/README.md:generic-api-key:6"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in the current tree (test/docs/example file)","path":"version-compatibility/forkless-upgrade/chain-configurations/v44/README.md","line":8,"fingerprint":"version-compatibility/forkless-upgrade/chain-configurations/v44/README.md:generic-api-key:8"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in the current tree","path":"version-compatibility/forkless-upgrade/chain-configurations/ignition-v21/chain_config.json","line":315,"fingerprint":"version-compatibility/forkless-upgrade/chain-configurations/ignition-v21/chain_config.json:generic-api-key:315"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in the current tree","path":"version-compatibility/forkless-upgrade/chain-configurations/ignition/chain_config.json","line":268,"fingerprint":"version-compatibility/forkless-upgrade/chain-configurations/ignition/chain_config.json:generic-api-key:268"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in the current tree","path":"version-compatibility/forkless-upgrade/chain-configurations/v44/chain_config.json","line":303,"fingerprint":"version-compatibility/forkless-upgrade/chain-configurations/v44/chain_config.json:generic-api-key:303"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in the current tree","path":"crates/types/src/signer.rs","line":247,"fingerprint":"crates/types/src/signer.rs:generic-api-key:247"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in history (commit 8fa66f2276); removed from the current tree but still retrievable","path":"crates/services/executor/src/hacks.rs","line":28,"fingerprint":"8fa66f22767f2e52d3988a434156ff5add5283d5:crates/services/executor/src/hacks.rs:generic-api-key:28"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in history (commit 301fb606d4); removed from the current tree but still retrievable","path":"version-compatibility/forkless-upgrade/chain-configurations/v36/README.md","line":8,"fingerprint":"301fb606d44c30a159a2225403984cda3a7e806f:version-compatibility/forkless-upgrade/chain-configurations/v36/README.md:generic-api-key:8"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in history (commit 301fb606d4); removed from the current tree but still retrievable","path":"version-compatibility/forkless-upgrade/chain-configurations/v36/chain_config.json","line":303,"fingerprint":"301fb606d44c30a159a2225403984cda3a7e806f:version-compatibility/forkless-upgrade/chain-configurations/v36/chain_config.json:generic-api-key:303"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in history (commit 020656a7ee); removed from the current tree but still retrievable","path":"crates/chain-config/src/config/snapshots/fuel_core_chain_config__config__chain__tests__snapshot_local_testnet_config.snap.new","line":308,"fingerprint":"020656a7eed3095c103a951bdc0661bc42786454:crates/chain-config/src/config/snapshots/fuel_core_chain_config__config__chain__tests__snapshot_local_testnet_config.snap.new:generic-api-key:308"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in history (commit 6ef1d58b2a); removed from the current tree but still retrievable","path":"crates/services/consensus_module/poa/src/signer.rs","line":218,"fingerprint":"6ef1d58b2a1a0167210f4292c9b4acfeaa4f365c:crates/services/consensus_module/poa/src/signer.rs:generic-api-key:218"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in history (commit 36e33631c2); removed from the current tree but still retrievable","path":"deployment/scripts/chainspec/dev/chain_config.json","line":252,"fingerprint":"36e33631c21ed13c86e00e79a82957918d67b414:deployment/scripts/chainspec/dev/chain_config.json:generic-api-key:252"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in history (commit c9757ad4fa); removed from the current tree but still retrievable","path":"deployment/scripts/chainspec/beta/chain_config.json","line":247,"fingerprint":"c9757ad4fafd21896fb92c802cd7114d02163c36:deployment/scripts/chainspec/beta/chain_config.json:generic-api-key:247"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in history (commit d6027f3ab9); removed from the current tree but still retrievable","path":"crates/chain-config/src/config/snapshots/fuel_core_chain_config__config__chain__tests__snapshot_configurable_block_height.snap.new","line":198,"fingerprint":"d6027f3ab9442296f6e8ce817614da5db7595a0b:crates/chain-config/src/config/snapshots/fuel_core_chain_config__config__chain__tests__snapshot_configurable_block_height.snap.new:generic-api-key:198"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in history (commit 498dae6b3b); removed from the current tree but still retrievable","path":"deployment/scripts/chainspec/dev_chainparams_spec.json","line":193,"fingerprint":"498dae6b3b4d2b258d02824f133896a74379beca:deployment/scripts/chainspec/dev_chainparams_spec.json:generic-api-key:193"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in history (commit 498dae6b3b); removed from the current tree but still retrievable","path":"deployment/scripts/chainspec/beta_chainparams_spec.json","line":232,"fingerprint":"498dae6b3b4d2b258d02824f133896a74379beca:deployment/scripts/chainspec/beta_chainparams_spec.json:generic-api-key:232"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in history (commit 01827a4feb); removed from the current tree but still retrievable","path":"deployment/scripts/chainspec/beta_chainspec.json","line":202,"fingerprint":"01827a4feb20473bdba7235feae1d2169cc00de0:deployment/scripts/chainspec/beta_chainspec.json:generic-api-key:202"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in history (commit 01827a4feb); removed from the current tree but still retrievable","path":"deployment/scripts/chainspec/dev_chainspec.json","line":172,"fingerprint":"01827a4feb20473bdba7235feae1d2169cc00de0:deployment/scripts/chainspec/dev_chainspec.json:generic-api-key:172"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in history (commit c7bc4c2b57); removed from the current tree but still retrievable","path":"bin/e2e-test-client/tests/chainconfig.json","line":228,"fingerprint":"c7bc4c2b5731c1265de2b666ecc4092dc6ae5d7d:bin/e2e-test-client/tests/chainconfig.json:generic-api-key:228"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in history (commit 099853c739); removed from the current tree but still retrievable","path":"bin/e2e-test-client/src/tests/test_data/large_state/state_config.json","line":14,"fingerprint":"099853c739fdc365de3917fa09ab1885d754398d:bin/e2e-test-client/src/tests/test_data/large_state/state_config.json:generic-api-key:14"}],"evidence":[],"data":{},"error":null},{"analyzer":"sec-sast","pillar":"security","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":28.0,"findings_high":3.0,"findings_medium":0.0,"findings_low":25.0,"weighted_findings":11.65,"scanned_lines":167581.0,"parse_errors":17.0},"findings":[{"rule_id":"opengrep/dockerfile.security.missing-user-entrypoint","severity":"high","message":"By not specifying a USER, a program in the container may run as 'root'. This is a security hazard. If an attacker can control a process running as root, they may have control over the container. Ensure that the last USER in a Dockerfile is a USER other than 'root'. [confidence medium]","path":"deployment/Dockerfile","line":91,"fingerprint":"dockerfile.security.missing-user-entrypoint:deployment/Dockerfile:91"},{"rule_id":"opengrep/dockerfile.security.missing-user","severity":"high","message":"By not specifying a USER, a program in the container may run as 'root'. This is a security hazard. If an attacker can control a process running as root, they may have control over the container. Ensure that the last USER in a Dockerfile is a USER other than 'root'. [confidence medium]","path":"deployment/Dockerfile","line":92,"fingerprint":"dockerfile.security.missing-user:deployment/Dockerfile:92"},{"rule_id":"opengrep/dockerfile.security.missing-user-entrypoint","severity":"high","message":"By not specifying a USER, a program in the container may run as 'root'. This is a security hazard. If an attacker can control a process running as root, they may have control over the container. Ensure that the last USER in a Dockerfile is a USER other than 'root'. [confidence medium]","path":"deployment/e2e-client.Dockerfile","line":48,"fingerprint":"dockerfile.security.missing-user-entrypoint:deployment/e2e-client.Dockerfile:48"},{"rule_id":"opengrep/rust.lang.security.temp-dir","severity":"low","message":"temp_dir should not be used for security operations. From the docs: 'The temporary directory may be shared among users, or between processes with different privileges; thus, the creation of any files or directories in the temporary directory must use a secure method to create a uniquely named file.  [confidence high]","path":"benches/src/utils.rs","line":24,"fingerprint":"rust.lang.security.temp-dir:benches/src/utils.rs:24"},{"rule_id":"opengrep/rust.lang.security.unsafe-usage","severity":"low","message":"Detected 'unsafe' usage, please audit for secure usage [confidence high]","path":"benches/src/utils.rs","line":62,"fingerprint":"rust.lang.security.unsafe-usage:benches/src/utils.rs:62"},{"rule_id":"opengrep/rust.lang.security.unsafe-usage","severity":"low","message":"Detected 'unsafe' usage, please audit for secure usage [confidence high]","path":"benches/src/utils.rs","line":75,"fingerprint":"rust.lang.security.unsafe-usage:benches/src/utils.rs:75"},{"rule_id":"opengrep/rust.lang.security.unsafe-usage","severity":"low","message":"Detected 'unsafe' usage, please audit for secure usage [confidence high]","path":"benches/src/utils.rs","line":80,"fingerprint":"rust.lang.security.unsafe-usage:benches/src/utils.rs:80"},{"rule_id":"opengrep/rust.lang.security.unsafe-usage","severity":"low","message":"Detected 'unsafe' usage, please audit for secure usage [confidence high]","path":"benches/src/utils.rs","line":94,"fingerprint":"rust.lang.security.unsafe-usage:benches/src/utils.rs:94"},{"rule_id":"opengrep/rust.lang.security.unsafe-usage","severity":"low","message":"Detected 'unsafe' usage, please audit for secure usage [confidence high]","path":"benches/src/utils.rs","line":113,"fingerprint":"rust.lang.security.unsafe-usage:benches/src/utils.rs:113"},{"rule_id":"opengrep/rust.lang.security.unsafe-usage","severity":"low","message":"Detected 'unsafe' usage, please audit for secure usage [confidence high]","path":"benches/src/utils.rs","line":126,"fingerprint":"rust.lang.security.unsafe-usage:benches/src/utils.rs:126"},{"rule_id":"opengrep/rust.lang.security.unsafe-usage","severity":"low","message":"Detected 'unsafe' usage, please audit for secure usage [confidence high]","path":"benches/src/utils.rs","line":131,"fingerprint":"rust.lang.security.unsafe-usage:benches/src/utils.rs:131"},{"rule_id":"opengrep/rust.lang.security.unsafe-usage","severity":"low","message":"Detected 'unsafe' usage, please audit for secure usage [confidence high]","path":"benches/src/utils.rs","line":144,"fingerprint":"rust.lang.security.unsafe-usage:benches/src/utils.rs:144"},{"rule_id":"opengrep/rust.lang.security.temp-dir","severity":"low","message":"temp_dir should not be used for security operations. From the docs: 'The temporary directory may be shared among users, or between processes with different privileges; thus, the creation of any files or directories in the temporary directory must use a secure method to create a uniquely named file.  [confidence high]","path":"crates/chain-config/src/config/chain.rs","line":161,"fingerprint":"rust.lang.security.temp-dir:crates/chain-config/src/config/chain.rs:161"},{"rule_id":"opengrep/rust.lang.security.unsafe-usage","severity":"low","message":"Detected 'unsafe' usage, please audit for secure usage [confidence high]","path":"crates/fuel-core/src/state/rocks_db.rs","line":472,"fingerprint":"rust.lang.security.unsafe-usage:crates/fuel-core/src/state/rocks_db.rs:472"},{"rule_id":"opengrep/rust.lang.security.unsafe-usage","severity":"low","message":"Detected 'unsafe' usage, please audit for secure usage [confidence high]","path":"crates/services/p2p/src/peer_manager.rs","line":354,"fingerprint":"rust.lang.security.unsafe-usage:crates/services/p2p/src/peer_manager.rs:354"},{"rule_id":"opengrep/rust.lang.security.unsafe-usage","severity":"low","message":"Detected 'unsafe' usage, please audit for secure usage [confidence high]","path":"crates/services/src/seqlock.rs","line":48,"fingerprint":"rust.lang.security.unsafe-usage:crates/services/src/seqlock.rs:48"},{"rule_id":"opengrep/rust.lang.security.unsafe-usage","severity":"low","message":"Detected 'unsafe' usage, please audit for secure usage [confidence high]","path":"crates/services/src/seqlock.rs","line":92,"fingerprint":"rust.lang.security.unsafe-usage:crates/services/src/seqlock.rs:92"},{"rule_id":"opengrep/rust.lang.security.unsafe-usage","severity":"low","message":"Detected 'unsafe' usage, please audit for secure usage [confidence high]","path":"crates/services/src/seqlock.rs","line":141,"fingerprint":"rust.lang.security.unsafe-usage:crates/services/src/seqlock.rs:141"},{"rule_id":"opengrep/rust.lang.security.unsafe-usage","severity":"low","message":"Detected 'unsafe' usage, please audit for secure usage [confidence high]","path":"crates/services/src/seqlock.rs","line":170,"fingerprint":"rust.lang.security.unsafe-usage:crates/services/src/seqlock.rs:170"},{"rule_id":"opengrep/rust.lang.security.unsafe-usage","severity":"low","message":"Detected 'unsafe' usage, please audit for secure usage [confidence high]","path":"crates/services/txpool_v2/src/service.rs","line":807,"fingerprint":"rust.lang.security.unsafe-usage:crates/services/txpool_v2/src/service.rs:807"},{"rule_id":"opengrep/rust.lang.security.unsafe-usage","severity":"low","message":"Detected 'unsafe' usage, please audit for secure usage [confidence high]","path":"crates/services/upgradable-executor/wasm-executor/src/ext.rs","line":146,"fingerprint":"rust.lang.security.unsafe-usage:crates/services/upgradable-executor/wasm-executor/src/ext.rs:146"},{"rule_id":"opengrep/rust.lang.security.unsafe-usage","severity":"low","message":"Detected 'unsafe' usage, please audit for secure usage [confidence high]","path":"crates/services/upgradable-executor/wasm-executor/src/ext.rs","line":165,"fingerprint":"rust.lang.security.unsafe-usage:crates/services/upgradable-executor/wasm-executor/src/ext.rs:165"},{"rule_id":"opengrep/rust.lang.security.unsafe-usage","severity":"low","message":"Detected 'unsafe' usage, please audit for secure usage [confidence high]","path":"crates/services/upgradable-executor/wasm-executor/src/ext.rs","line":180,"fingerprint":"rust.lang.security.unsafe-usage:crates/services/upgradable-executor/wasm-executor/src/ext.rs:180"},{"rule_id":"opengrep/rust.lang.security.unsafe-usage","severity":"low","message":"Detected 'unsafe' usage, please audit for secure usage [confidence high]","path":"crates/services/upgradable-executor/wasm-executor/src/ext.rs","line":198,"fingerprint":"rust.lang.security.unsafe-usage:crates/services/upgradable-executor/wasm-executor/src/ext.rs:198"},{"rule_id":"opengrep/rust.lang.security.unsafe-usage","severity":"low","message":"Detected 'unsafe' usage, please audit for secure usage [confidence high]","path":"crates/services/upgradable-executor/wasm-executor/src/ext.rs","line":224,"fingerprint":"rust.lang.security.unsafe-usage:crates/services/upgradable-executor/wasm-executor/src/ext.rs:224"},{"rule_id":"opengrep/rust.lang.security.unsafe-usage","severity":"low","message":"Detected 'unsafe' usage, please audit for secure usage [confidence high]","path":"crates/services/upgradable-executor/wasm-executor/src/ext.rs","line":245,"fingerprint":"rust.lang.security.unsafe-usage:crates/services/upgradable-executor/wasm-executor/src/ext.rs:245"},{"rule_id":"opengrep/rust.lang.security.unsafe-usage","severity":"low","message":"Detected 'unsafe' usage, please audit for secure usage [confidence high]","path":"crates/services/upgradable-executor/wasm-executor/src/ext.rs","line":250,"fingerprint":"rust.lang.security.unsafe-usage:crates/services/upgradable-executor/wasm-executor/src/ext.rs:250"},{"rule_id":"opengrep/rust.lang.security.unsafe-usage","severity":"low","message":"Detected 'unsafe' usage, please audit for secure usage [confidence high]","path":"crates/services/upgradable-executor/wasm-executor/src/ext.rs","line":265,"fingerprint":"rust.lang.security.unsafe-usage:crates/services/upgradable-executor/wasm-executor/src/ext.rs:265"}],"evidence":[],"data":{"rulesets":["rust","bash","python","dockerfile"]},"error":null},{"analyzer":"sec-deps","pillar":"security","status":"ok","tool_version":"osv-scanner version: 2.7.1","metrics":{"vulnerable_packages":63.0,"vulnerabilities":167.0,"vulns_critical":4.0,"vulns_high":24.0,"vulns_medium":28.0,"vulns_low":17.0,"vulns_unknown":94.0,"penalty":284.0},"findings":[{"rule_id":"osv/RUSTSEC-2026-0095","severity":"critical","message":"wasmtime@18.0.4 (crates.io) is affected by RUSTSEC-2026-0095","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"wasmtime@18.0.4 (crates.io):RUSTSEC-2026-0095"},{"rule_id":"osv/RUSTSEC-2026-0096","severity":"critical","message":"wasmtime@18.0.4 (crates.io) is affected by RUSTSEC-2026-0096","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"wasmtime@18.0.4 (crates.io):RUSTSEC-2026-0096"},{"rule_id":"osv/GHSA-mghf-wjfp-p5xm","severity":"critical","message":"wasmtime@18.0.4 (crates.io) is affected by RUSTSEC-2026-0379, GHSA-mghf-wjfp-p5xm","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"wasmtime@18.0.4 (crates.io):GHSA-mghf-wjfp-p5xm"},{"rule_id":"osv/GHSA-897f-g5gm-fmxm","severity":"critical","message":"wasmtime@18.0.4 (crates.io) is affected by RUSTSEC-2026-0380, GHSA-897f-g5gm-fmxm","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"wasmtime@18.0.4 (crates.io):GHSA-897f-g5gm-fmxm"},{"rule_id":"osv/GHSA-2pgj-5cv2-6xxw","severity":"high","message":"fuel-vm@0.56.0 (crates.io) is affected by GHSA-2pgj-5cv2-6xxw; also in version-compatibility/Cargo.lock","path":"Cargo.lock","line":null,"fingerprint":"fuel-vm@0.56.0 (crates.io):GHSA-2pgj-5cv2-6xxw"},{"rule_id":"osv/RUSTSEC-2026-0509","severity":"high","message":"hickory-net@0.26.1 (crates.io) is affected by RUSTSEC-2026-0509; also in version-compatibility/Cargo.lock","path":"Cargo.lock","line":null,"fingerprint":"hickory-net@0.26.1 (crates.io):RUSTSEC-2026-0509"},{"rule_id":"osv/GHSA-3v94-mw7p-v465","severity":"high","message":"hickory-proto@0.25.2 (crates.io) is affected by RUSTSEC-2026-0118, GHSA-3v94-mw7p-v465; also in version-compatibility/Cargo.lock","path":"Cargo.lock","line":null,"fingerprint":"hickory-proto@0.25.2 (crates.io):GHSA-3v94-mw7p-v465"},{"rule_id":"osv/RUSTSEC-2026-0505","severity":"high","message":"hickory-proto@0.25.2 (crates.io) is affected by RUSTSEC-2026-0505; also in version-compatibility/Cargo.lock","path":"Cargo.lock","line":null,"fingerprint":"hickory-proto@0.25.2 (crates.io):RUSTSEC-2026-0505"},{"rule_id":"osv/GHSA-5j98-2g5x-46v6","severity":"high","message":"hickory-resolver@0.25.2 (crates.io) is affected by RUSTSEC-2026-0514, GHSA-5j98-2g5x-46v6; also in version-compatibility/Cargo.lock","path":"Cargo.lock","line":null,"fingerprint":"hickory-resolver@0.25.2 (crates.io):GHSA-5j98-2g5x-46v6"},{"rule_id":"osv/GHSA-6w6g-hm98-mhgm","severity":"high","message":"hickory-resolver@0.26.1 (crates.io) is affected by RUSTSEC-2026-0513, GHSA-6w6g-hm98-mhgm; also in version-compatibility/Cargo.lock","path":"Cargo.lock","line":null,"fingerprint":"hickory-resolver@0.26.1 (crates.io):GHSA-6w6g-hm98-mhgm"},{"rule_id":"osv/GHSA-5j98-2g5x-46v6","severity":"high","message":"hickory-resolver@0.26.1 (crates.io) is affected by RUSTSEC-2026-0514, GHSA-5j98-2g5x-46v6; also in version-compatibility/Cargo.lock","path":"Cargo.lock","line":null,"fingerprint":"hickory-resolver@0.26.1 (crates.io):GHSA-5j98-2g5x-46v6"},{"rule_id":"osv/GHSA-2f9f-gq7v-9h6m","severity":"high","message":"thrift@0.17.0 (crates.io) is affected by RUSTSEC-2026-0435, GHSA-2f9f-gq7v-9h6m; also in version-compatibility/Cargo.lock","path":"Cargo.lock","line":null,"fingerprint":"thrift@0.17.0 (crates.io):GHSA-2f9f-gq7v-9h6m"},{"rule_id":"osv/GHSA-vxx9-2994-q338","severity":"high","message":"yamux@0.12.1 (crates.io) is affected by GHSA-vxx9-2994-q338; also in version-compatibility/Cargo.lock","path":"Cargo.lock","line":null,"fingerprint":"yamux@0.12.1 (crates.io):GHSA-vxx9-2994-q338"},{"rule_id":"osv/GHSA-5gc2-7c65-8fq8","severity":"high","message":"async-graphql@4.0.16 (crates.io) is affected by GHSA-5gc2-7c65-8fq8","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"async-graphql@4.0.16 (crates.io):GHSA-5gc2-7c65-8fq8"},{"rule_id":"osv/GHSA-2pgj-5cv2-6xxw","severity":"high","message":"fuel-vm@0.49.0 (crates.io) is affected by GHSA-2pgj-5cv2-6xxw","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"fuel-vm@0.49.0 (crates.io):GHSA-2pgj-5cv2-6xxw"},{"rule_id":"osv/RUSTSEC-2026-0505","severity":"high","message":"hickory-proto@0.24.4 (crates.io) is affected by RUSTSEC-2026-0505","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"hickory-proto@0.24.4 (crates.io):RUSTSEC-2026-0505"},{"rule_id":"osv/GHSA-5j98-2g5x-46v6","severity":"high","message":"hickory-resolver@0.24.4 (crates.io) is affected by RUSTSEC-2026-0514, GHSA-5j98-2g5x-46v6","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"hickory-resolver@0.24.4 (crates.io):GHSA-5j98-2g5x-46v6"},{"rule_id":"osv/GHSA-gc42-3jg7-rxr2","severity":"high","message":"libp2p-gossipsub@0.46.1 (crates.io) is affected by RUSTSEC-2026-0535, GHSA-gc42-3jg7-rxr2","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"libp2p-gossipsub@0.46.1 (crates.io):GHSA-gc42-3jg7-rxr2"},{"rule_id":"osv/GHSA-xqmp-fxgv-xvq5","severity":"high","message":"libp2p-gossipsub@0.46.1 (crates.io) is affected by RUSTSEC-2026-0537, GHSA-xqmp-fxgv-xvq5","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"libp2p-gossipsub@0.46.1 (crates.io):GHSA-xqmp-fxgv-xvq5"},{"rule_id":"osv/GHSA-5hq8-qhww-jm7q","severity":"high","message":"libp2p-quic@0.10.3 (crates.io) is affected by RUSTSEC-2026-0525, GHSA-5hq8-qhww-jm7q","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"libp2p-quic@0.10.3 (crates.io):GHSA-5hq8-qhww-jm7q"},{"rule_id":"osv/RUSTSEC-2026-0340","severity":"high","message":"quinn-proto@0.11.17 (crates.io) is affected by RUSTSEC-2026-0340","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"quinn-proto@0.11.17 (crates.io):RUSTSEC-2026-0340"},{"rule_id":"osv/RUSTSEC-2026-0343","severity":"high","message":"quinn-proto@0.11.17 (crates.io) is affected by RUSTSEC-2026-0343","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"quinn-proto@0.11.17 (crates.io):RUSTSEC-2026-0343"},{"rule_id":"osv/RUSTSEC-2024-0336","severity":"high","message":"rustls@0.19.1 (crates.io) is affected by RUSTSEC-2024-0336","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"rustls@0.19.1 (crates.io):RUSTSEC-2024-0336"},{"rule_id":"osv/GHSA-82j2-j2ch-gfr8","severity":"high","message":"rustls-webpki@0.101.7 (crates.io) is affected by RUSTSEC-2026-0104, GHSA-82j2-j2ch-gfr8","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"rustls-webpki@0.101.7 (crates.io):GHSA-82j2-j2ch-gfr8"},{"rule_id":"osv/GHSA-m758-wjhj-p3jq","severity":"high","message":"wasmtime@18.0.4 (crates.io) is affected by RUSTSEC-2026-0085, GHSA-m758-wjhj-p3jq","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"wasmtime@18.0.4 (crates.io):GHSA-m758-wjhj-p3jq"},{"rule_id":"osv/GHSA-hx6p-xpx3-jvvv","severity":"high","message":"wasmtime@18.0.4 (crates.io) is affected by RUSTSEC-2026-0093, GHSA-hx6p-xpx3-jvvv","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"wasmtime@18.0.4 (crates.io):GHSA-hx6p-xpx3-jvvv"},{"rule_id":"osv/RUSTSEC-2026-0269","severity":"high","message":"wasmtime@18.0.4 (crates.io) is affected by RUSTSEC-2026-0269","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"wasmtime@18.0.4 (crates.io):RUSTSEC-2026-0269"},{"rule_id":"osv/GHSA-8qv2-5vq6-g2g7","severity":"high","message":"webpki@0.21.4 (crates.io) is affected by RUSTSEC-2023-0052, GHSA-8qv2-5vq6-g2g7","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"webpki@0.21.4 (crates.io):GHSA-8qv2-5vq6-g2g7"},{"rule_id":"osv/RUSTSEC-2023-0089","severity":"medium","message":"atomic-polyfill@1.0.3 (crates.io) is affected by RUSTSEC-2023-0089; also in version-compatibility/Cargo.lock","path":"Cargo.lock","line":null,"fingerprint":"atomic-polyfill@1.0.3 (crates.io):RUSTSEC-2023-0089"},{"rule_id":"osv/GHSA-g98v-hv3f-hcfr","severity":"medium","message":"atty@0.2.14 (crates.io) is affected by RUSTSEC-2021-0145, GHSA-g98v-hv3f-hcfr","path":"Cargo.lock","line":null,"fingerprint":"atty@0.2.14 (crates.io):GHSA-g98v-hv3f-hcfr"},{"rule_id":"osv/RUSTSEC-2024-0375","severity":"medium","message":"atty@0.2.14 (crates.io) is affected by RUSTSEC-2024-0375","path":"Cargo.lock","line":null,"fingerprint":"atty@0.2.14 (crates.io):RUSTSEC-2024-0375"},{"rule_id":"osv/RUSTSEC-2026-0105","severity":"medium","message":"core2@0.4.0 (crates.io) is affected by RUSTSEC-2026-0105","path":"Cargo.lock","line":null,"fingerprint":"core2@0.4.0 (crates.io):RUSTSEC-2026-0105"},{"rule_id":"osv/RUSTSEC-2026-0387","severity":"medium","message":"crypto-bigint@0.5.5 (crates.io) is affected by RUSTSEC-2026-0387; also in version-compatibility/Cargo.lock","path":"Cargo.lock","line":null,"fingerprint":"crypto-bigint@0.5.5 (crates.io):RUSTSEC-2026-0387"},{"rule_id":"osv/RUSTSEC-2024-0388","severity":"medium","message":"derivative@2.2.0 (crates.io) is affected by RUSTSEC-2024-0388; also in version-compatibility/Cargo.lock","path":"Cargo.lock","line":null,"fingerprint":"derivative@2.2.0 (crates.io):RUSTSEC-2024-0388"},{"rule_id":"osv/RUSTSEC-2026-0506","severity":"medium","message":"hickory-net@0.26.1 (crates.io) is affected by RUSTSEC-2026-0506; also in version-compatibility/Cargo.lock","path":"Cargo.lock","line":null,"fingerprint":"hickory-net@0.26.1 (crates.io):RUSTSEC-2026-0506"},{"rule_id":"osv/RUSTSEC-2026-0507","severity":"medium","message":"hickory-net@0.26.1 (crates.io) is affected by RUSTSEC-2026-0507; also in version-compatibility/Cargo.lock","path":"Cargo.lock","line":null,"fingerprint":"hickory-net@0.26.1 (crates.io):RUSTSEC-2026-0507"},{"rule_id":"osv/RUSTSEC-2026-0508","severity":"medium","message":"hickory-net@0.26.1 (crates.io) is affected by RUSTSEC-2026-0508; also in version-compatibility/Cargo.lock","path":"Cargo.lock","line":null,"fingerprint":"hickory-net@0.26.1 (crates.io):RUSTSEC-2026-0508"},{"rule_id":"osv/RUSTSEC-2026-0517","severity":"medium","message":"hickory-net@0.26.1 (crates.io) is affected by RUSTSEC-2026-0517; also in version-compatibility/Cargo.lock","path":"Cargo.lock","line":null,"fingerprint":"hickory-net@0.26.1 (crates.io):RUSTSEC-2026-0517"},{"rule_id":"osv/RUSTSEC-2026-0518","severity":"medium","message":"hickory-net@0.26.1 (crates.io) is affected by RUSTSEC-2026-0518; also in version-compatibility/Cargo.lock","path":"Cargo.lock","line":null,"fingerprint":"hickory-net@0.26.1 (crates.io):RUSTSEC-2026-0518"},{"rule_id":"osv/RUSTSEC-2026-0519","severity":"medium","message":"hickory-net@0.26.1 (crates.io) is affected by RUSTSEC-2026-0519; also in version-compatibility/Cargo.lock","path":"Cargo.lock","line":null,"fingerprint":"hickory-net@0.26.1 (crates.io):RUSTSEC-2026-0519"},{"rule_id":"osv/RUSTSEC-2026-0520","severity":"medium","message":"hickory-net@0.26.1 (crates.io) is affected by RUSTSEC-2026-0520; also in version-compatibility/Cargo.lock","path":"Cargo.lock","line":null,"fingerprint":"hickory-net@0.26.1 (crates.io):RUSTSEC-2026-0520"},{"rule_id":"osv/RUSTSEC-2026-0539","severity":"medium","message":"hickory-net@0.26.1 (crates.io) is affected by RUSTSEC-2026-0539; also in version-compatibility/Cargo.lock","path":"Cargo.lock","line":null,"fingerprint":"hickory-net@0.26.1 (crates.io):RUSTSEC-2026-0539"},{"rule_id":"osv/RUSTSEC-2026-0540","severity":"medium","message":"hickory-net@0.26.1 (crates.io) is affected by RUSTSEC-2026-0540; also in version-compatibility/Cargo.lock","path":"Cargo.lock","line":null,"fingerprint":"hickory-net@0.26.1 (crates.io):RUSTSEC-2026-0540"},{"rule_id":"osv/RUSTSEC-2026-0541","severity":"medium","message":"hickory-net@0.26.1 (crates.io) is affected by RUSTSEC-2026-0541; also in version-compatibility/Cargo.lock","path":"Cargo.lock","line":null,"fingerprint":"hickory-net@0.26.1 (crates.io):RUSTSEC-2026-0541"},{"rule_id":"osv/GHSA-q2qq-hmj6-3wpp","severity":"medium","message":"hickory-proto@0.25.2 (crates.io) is affected by RUSTSEC-2026-0119, GHSA-q2qq-hmj6-3wpp; also in version-compatibility/Cargo.lock","path":"Cargo.lock","line":null,"fingerprint":"hickory-proto@0.25.2 (crates.io):GHSA-q2qq-hmj6-3wpp"},{"rule_id":"osv/RUSTSEC-2026-0487","severity":"medium","message":"hickory-proto@0.25.2 (crates.io) is affected by RUSTSEC-2026-0487; also in version-compatibility/Cargo.lock","path":"Cargo.lock","line":null,"fingerprint":"hickory-proto@0.25.2 (crates.io):RUSTSEC-2026-0487"},{"rule_id":"osv/RUSTSEC-2026-0489","severity":"medium","message":"hickory-proto@0.25.2 (crates.io) is affected by RUSTSEC-2026-0489; also in version-compatibility/Cargo.lock","path":"Cargo.lock","line":null,"fingerprint":"hickory-proto@0.25.2 (crates.io):RUSTSEC-2026-0489"},{"rule_id":"osv/RUSTSEC-2026-0490","severity":"medium","message":"hickory-proto@0.25.2 (crates.io) is affected by RUSTSEC-2026-0490; also in version-compatibility/Cargo.lock","path":"Cargo.lock","line":null,"fingerprint":"hickory-proto@0.25.2 (crates.io):RUSTSEC-2026-0490"},{"rule_id":"osv/RUSTSEC-2026-0491","severity":"medium","message":"hickory-proto@0.25.2 (crates.io) is affected by RUSTSEC-2026-0491; also in version-compatibility/Cargo.lock","path":"Cargo.lock","line":null,"fingerprint":"hickory-proto@0.25.2 (crates.io):RUSTSEC-2026-0491"},{"rule_id":"osv/RUSTSEC-2026-0504","severity":"medium","message":"hickory-proto@0.25.2 (crates.io) is affected by RUSTSEC-2026-0504; also in version-compatibility/Cargo.lock","path":"Cargo.lock","line":null,"fingerprint":"hickory-proto@0.25.2 (crates.io):RUSTSEC-2026-0504"},{"rule_id":"osv/RUSTSEC-2026-0511","severity":"medium","message":"hickory-proto@0.25.2 (crates.io) is affected by RUSTSEC-2026-0511; also in version-compatibility/Cargo.lock","path":"Cargo.lock","line":null,"fingerprint":"hickory-proto@0.25.2 (crates.io):RUSTSEC-2026-0511"},{"rule_id":"osv/RUSTSEC-2026-0512","severity":"medium","message":"hickory-proto@0.25.2 (crates.io) is affected by RUSTSEC-2026-0512; also in version-compatibility/Cargo.lock","path":"Cargo.lock","line":null,"fingerprint":"hickory-proto@0.25.2 (crates.io):RUSTSEC-2026-0512"},{"rule_id":"osv/RUSTSEC-2026-0530","severity":"medium","message":"hickory-proto@0.25.2 (crates.io) is affected by RUSTSEC-2026-0530; also in version-compatibility/Cargo.lock","path":"Cargo.lock","line":null,"fingerprint":"hickory-proto@0.25.2 (crates.io):RUSTSEC-2026-0530"},{"rule_id":"osv/RUSTSEC-2026-0531","severity":"medium","message":"hickory-proto@0.25.2 (crates.io) is affected by RUSTSEC-2026-0531; also in version-compatibility/Cargo.lock","path":"Cargo.lock","line":null,"fingerprint":"hickory-proto@0.25.2 (crates.io):RUSTSEC-2026-0531"},{"rule_id":"osv/RUSTSEC-2026-0532","severity":"medium","message":"hickory-proto@0.25.2 (crates.io) is affected by RUSTSEC-2026-0532; also in version-compatibility/Cargo.lock","path":"Cargo.lock","line":null,"fingerprint":"hickory-proto@0.25.2 (crates.io):RUSTSEC-2026-0532"},{"rule_id":"osv/RUSTSEC-2026-0487","severity":"medium","message":"hickory-proto@0.26.1 (crates.io) is affected by RUSTSEC-2026-0487; also in version-compatibility/Cargo.lock","path":"Cargo.lock","line":null,"fingerprint":"hickory-proto@0.26.1 (crates.io):RUSTSEC-2026-0487"},{"rule_id":"osv/RUSTSEC-2026-0488","severity":"medium","message":"hickory-proto@0.26.1 (crates.io) is affected by RUSTSEC-2026-0488; also in version-compatibility/Cargo.lock","path":"Cargo.lock","line":null,"fingerprint":"hickory-proto@0.26.1 (crates.io):RUSTSEC-2026-0488"},{"rule_id":"osv/RUSTSEC-2026-0489","severity":"medium","message":"hickory-proto@0.26.1 (crates.io) is affected by RUSTSEC-2026-0489; also in version-compatibility/Cargo.lock","path":"Cargo.lock","line":null,"fingerprint":"hickory-proto@0.26.1 (crates.io):RUSTSEC-2026-0489"},{"rule_id":"osv/RUSTSEC-2026-0490","severity":"medium","message":"hickory-proto@0.26.1 (crates.io) is affected by RUSTSEC-2026-0490; also in version-compatibility/Cargo.lock","path":"Cargo.lock","line":null,"fingerprint":"hickory-proto@0.26.1 (crates.io):RUSTSEC-2026-0490"},{"rule_id":"osv/RUSTSEC-2026-0491","severity":"medium","message":"hickory-proto@0.26.1 (crates.io) is affected by RUSTSEC-2026-0491; also in version-compatibility/Cargo.lock","path":"Cargo.lock","line":null,"fingerprint":"hickory-proto@0.26.1 (crates.io):RUSTSEC-2026-0491"},{"rule_id":"osv/GHSA-6f2x-v7q7-m7m5","severity":"medium","message":"hickory-resolver@0.25.2 (crates.io) is affected by GHSA-6f2x-v7q7-m7m5; also in version-compatibility/Cargo.lock","path":"Cargo.lock","line":null,"fingerprint":"hickory-resolver@0.25.2 (crates.io):GHSA-6f2x-v7q7-m7m5"},{"rule_id":"osv/RUSTSEC-2026-0515","severity":"medium","message":"hickory-resolver@0.26.1 (crates.io) is affected by RUSTSEC-2026-0515; also in version-compatibility/Cargo.lock","path":"Cargo.lock","line":null,"fingerprint":"hickory-resolver@0.26.1 (crates.io):RUSTSEC-2026-0515"},{"rule_id":"osv/RUSTSEC-2026-0516","severity":"medium","message":"hickory-resolver@0.26.1 (crates.io) is affected by RUSTSEC-2026-0516; also in version-compatibility/Cargo.lock","path":"Cargo.lock","line":null,"fingerprint":"hickory-resolver@0.26.1 (crates.io):RUSTSEC-2026-0516"},{"rule_id":"osv/GHSA-6f2x-v7q7-m7m5","severity":"medium","message":"hickory-resolver@0.26.1 (crates.io) is affected by GHSA-6f2x-v7q7-m7m5; also in version-compatibility/Cargo.lock","path":"Cargo.lock","line":null,"fingerprint":"hickory-resolver@0.26.1 (crates.io):GHSA-6f2x-v7q7-m7m5"},{"rule_id":"osv/RUSTSEC-2026-0534","severity":"medium","message":"libp2p-gossipsub@0.49.5 (crates.io) is affected by RUSTSEC-2026-0534; also in version-compatibility/Cargo.lock","path":"Cargo.lock","line":null,"fingerprint":"libp2p-gossipsub@0.49.5 (crates.io):RUSTSEC-2026-0534"},{"rule_id":"osv/RUSTSEC-2026-0253","severity":"medium","message":"lru@0.16.3 (crates.io) is affected by RUSTSEC-2026-0253","path":"Cargo.lock","line":null,"fingerprint":"lru@0.16.3 (crates.io):RUSTSEC-2026-0253"},{"rule_id":"osv/RUSTSEC-2024-0436","severity":"medium","message":"paste@1.0.15 (crates.io) is affected by RUSTSEC-2024-0436; also in version-compatibility/Cargo.lock","path":"Cargo.lock","line":null,"fingerprint":"paste@1.0.15 (crates.io):RUSTSEC-2024-0436"},{"rule_id":"osv/RUSTSEC-2026-0441","severity":"medium","message":"pin-utils@0.1.0 (crates.io) is affected by RUSTSEC-2026-0441; also in version-compatibility/Cargo.lock","path":"Cargo.lock","line":null,"fingerprint":"pin-utils@0.1.0 (crates.io):RUSTSEC-2026-0441"},{"rule_id":"osv/RUSTSEC-2026-0173","severity":"medium","message":"proc-macro-error2@2.0.1 (crates.io) is affected by RUSTSEC-2026-0173; also in version-compatibility/Cargo.lock","path":"Cargo.lock","line":null,"fingerprint":"proc-macro-error2@2.0.1 (crates.io):RUSTSEC-2026-0173"},{"rule_id":"osv/RUSTSEC-2026-0523","severity":"medium","message":"quinn-proto@0.11.18 (crates.io) is affected by RUSTSEC-2026-0523","path":"Cargo.lock","line":null,"fingerprint":"quinn-proto@0.11.18 (crates.io):RUSTSEC-2026-0523"},{"rule_id":"osv/RUSTSEC-2026-0524","severity":"medium","message":"quinn-proto@0.11.18 (crates.io) is affected by RUSTSEC-2026-0524","path":"Cargo.lock","line":null,"fingerprint":"quinn-proto@0.11.18 (crates.io):RUSTSEC-2026-0524"},{"rule_id":"osv/RUSTSEC-2026-0538","severity":"medium","message":"quinn-udp@0.5.14 (crates.io) is affected by RUSTSEC-2026-0538","path":"Cargo.lock","line":null,"fingerprint":"quinn-udp@0.5.14 (crates.io):RUSTSEC-2026-0538"},{"rule_id":"osv/RUSTSEC-2026-0486","severity":"medium","message":"rustix@1.1.4 (crates.io) is affected by RUSTSEC-2026-0486; also in version-compatibility/Cargo.lock","path":"Cargo.lock","line":null,"fingerprint":"rustix@1.1.4 (crates.io):RUSTSEC-2026-0486"},{"rule_id":"osv/GHSA-7gcf-g7xr-8hxj","severity":"medium","message":"serde_with@3.18.0 (crates.io) is affected by GHSA-7gcf-g7xr-8hxj","path":"Cargo.lock","line":null,"fingerprint":"serde_with@3.18.0 (crates.io):GHSA-7gcf-g7xr-8hxj"},{"rule_id":"osv/GHSA-3pv8-6f4r-ffg2","severity":"medium","message":"tar@0.4.45 (crates.io) is affected by GHSA-3pv8-6f4r-ffg2","path":"Cargo.lock","line":null,"fingerprint":"tar@0.4.45 (crates.io):GHSA-3pv8-6f4r-ffg2"},{"rule_id":"osv/RUSTSEC-2026-0386","severity":"medium","message":"tokio@1.50.0 (crates.io) is affected by RUSTSEC-2026-0386","path":"Cargo.lock","line":null,"fingerprint":"tokio@1.50.0 (crates.io):RUSTSEC-2026-0386"},{"rule_id":"osv/RUSTSEC-2024-0449","severity":"medium","message":"unsafe-libyaml@0.2.11 (crates.io) is affected by RUSTSEC-2024-0449","path":"Cargo.lock","line":null,"fingerprint":"unsafe-libyaml@0.2.11 (crates.io):RUSTSEC-2024-0449"},{"rule_id":"osv/RUSTSEC-2025-0141","severity":"medium","message":"bincode@1.3.3 (crates.io) is affected by RUSTSEC-2025-0141","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"bincode@1.3.3 (crates.io):RUSTSEC-2025-0141"},{"rule_id":"osv/RUSTSEC-2026-0385","severity":"medium","message":"ctutils@0.4.2 (crates.io) is affected by RUSTSEC-2026-0385","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"ctutils@0.4.2 (crates.io):RUSTSEC-2026-0385"},{"rule_id":"osv/RUSTSEC-2025-0057","severity":"medium","message":"fxhash@0.2.1 (crates.io) is affected by RUSTSEC-2025-0057","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"fxhash@0.2.1 (crates.io):RUSTSEC-2025-0057"},{"rule_id":"osv/RUSTSEC-2026-0258","severity":"medium","message":"h2@0.3.27 (crates.io) is affected by RUSTSEC-2026-0258","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"h2@0.3.27 (crates.io):RUSTSEC-2026-0258"},{"rule_id":"osv/GHSA-q2qq-hmj6-3wpp","severity":"medium","message":"hickory-proto@0.24.4 (crates.io) is affected by RUSTSEC-2026-0119, GHSA-q2qq-hmj6-3wpp","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"hickory-proto@0.24.4 (crates.io):GHSA-q2qq-hmj6-3wpp"},{"rule_id":"osv/RUSTSEC-2026-0487","severity":"medium","message":"hickory-proto@0.24.4 (crates.io) is affected by RUSTSEC-2026-0487","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"hickory-proto@0.24.4 (crates.io):RUSTSEC-2026-0487"},{"rule_id":"osv/RUSTSEC-2026-0489","severity":"medium","message":"hickory-proto@0.24.4 (crates.io) is affected by RUSTSEC-2026-0489","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"hickory-proto@0.24.4 (crates.io):RUSTSEC-2026-0489"},{"rule_id":"osv/RUSTSEC-2026-0490","severity":"medium","message":"hickory-proto@0.24.4 (crates.io) is affected by RUSTSEC-2026-0490","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"hickory-proto@0.24.4 (crates.io):RUSTSEC-2026-0490"},{"rule_id":"osv/RUSTSEC-2026-0491","severity":"medium","message":"hickory-proto@0.24.4 (crates.io) is affected by RUSTSEC-2026-0491","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"hickory-proto@0.24.4 (crates.io):RUSTSEC-2026-0491"},{"rule_id":"osv/RUSTSEC-2026-0511","severity":"medium","message":"hickory-proto@0.24.4 (crates.io) is affected by RUSTSEC-2026-0511","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"hickory-proto@0.24.4 (crates.io):RUSTSEC-2026-0511"},{"rule_id":"osv/RUSTSEC-2026-0512","severity":"medium","message":"hickory-proto@0.24.4 (crates.io) is affected by RUSTSEC-2026-0512","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"hickory-proto@0.24.4 (crates.io):RUSTSEC-2026-0512"},{"rule_id":"osv/RUSTSEC-2026-0530","severity":"medium","message":"hickory-proto@0.24.4 (crates.io) is affected by RUSTSEC-2026-0530","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"hickory-proto@0.24.4 (crates.io):RUSTSEC-2026-0530"},{"rule_id":"osv/RUSTSEC-2026-0531","severity":"medium","message":"hickory-proto@0.24.4 (crates.io) is affected by RUSTSEC-2026-0531","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"hickory-proto@0.24.4 (crates.io):RUSTSEC-2026-0531"},{"rule_id":"osv/GHSA-h97m-ww89-6jmq","severity":"medium","message":"idna@0.3.0 (crates.io) is affected by RUSTSEC-2024-0421, GHSA-h97m-ww89-6jmq","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"idna@0.3.0 (crates.io):GHSA-h97m-ww89-6jmq"},{"rule_id":"osv/RUSTSEC-2024-0384","severity":"medium","message":"instant@0.1.13 (crates.io) is affected by RUSTSEC-2024-0384","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"instant@0.1.13 (crates.io):RUSTSEC-2024-0384"},{"rule_id":"osv/GHSA-h395-gr6q-cpjc","severity":"medium","message":"jsonwebtoken@8.3.0 (crates.io) is affected by GHSA-h395-gr6q-cpjc","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"jsonwebtoken@8.3.0 (crates.io):GHSA-h395-gr6q-cpjc"},{"rule_id":"osv/RUSTSEC-2026-0534","severity":"medium","message":"libp2p-gossipsub@0.46.1 (crates.io) is affected by RUSTSEC-2026-0534","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"libp2p-gossipsub@0.46.1 (crates.io):RUSTSEC-2026-0534"},{"rule_id":"osv/RUSTSEC-2026-0536","severity":"medium","message":"libp2p-gossipsub@0.46.1 (crates.io) is affected by RUSTSEC-2026-0536","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"libp2p-gossipsub@0.46.1 (crates.io):RUSTSEC-2026-0536"},{"rule_id":"osv/RUSTSEC-2026-0418","severity":"medium","message":"libz-sys@1.1.29 (crates.io) is affected by RUSTSEC-2026-0418","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"libz-sys@1.1.29 (crates.io):RUSTSEC-2026-0418"},{"rule_id":"osv/RUSTSEC-2026-0253","severity":"medium","message":"lru@0.12.5 (crates.io) is affected by RUSTSEC-2026-0253","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"lru@0.12.5 (crates.io):RUSTSEC-2026-0253"},{"rule_id":"osv/RUSTSEC-2026-0253","severity":"medium","message":"lru@0.16.4 (crates.io) is affected by RUSTSEC-2026-0253","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"lru@0.16.4 (crates.io):RUSTSEC-2026-0253"},{"rule_id":"osv/RUSTSEC-2020-0168","severity":"medium","message":"mach@0.3.2 (crates.io) is affected by RUSTSEC-2020-0168","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"mach@0.3.2 (crates.io):RUSTSEC-2020-0168"},{"rule_id":"osv/RUSTSEC-2025-0119","severity":"medium","message":"number_prefix@0.4.0 (crates.io) is affected by RUSTSEC-2025-0119","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"number_prefix@0.4.0 (crates.io):RUSTSEC-2025-0119"},{"rule_id":"osv/RUSTSEC-2026-0338","severity":"medium","message":"quinn-proto@0.11.17 (crates.io) is affected by RUSTSEC-2026-0338","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"quinn-proto@0.11.17 (crates.io):RUSTSEC-2026-0338"},{"rule_id":"osv/RUSTSEC-2026-0523","severity":"medium","message":"quinn-proto@0.11.17 (crates.io) is affected by RUSTSEC-2026-0523","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"quinn-proto@0.11.17 (crates.io):RUSTSEC-2026-0523"},{"rule_id":"osv/RUSTSEC-2026-0524","severity":"medium","message":"quinn-proto@0.11.17 (crates.io) is affected by RUSTSEC-2026-0524","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"quinn-proto@0.11.17 (crates.io):RUSTSEC-2026-0524"},{"rule_id":"osv/RUSTSEC-2026-0538","severity":"medium","message":"quinn-udp@0.5.15 (crates.io) is affected by RUSTSEC-2026-0538","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"quinn-udp@0.5.15 (crates.io):RUSTSEC-2026-0538"},{"rule_id":"osv/GHSA-4p46-pwfr-66x6","severity":"medium","message":"ring@0.16.20 (crates.io) is affected by RUSTSEC-2025-0009, GHSA-4p46-pwfr-66x6","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"ring@0.16.20 (crates.io):GHSA-4p46-pwfr-66x6"},{"rule_id":"osv/RUSTSEC-2025-0010","severity":"medium","message":"ring@0.16.20 (crates.io) is affected by RUSTSEC-2025-0010","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"ring@0.16.20 (crates.io):RUSTSEC-2025-0010"},{"rule_id":"osv/GHSA-c8m5-c952-6cm4","severity":"medium","message":"rustls@0.19.1 (crates.io) is affected by GHSA-c8m5-c952-6cm4","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"rustls@0.19.1 (crates.io):GHSA-c8m5-c952-6cm4"},{"rule_id":"osv/GHSA-c8m5-c952-6cm4","severity":"medium","message":"rustls@0.21.12 (crates.io) is affected by RUSTSEC-2026-0346, GHSA-c8m5-c952-6cm4","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"rustls@0.21.12 (crates.io):GHSA-c8m5-c952-6cm4"},{"rule_id":"osv/GHSA-2mjx-qc3c-rqvc","severity":"medium","message":"rustls@0.23.43 (crates.io) is affected by RUSTSEC-2026-0285, GHSA-2mjx-qc3c-rqvc","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"rustls@0.23.43 (crates.io):GHSA-2mjx-qc3c-rqvc"},{"rule_id":"osv/GHSA-c8m5-c952-6cm4","severity":"medium","message":"rustls@0.23.43 (crates.io) is affected by RUSTSEC-2026-0346, GHSA-c8m5-c952-6cm4","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"rustls@0.23.43 (crates.io):GHSA-c8m5-c952-6cm4"},{"rule_id":"osv/RUSTSEC-2025-0134","severity":"medium","message":"rustls-pemfile@1.0.4 (crates.io) is affected by RUSTSEC-2025-0134","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"rustls-pemfile@1.0.4 (crates.io):RUSTSEC-2025-0134"},{"rule_id":"osv/RUSTSEC-2026-0382","severity":"medium","message":"rustls-webpki@0.101.7 (crates.io) is affected by RUSTSEC-2026-0382","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"rustls-webpki@0.101.7 (crates.io):RUSTSEC-2026-0382"},{"rule_id":"osv/RUSTSEC-2026-0382","severity":"medium","message":"rustls-webpki@0.103.15 (crates.io) is affected by RUSTSEC-2026-0382","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"rustls-webpki@0.103.15 (crates.io):RUSTSEC-2026-0382"},{"rule_id":"osv/RUSTSEC-2026-0386","severity":"medium","message":"tokio@1.53.1 (crates.io) is affected by RUSTSEC-2026-0386","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"tokio@1.53.1 (crates.io):RUSTSEC-2026-0386"},{"rule_id":"osv/GHSA-852m-cvvp-9p4w","severity":"medium","message":"wasmtime@18.0.4 (crates.io) is affected by RUSTSEC-2026-0020, GHSA-852m-cvvp-9p4w","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"wasmtime@18.0.4 (crates.io):GHSA-852m-cvvp-9p4w"},{"rule_id":"osv/GHSA-243v-98vx-264h","severity":"medium","message":"wasmtime@18.0.4 (crates.io) is affected by RUSTSEC-2026-0021, GHSA-243v-98vx-264h","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"wasmtime@18.0.4 (crates.io):GHSA-243v-98vx-264h"},{"rule_id":"osv/GHSA-qqfj-4vcm-26hv","severity":"medium","message":"wasmtime@18.0.4 (crates.io) is affected by RUSTSEC-2026-0087, GHSA-qqfj-4vcm-26hv","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"wasmtime@18.0.4 (crates.io):GHSA-qqfj-4vcm-26hv"},{"rule_id":"osv/RUSTSEC-2026-0089","severity":"medium","message":"wasmtime@18.0.4 (crates.io) is affected by RUSTSEC-2026-0089","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"wasmtime@18.0.4 (crates.io):RUSTSEC-2026-0089"},{"rule_id":"osv/GHSA-394w-hwhg-8vgm","severity":"medium","message":"wasmtime@18.0.4 (crates.io) is affected by RUSTSEC-2026-0091, GHSA-394w-hwhg-8vgm","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"wasmtime@18.0.4 (crates.io):GHSA-394w-hwhg-8vgm"},{"rule_id":"osv/GHSA-jxhv-7h78-9775","severity":"medium","message":"wasmtime@18.0.4 (crates.io) is affected by RUSTSEC-2026-0092, GHSA-jxhv-7h78-9775","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"wasmtime@18.0.4 (crates.io):GHSA-jxhv-7h78-9775"},{"rule_id":"osv/RUSTSEC-2026-0094","severity":"medium","message":"wasmtime@18.0.4 (crates.io) is affected by RUSTSEC-2026-0094","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"wasmtime@18.0.4 (crates.io):RUSTSEC-2026-0094"},{"rule_id":"osv/RUSTSEC-2026-0363","severity":"medium","message":"wasmtime@18.0.4 (crates.io) is affected by RUSTSEC-2026-0363","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"wasmtime@18.0.4 (crates.io):RUSTSEC-2026-0363"},{"rule_id":"osv/RUSTSEC-2026-0424","severity":"medium","message":"wasmtime@18.0.4 (crates.io) is affected by RUSTSEC-2026-0424","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"wasmtime@18.0.4 (crates.io):RUSTSEC-2026-0424"},{"rule_id":"osv/GHSA-q8hx-mm92-4wvg","severity":"medium","message":"wasmtime@18.0.4 (crates.io) is affected by GHSA-q8hx-mm92-4wvg","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"wasmtime@18.0.4 (crates.io):GHSA-q8hx-mm92-4wvg"},{"rule_id":"osv/RUSTSEC-2026-0383","severity":"medium","message":"webpki-root-certs@1.0.9 (crates.io) is affected by RUSTSEC-2026-0383","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"webpki-root-certs@1.0.9 (crates.io):RUSTSEC-2026-0383"},{"rule_id":"osv/RUSTSEC-2026-0381","severity":"medium","message":"webpki-roots@0.25.4 (crates.io) is affected by RUSTSEC-2026-0381","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"webpki-roots@0.25.4 (crates.io):RUSTSEC-2026-0381"},{"rule_id":"osv/RUSTSEC-2026-0381","severity":"medium","message":"webpki-roots@1.0.9 (crates.io) is affected by RUSTSEC-2026-0381","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"webpki-roots@1.0.9 (crates.io):RUSTSEC-2026-0381"},{"rule_id":"osv/RUSTSEC-2026-0391","severity":"medium","message":"zstd@0.13.3 (crates.io) is affected by RUSTSEC-2026-0391","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"zstd@0.13.3 (crates.io):RUSTSEC-2026-0391"},{"rule_id":"osv/RUSTSEC-2026-0395","severity":"medium","message":"zstd-safe@5.0.2+zstd.1.5.2 (crates.io) is affected by RUSTSEC-2026-0395","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"zstd-safe@5.0.2+zstd.1.5.2 (crates.io):RUSTSEC-2026-0395"},{"rule_id":"osv/RUSTSEC-2026-0397","severity":"medium","message":"zstd-safe@5.0.2+zstd.1.5.2 (crates.io) is affected by RUSTSEC-2026-0397","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"zstd-safe@5.0.2+zstd.1.5.2 (crates.io):RUSTSEC-2026-0397"},{"rule_id":"osv/RUSTSEC-2026-0399","severity":"medium","message":"zstd-safe@5.0.2+zstd.1.5.2 (crates.io) is affected by RUSTSEC-2026-0399","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"zstd-safe@5.0.2+zstd.1.5.2 (crates.io):RUSTSEC-2026-0399"},{"rule_id":"osv/RUSTSEC-2026-0400","severity":"medium","message":"zstd-safe@5.0.2+zstd.1.5.2 (crates.io) is affected by RUSTSEC-2026-0400","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"zstd-safe@5.0.2+zstd.1.5.2 (crates.io):RUSTSEC-2026-0400"},{"rule_id":"osv/RUSTSEC-2026-0401","severity":"medium","message":"zstd-safe@5.0.2+zstd.1.5.2 (crates.io) is affected by RUSTSEC-2026-0401","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"zstd-safe@5.0.2+zstd.1.5.2 (crates.io):RUSTSEC-2026-0401"},{"rule_id":"osv/RUSTSEC-2026-0402","severity":"medium","message":"zstd-safe@5.0.2+zstd.1.5.2 (crates.io) is affected by RUSTSEC-2026-0402","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"zstd-safe@5.0.2+zstd.1.5.2 (crates.io):RUSTSEC-2026-0402"},{"rule_id":"osv/RUSTSEC-2026-0403","severity":"medium","message":"zstd-safe@5.0.2+zstd.1.5.2 (crates.io) is affected by RUSTSEC-2026-0403","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"zstd-safe@5.0.2+zstd.1.5.2 (crates.io):RUSTSEC-2026-0403"},{"rule_id":"osv/RUSTSEC-2026-0404","severity":"medium","message":"zstd-safe@5.0.2+zstd.1.5.2 (crates.io) is affected by RUSTSEC-2026-0404","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"zstd-safe@5.0.2+zstd.1.5.2 (crates.io):RUSTSEC-2026-0404"},{"rule_id":"osv/RUSTSEC-2026-0406","severity":"medium","message":"zstd-safe@5.0.2+zstd.1.5.2 (crates.io) is affected by RUSTSEC-2026-0406","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"zstd-safe@5.0.2+zstd.1.5.2 (crates.io):RUSTSEC-2026-0406"},{"rule_id":"osv/RUSTSEC-2026-0395","severity":"medium","message":"zstd-safe@7.2.4 (crates.io) is affected by RUSTSEC-2026-0395","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"zstd-safe@7.2.4 (crates.io):RUSTSEC-2026-0395"},{"rule_id":"osv/RUSTSEC-2026-0396","severity":"medium","message":"zstd-safe@7.2.4 (crates.io) is affected by RUSTSEC-2026-0396","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"zstd-safe@7.2.4 (crates.io):RUSTSEC-2026-0396"},{"rule_id":"osv/RUSTSEC-2026-0397","severity":"medium","message":"zstd-safe@7.2.4 (crates.io) is affected by RUSTSEC-2026-0397","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"zstd-safe@7.2.4 (crates.io):RUSTSEC-2026-0397"},{"rule_id":"osv/RUSTSEC-2026-0398","severity":"medium","message":"zstd-safe@7.2.4 (crates.io) is affected by RUSTSEC-2026-0398","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"zstd-safe@7.2.4 (crates.io):RUSTSEC-2026-0398"},{"rule_id":"osv/RUSTSEC-2026-0399","severity":"medium","message":"zstd-safe@7.2.4 (crates.io) is affected by RUSTSEC-2026-0399","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"zstd-safe@7.2.4 (crates.io):RUSTSEC-2026-0399"},{"rule_id":"osv/RUSTSEC-2026-0400","severity":"medium","message":"zstd-safe@7.2.4 (crates.io) is affected by RUSTSEC-2026-0400","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"zstd-safe@7.2.4 (crates.io):RUSTSEC-2026-0400"},{"rule_id":"osv/RUSTSEC-2026-0401","severity":"medium","message":"zstd-safe@7.2.4 (crates.io) is affected by RUSTSEC-2026-0401","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"zstd-safe@7.2.4 (crates.io):RUSTSEC-2026-0401"},{"rule_id":"osv/RUSTSEC-2026-0402","severity":"medium","message":"zstd-safe@7.2.4 (crates.io) is affected by RUSTSEC-2026-0402","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"zstd-safe@7.2.4 (crates.io):RUSTSEC-2026-0402"},{"rule_id":"osv/RUSTSEC-2026-0403","severity":"medium","message":"zstd-safe@7.2.4 (crates.io) is affected by RUSTSEC-2026-0403","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"zstd-safe@7.2.4 (crates.io):RUSTSEC-2026-0403"},{"rule_id":"osv/RUSTSEC-2026-0404","severity":"medium","message":"zstd-safe@7.2.4 (crates.io) is affected by RUSTSEC-2026-0404","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"zstd-safe@7.2.4 (crates.io):RUSTSEC-2026-0404"},{"rule_id":"osv/RUSTSEC-2026-0405","severity":"medium","message":"zstd-safe@7.2.4 (crates.io) is affected by RUSTSEC-2026-0405","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"zstd-safe@7.2.4 (crates.io):RUSTSEC-2026-0405"},{"rule_id":"osv/RUSTSEC-2026-0406","severity":"medium","message":"zstd-safe@7.2.4 (crates.io) is affected by RUSTSEC-2026-0406","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"zstd-safe@7.2.4 (crates.io):RUSTSEC-2026-0406"},{"rule_id":"osv/RUSTSEC-2026-0410","severity":"medium","message":"zstd-sys@2.0.16+zstd.1.5.7 (crates.io) is affected by RUSTSEC-2026-0410","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"zstd-sys@2.0.16+zstd.1.5.7 (crates.io):RUSTSEC-2026-0410"},{"rule_id":"osv/GHSA-6g2r-675j-hx59","severity":"low","message":"xxhash-rust@0.8.15 (crates.io) is affected by GHSA-6g2r-675j-hx59","path":"Cargo.lock","line":null,"fingerprint":"xxhash-rust@0.8.15 (crates.io):GHSA-6g2r-675j-hx59"},{"rule_id":"osv/GHSA-rhfx-m35p-ff5j","severity":"low","message":"lru@0.12.5 (crates.io) is affected by RUSTSEC-2026-0002, GHSA-rhfx-m35p-ff5j","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"lru@0.12.5 (crates.io):GHSA-rhfx-m35p-ff5j"},{"rule_id":"osv/GHSA-w44r-93j7-qv28","severity":"low","message":"rustls@0.19.1 (crates.io) is affected by RUSTSEC-2026-0349, GHSA-w44r-93j7-qv28","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"rustls@0.19.1 (crates.io):GHSA-w44r-93j7-qv28"},{"rule_id":"osv/GHSA-h2v8-394m-p7vv","severity":"low","message":"rustls@0.19.1 (crates.io) is affected by GHSA-h2v8-394m-p7vv","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"rustls@0.19.1 (crates.io):GHSA-h2v8-394m-p7vv"},{"rule_id":"osv/GHSA-w44r-93j7-qv28","severity":"low","message":"rustls@0.21.12 (crates.io) is affected by RUSTSEC-2026-0349, GHSA-w44r-93j7-qv28","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"rustls@0.21.12 (crates.io):GHSA-w44r-93j7-qv28"},{"rule_id":"osv/GHSA-h2v8-394m-p7vv","severity":"low","message":"rustls@0.21.12 (crates.io) is affected by GHSA-h2v8-394m-p7vv","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"rustls@0.21.12 (crates.io):GHSA-h2v8-394m-p7vv"},{"rule_id":"osv/GHSA-h2v8-394m-p7vv","severity":"low","message":"rustls@0.23.43 (crates.io) is affected by RUSTSEC-2026-0348, GHSA-h2v8-394m-p7vv","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"rustls@0.23.43 (crates.io):GHSA-h2v8-394m-p7vv"},{"rule_id":"osv/GHSA-w44r-93j7-qv28","severity":"low","message":"rustls@0.23.43 (crates.io) is affected by RUSTSEC-2026-0349, GHSA-w44r-93j7-qv28","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"rustls@0.23.43 (crates.io):GHSA-w44r-93j7-qv28"},{"rule_id":"osv/GHSA-965h-392x-2mh5","severity":"low","message":"rustls-webpki@0.101.7 (crates.io) is affected by RUSTSEC-2026-0098, GHSA-965h-392x-2mh5","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"rustls-webpki@0.101.7 (crates.io):GHSA-965h-392x-2mh5"},{"rule_id":"osv/GHSA-xgp8-3hg3-c2mh","severity":"low","message":"rustls-webpki@0.101.7 (crates.io) is affected by RUSTSEC-2026-0099, GHSA-xgp8-3hg3-c2mh","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"rustls-webpki@0.101.7 (crates.io):GHSA-xgp8-3hg3-c2mh"},{"rule_id":"osv/GHSA-c2f5-jxjv-2hh8","severity":"low","message":"wasmtime@18.0.4 (crates.io) is affected by RUSTSEC-2024-0438, GHSA-c2f5-jxjv-2hh8","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"wasmtime@18.0.4 (crates.io):GHSA-c2f5-jxjv-2hh8"},{"rule_id":"osv/GHSA-fm79-3f68-h2fc","severity":"low","message":"wasmtime@18.0.4 (crates.io) is affected by RUSTSEC-2025-0046, GHSA-fm79-3f68-h2fc","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"wasmtime@18.0.4 (crates.io):GHSA-fm79-3f68-h2fc"},{"rule_id":"osv/GHSA-hc7m-r6v8-hg9q","severity":"low","message":"wasmtime@18.0.4 (crates.io) is affected by RUSTSEC-2025-0118, GHSA-hc7m-r6v8-hg9q","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"wasmtime@18.0.4 (crates.io):GHSA-hc7m-r6v8-hg9q"},{"rule_id":"osv/RUSTSEC-2026-0086","severity":"low","message":"wasmtime@18.0.4 (crates.io) is affected by RUSTSEC-2026-0086","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"wasmtime@18.0.4 (crates.io):RUSTSEC-2026-0086"},{"rule_id":"osv/RUSTSEC-2026-0088","severity":"low","message":"wasmtime@18.0.4 (crates.io) is affected by RUSTSEC-2026-0088","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"wasmtime@18.0.4 (crates.io):RUSTSEC-2026-0088"},{"rule_id":"osv/RUSTSEC-2026-0222","severity":"low","message":"wasmtime@18.0.4 (crates.io) is affected by RUSTSEC-2026-0222","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"wasmtime@18.0.4 (crates.io):RUSTSEC-2026-0222"},{"rule_id":"osv/RUSTSEC-2026-0316","severity":"low","message":"wasmtime@18.0.4 (crates.io) is affected by RUSTSEC-2026-0316","path":"version-compatibility/Cargo.lock","line":null,"fingerprint":"wasmtime@18.0.4 (crates.io):RUSTSEC-2026-0316"}],"evidence":[],"data":{"ecosystems":["crates.io"]},"error":null},{"analyzer":"sec-actions","pillar":"security","status":"ok","tool_version":"zizmor 1.32.0","metrics":{"workflows":14.0,"findings":205.0,"findings_high":114.0,"findings_medium":33.0,"findings_low":58.0,"penalty":1421.1},"findings":[{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/actions/slack-notify-template/action.yml","line":16,"fingerprint":"unpinned-uses:.github/actions/slack-notify-template/action.yml:16"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/chaos-test.yml","line":42,"fingerprint":"template-injection:.github/workflows/chaos-test.yml:42"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/chaos-test.yml","line":45,"fingerprint":"template-injection:.github/workflows/chaos-test.yml:45"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/chaos-test.yml","line":93,"fingerprint":"template-injection:.github/workflows/chaos-test.yml:93"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/chaos-test.yml","line":94,"fingerprint":"template-injection:.github/workflows/chaos-test.yml:94"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/chaos-test.yml","line":95,"fingerprint":"template-injection:.github/workflows/chaos-test.yml:95"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/chaos-test.yml","line":96,"fingerprint":"template-injection:.github/workflows/chaos-test.yml:96"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/chaos-test.yml","line":65,"fingerprint":"unpinned-uses:.github/workflows/chaos-test.yml:65"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/chaos-test.yml","line":68,"fingerprint":"unpinned-uses:.github/workflows/chaos-test.yml:68"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/chaos-test.yml","line":74,"fingerprint":"unpinned-uses:.github/workflows/chaos-test.yml:74"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/chaos-test.yml","line":117,"fingerprint":"unpinned-uses:.github/workflows/chaos-test.yml:117"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/ci.yml","line":384,"fingerprint":"template-injection:.github/workflows/ci.yml:384"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/ci.yml","line":38,"fingerprint":"unpinned-uses:.github/workflows/ci.yml:38"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/ci.yml","line":62,"fingerprint":"unpinned-uses:.github/workflows/ci.yml:62"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/ci.yml","line":64,"fingerprint":"unpinned-uses:.github/workflows/ci.yml:64"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/ci.yml","line":75,"fingerprint":"unpinned-uses:.github/workflows/ci.yml:75"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/ci.yml","line":76,"fingerprint":"unpinned-uses:.github/workflows/ci.yml:76"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/ci.yml","line":87,"fingerprint":"unpinned-uses:.github/workflows/ci.yml:87"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/ci.yml","line":158,"fingerprint":"unpinned-uses:.github/workflows/ci.yml:158"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/ci.yml","line":159,"fingerprint":"unpinned-uses:.github/workflows/ci.yml:159"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/ci.yml","line":165,"fingerprint":"unpinned-uses:.github/workflows/ci.yml:165"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/ci.yml","line":168,"fingerprint":"unpinned-uses:.github/workflows/ci.yml:168"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/ci.yml","line":169,"fingerprint":"unpinned-uses:.github/workflows/ci.yml:169"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/ci.yml","line":180,"fingerprint":"unpinned-uses:.github/workflows/ci.yml:180"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/ci.yml","line":194,"fingerprint":"unpinned-uses:.github/workflows/ci.yml:194"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/ci.yml","line":204,"fingerprint":"unpinned-uses:.github/workflows/ci.yml:204"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/ci.yml","line":205,"fingerprint":"unpinned-uses:.github/workflows/ci.yml:205"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/ci.yml","line":210,"fingerprint":"unpinned-uses:.github/workflows/ci.yml:210"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/ci.yml","line":234,"fingerprint":"unpinned-uses:.github/workflows/ci.yml:234"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/ci.yml","line":235,"fingerprint":"unpinned-uses:.github/workflows/ci.yml:235"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/ci.yml","line":238,"fingerprint":"unpinned-uses:.github/workflows/ci.yml:238"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/ci.yml","line":239,"fingerprint":"unpinned-uses:.github/workflows/ci.yml:239"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/ci.yml","line":271,"fingerprint":"unpinned-uses:.github/workflows/ci.yml:271"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/ci.yml","line":273,"fingerprint":"unpinned-uses:.github/workflows/ci.yml:273"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/ci.yml","line":276,"fingerprint":"unpinned-uses:.github/workflows/ci.yml:276"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/ci.yml","line":277,"fingerprint":"unpinned-uses:.github/workflows/ci.yml:277"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/ci.yml","line":313,"fingerprint":"unpinned-uses:.github/workflows/ci.yml:313"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/ci.yml","line":315,"fingerprint":"unpinned-uses:.github/workflows/ci.yml:315"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/ci.yml","line":328,"fingerprint":"unpinned-uses:.github/workflows/ci.yml:328"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/ci.yml","line":329,"fingerprint":"unpinned-uses:.github/workflows/ci.yml:329"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/ci.yml","line":377,"fingerprint":"unpinned-uses:.github/workflows/ci.yml:377"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/ci.yml","line":396,"fingerprint":"unpinned-uses:.github/workflows/ci.yml:396"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/ci.yml","line":399,"fingerprint":"unpinned-uses:.github/workflows/ci.yml:399"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/ci.yml","line":405,"fingerprint":"unpinned-uses:.github/workflows/ci.yml:405"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/ci.yml","line":439,"fingerprint":"unpinned-uses:.github/workflows/ci.yml:439"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/ci.yml","line":443,"fingerprint":"unpinned-uses:.github/workflows/ci.yml:443"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/ci.yml","line":447,"fingerprint":"unpinned-uses:.github/workflows/ci.yml:447"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/ci.yml","line":455,"fingerprint":"unpinned-uses:.github/workflows/ci.yml:455"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/ci.yml","line":462,"fingerprint":"unpinned-uses:.github/workflows/ci.yml:462"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/ci.yml","line":477,"fingerprint":"unpinned-uses:.github/workflows/ci.yml:477"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/ci.yml","line":486,"fingerprint":"unpinned-uses:.github/workflows/ci.yml:486"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/ci.yml","line":543,"fingerprint":"unpinned-uses:.github/workflows/ci.yml:543"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/ci.yml","line":556,"fingerprint":"unpinned-uses:.github/workflows/ci.yml:556"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/ci.yml","line":557,"fingerprint":"unpinned-uses:.github/workflows/ci.yml:557"},{"rule_id":"zizmor/cache-poisoning","severity":"high","message":"runtime artifacts potentially vulnerable to a cache poisoning attack [confidence low]","path":".github/workflows/ci.yml","line":169,"fingerprint":"cache-poisoning:.github/workflows/ci.yml:169"},{"rule_id":"zizmor/cache-poisoning","severity":"high","message":"runtime artifacts potentially vulnerable to a cache poisoning attack [confidence low]","path":".github/workflows/ci.yml","line":180,"fingerprint":"cache-poisoning:.github/workflows/ci.yml:180"},{"rule_id":"zizmor/cache-poisoning","severity":"high","message":"runtime artifacts potentially vulnerable to a cache poisoning attack [confidence low]","path":".github/workflows/ci.yml","line":239,"fingerprint":"cache-poisoning:.github/workflows/ci.yml:239"},{"rule_id":"zizmor/cache-poisoning","severity":"high","message":"runtime artifacts potentially vulnerable to a cache poisoning attack [confidence low]","path":".github/workflows/ci.yml","line":277,"fingerprint":"cache-poisoning:.github/workflows/ci.yml:277"},{"rule_id":"zizmor/cache-poisoning","severity":"high","message":"runtime artifacts potentially vulnerable to a cache poisoning attack [confidence low]","path":".github/workflows/ci.yml","line":329,"fingerprint":"cache-poisoning:.github/workflows/ci.yml:329"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/create_version.yml","line":26,"fingerprint":"template-injection:.github/workflows/create_version.yml:26"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/create_version.yml","line":18,"fingerprint":"unpinned-uses:.github/workflows/create_version.yml:18"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/delete-test-env.yml","line":17,"fingerprint":"unpinned-uses:.github/workflows/delete-test-env.yml:17"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/dependencies.yml","line":33,"fingerprint":"unpinned-uses:.github/workflows/dependencies.yml:33"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/dependencies.yml","line":34,"fingerprint":"unpinned-uses:.github/workflows/dependencies.yml:34"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/dependencies.yml","line":42,"fingerprint":"unpinned-uses:.github/workflows/dependencies.yml:42"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/dependencies.yml","line":48,"fingerprint":"unpinned-uses:.github/workflows/dependencies.yml:48"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/dependencies.yml","line":63,"fingerprint":"unpinned-uses:.github/workflows/dependencies.yml:63"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/dependencies.yml","line":66,"fingerprint":"unpinned-uses:.github/workflows/dependencies.yml:66"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/dependencies.yml","line":70,"fingerprint":"unpinned-uses:.github/workflows/dependencies.yml:70"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/deploy-test-env.yml","line":17,"fingerprint":"unpinned-uses:.github/workflows/deploy-test-env.yml:17"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/docker-images.yml","line":39,"fingerprint":"unpinned-uses:.github/workflows/docker-images.yml:39"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/docker-images.yml","line":42,"fingerprint":"unpinned-uses:.github/workflows/docker-images.yml:42"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/docker-images.yml","line":49,"fingerprint":"unpinned-uses:.github/workflows/docker-images.yml:49"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/docker-images.yml","line":55,"fingerprint":"unpinned-uses:.github/workflows/docker-images.yml:55"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/docker-images.yml","line":62,"fingerprint":"unpinned-uses:.github/workflows/docker-images.yml:62"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/docker-images.yml","line":68,"fingerprint":"unpinned-uses:.github/workflows/docker-images.yml:68"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/docker-images.yml","line":82,"fingerprint":"unpinned-uses:.github/workflows/docker-images.yml:82"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/docker-images.yml","line":110,"fingerprint":"unpinned-uses:.github/workflows/docker-images.yml:110"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/docker-images.yml","line":113,"fingerprint":"unpinned-uses:.github/workflows/docker-images.yml:113"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/docker-images.yml","line":116,"fingerprint":"unpinned-uses:.github/workflows/docker-images.yml:116"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/docker-images.yml","line":123,"fingerprint":"unpinned-uses:.github/workflows/docker-images.yml:123"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/docker-images.yml","line":128,"fingerprint":"unpinned-uses:.github/workflows/docker-images.yml:128"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/docker-images.yml","line":135,"fingerprint":"unpinned-uses:.github/workflows/docker-images.yml:135"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/docker-images.yml","line":142,"fingerprint":"unpinned-uses:.github/workflows/docker-images.yml:142"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/docker-images.yml","line":156,"fingerprint":"unpinned-uses:.github/workflows/docker-images.yml:156"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/docker-images.yml","line":167,"fingerprint":"unpinned-uses:.github/workflows/docker-images.yml:167"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/docker-images.yml","line":181,"fingerprint":"unpinned-uses:.github/workflows/docker-images.yml:181"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/docker-images.yml","line":204,"fingerprint":"unpinned-uses:.github/workflows/docker-images.yml:204"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/docker-images.yml","line":207,"fingerprint":"unpinned-uses:.github/workflows/docker-images.yml:207"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/docker-images.yml","line":210,"fingerprint":"unpinned-uses:.github/workflows/docker-images.yml:210"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/docker-images.yml","line":217,"fingerprint":"unpinned-uses:.github/workflows/docker-images.yml:217"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/docker-images.yml","line":222,"fingerprint":"unpinned-uses:.github/workflows/docker-images.yml:222"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/docker-images.yml","line":229,"fingerprint":"unpinned-uses:.github/workflows/docker-images.yml:229"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/docker-images.yml","line":236,"fingerprint":"unpinned-uses:.github/workflows/docker-images.yml:236"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/docker-images.yml","line":250,"fingerprint":"unpinned-uses:.github/workflows/docker-images.yml:250"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/docker-images.yml","line":261,"fingerprint":"unpinned-uses:.github/workflows/docker-images.yml:261"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/docker-images.yml","line":275,"fingerprint":"unpinned-uses:.github/workflows/docker-images.yml:275"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/docker-images.yml","line":300,"fingerprint":"unpinned-uses:.github/workflows/docker-images.yml:300"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/e2e-test-beta4-dev.yml","line":12,"fingerprint":"unpinned-uses:.github/workflows/e2e-test-beta4-dev.yml:12"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/nightly-benchmark.yml","line":26,"fingerprint":"unpinned-uses:.github/workflows/nightly-benchmark.yml:26"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/nightly-benchmark.yml","line":29,"fingerprint":"unpinned-uses:.github/workflows/nightly-benchmark.yml:29"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/nightly-benchmark.yml","line":38,"fingerprint":"unpinned-uses:.github/workflows/nightly-benchmark.yml:38"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/nightly-benchmark.yml","line":47,"fingerprint":"unpinned-uses:.github/workflows/nightly-benchmark.yml:47"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/nightly-benchmark.yml","line":66,"fingerprint":"unpinned-uses:.github/workflows/nightly-benchmark.yml:66"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/nightly-cargo-audit.yml","line":11,"fingerprint":"unpinned-uses:.github/workflows/nightly-cargo-audit.yml:11"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/nightly-cargo-audit.yml","line":12,"fingerprint":"unpinned-uses:.github/workflows/nightly-cargo-audit.yml:12"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/publish-codecov.yml","line":58,"fingerprint":"template-injection:.github/workflows/publish-codecov.yml:58"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/publish-codecov.yml","line":28,"fingerprint":"unpinned-uses:.github/workflows/publish-codecov.yml:28"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/publish-codecov.yml","line":30,"fingerprint":"unpinned-uses:.github/workflows/publish-codecov.yml:30"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/publish-codecov.yml","line":36,"fingerprint":"unpinned-uses:.github/workflows/publish-codecov.yml:36"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/publish-codecov.yml","line":42,"fingerprint":"unpinned-uses:.github/workflows/publish-codecov.yml:42"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/releasy-dependency-commits.yml","line":15,"fingerprint":"unpinned-uses:.github/workflows/releasy-dependency-commits.yml:15"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/spellcheck.yml","line":11,"fingerprint":"unpinned-uses:.github/workflows/spellcheck.yml:11"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/update_readme_versions.yml","line":16,"fingerprint":"unpinned-uses:.github/workflows/update_readme_versions.yml:16"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/chaos-test.yml","line":1,"fingerprint":"excessive-permissions:.github/workflows/chaos-test.yml:1"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/chaos-test.yml","line":35,"fingerprint":"excessive-permissions:.github/workflows/chaos-test.yml:35"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/chaos-test.yml","line":57,"fingerprint":"excessive-permissions:.github/workflows/chaos-test.yml:57"},{"rule_id":"zizmor/template-injection","severity":"medium","message":"code injection via template expansion [confidence medium]","path":".github/workflows/chaos-test.yml","line":88,"fingerprint":"template-injection:.github/workflows/chaos-test.yml:88"},{"rule_id":"zizmor/template-injection","severity":"medium","message":"code injection via template expansion [confidence medium]","path":".github/workflows/chaos-test.yml","line":88,"fingerprint":"template-injection:.github/workflows/chaos-test.yml:88"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/ci.yml","line":1,"fingerprint":"excessive-permissions:.github/workflows/ci.yml:1"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/ci.yml","line":33,"fingerprint":"excessive-permissions:.github/workflows/ci.yml:33"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/ci.yml","line":59,"fingerprint":"excessive-permissions:.github/workflows/ci.yml:59"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/ci.yml","line":72,"fingerprint":"excessive-permissions:.github/workflows/ci.yml:72"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/ci.yml","line":84,"fingerprint":"excessive-permissions:.github/workflows/ci.yml:84"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/ci.yml","line":92,"fingerprint":"excessive-permissions:.github/workflows/ci.yml:92"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/ci.yml","line":200,"fingerprint":"excessive-permissions:.github/workflows/ci.yml:200"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/ci.yml","line":216,"fingerprint":"excessive-permissions:.github/workflows/ci.yml:216"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/ci.yml","line":248,"fingerprint":"excessive-permissions:.github/workflows/ci.yml:248"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/ci.yml","line":300,"fingerprint":"excessive-permissions:.github/workflows/ci.yml:300"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/ci.yml","line":359,"fingerprint":"excessive-permissions:.github/workflows/ci.yml:359"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/ci.yml","line":370,"fingerprint":"excessive-permissions:.github/workflows/ci.yml:370"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/ci.yml","line":386,"fingerprint":"excessive-permissions:.github/workflows/ci.yml:386"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/ci.yml","line":410,"fingerprint":"excessive-permissions:.github/workflows/ci.yml:410"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/ci.yml","line":552,"fingerprint":"excessive-permissions:.github/workflows/ci.yml:552"},{"rule_id":"zizmor/archived-uses","severity":"medium","message":"action or reusable workflow from archived repository [confidence high]","path":".github/workflows/ci.yml","line":543,"fingerprint":"archived-uses:.github/workflows/ci.yml:543"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/delete-test-env.yml","line":12,"fingerprint":"excessive-permissions:.github/workflows/delete-test-env.yml:12"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/deploy-test-env.yml","line":12,"fingerprint":"excessive-permissions:.github/workflows/deploy-test-env.yml:12"},{"rule_id":"zizmor/artipacked","severity":"medium","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/docker-images.yml","line":109,"fingerprint":"artipacked:.github/workflows/docker-images.yml:109"},{"rule_id":"zizmor/artipacked","severity":"medium","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/docker-images.yml","line":203,"fingerprint":"artipacked:.github/workflows/docker-images.yml:203"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/docker-images.yml","line":1,"fingerprint":"excessive-permissions:.github/workflows/docker-images.yml:1"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/docker-images.yml","line":286,"fingerprint":"excessive-permissions:.github/workflows/docker-images.yml:286"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/e2e-test-beta4-dev.yml","line":8,"fingerprint":"excessive-permissions:.github/workflows/e2e-test-beta4-dev.yml:8"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/nightly-benchmark.yml","line":1,"fingerprint":"excessive-permissions:.github/workflows/nightly-benchmark.yml:1"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/nightly-benchmark.yml","line":16,"fingerprint":"excessive-permissions:.github/workflows/nightly-benchmark.yml:16"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/nightly-cargo-audit.yml","line":8,"fingerprint":"excessive-permissions:.github/workflows/nightly-cargo-audit.yml:8"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/releasy-dependency-commits.yml","line":10,"fingerprint":"excessive-permissions:.github/workflows/releasy-dependency-commits.yml:10"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/spellcheck.yml","line":7,"fingerprint":"excessive-permissions:.github/workflows/spellcheck.yml:7"},{"rule_id":"zizmor/artipacked","severity":"low","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/chaos-test.yml","line":65,"fingerprint":"artipacked:.github/workflows/chaos-test.yml:65"},{"rule_id":"zizmor/artipacked","severity":"low","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/ci.yml","line":37,"fingerprint":"artipacked:.github/workflows/ci.yml:37"},{"rule_id":"zizmor/artipacked","severity":"low","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/ci.yml","line":62,"fingerprint":"artipacked:.github/workflows/ci.yml:62"},{"rule_id":"zizmor/artipacked","severity":"low","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/ci.yml","line":75,"fingerprint":"artipacked:.github/workflows/ci.yml:75"},{"rule_id":"zizmor/artipacked","severity":"low","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/ci.yml","line":87,"fingerprint":"artipacked:.github/workflows/ci.yml:87"},{"rule_id":"zizmor/artipacked","severity":"low","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/ci.yml","line":158,"fingerprint":"artipacked:.github/workflows/ci.yml:158"},{"rule_id":"zizmor/artipacked","severity":"low","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/ci.yml","line":203,"fingerprint":"artipacked:.github/workflows/ci.yml:203"},{"rule_id":"zizmor/artipacked","severity":"low","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/ci.yml","line":234,"fingerprint":"artipacked:.github/workflows/ci.yml:234"},{"rule_id":"zizmor/artipacked","severity":"low","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/ci.yml","line":271,"fingerprint":"artipacked:.github/workflows/ci.yml:271"},{"rule_id":"zizmor/artipacked","severity":"low","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/ci.yml","line":313,"fingerprint":"artipacked:.github/workflows/ci.yml:313"},{"rule_id":"zizmor/artipacked","severity":"low","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/ci.yml","line":376,"fingerprint":"artipacked:.github/workflows/ci.yml:376"},{"rule_id":"zizmor/artipacked","severity":"low","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/ci.yml","line":395,"fingerprint":"artipacked:.github/workflows/ci.yml:395"},{"rule_id":"zizmor/artipacked","severity":"low","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/ci.yml","line":438,"fingerprint":"artipacked:.github/workflows/ci.yml:438"},{"rule_id":"zizmor/artipacked","severity":"low","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/ci.yml","line":556,"fingerprint":"artipacked:.github/workflows/ci.yml:556"},{"rule_id":"zizmor/template-injection","severity":"low","message":"code injection via template expansion [confidence high]","path":".github/workflows/ci.yml","line":532,"fingerprint":"template-injection:.github/workflows/ci.yml:532"},{"rule_id":"zizmor/artipacked","severity":"low","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/create_version.yml","line":17,"fingerprint":"artipacked:.github/workflows/create_version.yml:17"},{"rule_id":"zizmor/artipacked","severity":"low","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/delete-test-env.yml","line":16,"fingerprint":"artipacked:.github/workflows/delete-test-env.yml:16"},{"rule_id":"zizmor/template-injection","severity":"low","message":"code injection via template expansion [confidence high]","path":".github/workflows/delete-test-env.yml","line":33,"fingerprint":"template-injection:.github/workflows/delete-test-env.yml:33"},{"rule_id":"zizmor/template-injection","severity":"low","message":"code injection via template expansion [confidence high]","path":".github/workflows/delete-test-env.yml","line":33,"fingerprint":"template-injection:.github/workflows/delete-test-env.yml:33"},{"rule_id":"zizmor/artipacked","severity":"low","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/dependencies.yml","line":32,"fingerprint":"artipacked:.github/workflows/dependencies.yml:32"},{"rule_id":"zizmor/artipacked","severity":"low","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/dependencies.yml","line":62,"fingerprint":"artipacked:.github/workflows/dependencies.yml:62"},{"rule_id":"zizmor/artipacked","severity":"low","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/deploy-test-env.yml","line":16,"fingerprint":"artipacked:.github/workflows/deploy-test-env.yml:16"},{"rule_id":"zizmor/template-injection","severity":"low","message":"code injection via template expansion [confidence high]","path":".github/workflows/deploy-test-env.yml","line":33,"fingerprint":"template-injection:.github/workflows/deploy-test-env.yml:33"},{"rule_id":"zizmor/template-injection","severity":"low","message":"code injection via template expansion [confidence high]","path":".github/workflows/deploy-test-env.yml","line":33,"fingerprint":"template-injection:.github/workflows/deploy-test-env.yml:33"},{"rule_id":"zizmor/artipacked","severity":"low","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/docker-images.yml","line":38,"fingerprint":"artipacked:.github/workflows/docker-images.yml:38"},{"rule_id":"zizmor/template-injection","severity":"low","message":"code injection via template expansion [confidence high]","path":".github/workflows/docker-images.yml","line":94,"fingerprint":"template-injection:.github/workflows/docker-images.yml:94"},{"rule_id":"zizmor/artipacked","severity":"low","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/e2e-test-beta4-dev.yml","line":12,"fingerprint":"artipacked:.github/workflows/e2e-test-beta4-dev.yml:12"},{"rule_id":"zizmor/artipacked","severity":"low","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/nightly-benchmark.yml","line":25,"fingerprint":"artipacked:.github/workflows/nightly-benchmark.yml:25"},{"rule_id":"zizmor/artipacked","severity":"low","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/nightly-benchmark.yml","line":65,"fingerprint":"artipacked:.github/workflows/nightly-benchmark.yml:65"},{"rule_id":"zizmor/artipacked","severity":"low","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/nightly-cargo-audit.yml","line":11,"fingerprint":"artipacked:.github/workflows/nightly-cargo-audit.yml:11"},{"rule_id":"zizmor/artipacked","severity":"low","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/publish-codecov.yml","line":28,"fingerprint":"artipacked:.github/workflows/publish-codecov.yml:28"},{"rule_id":"zizmor/artipacked","severity":"low","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/publish-codecov.yml","line":41,"fingerprint":"artipacked:.github/workflows/publish-codecov.yml:41"},{"rule_id":"zizmor/template-injection","severity":"low","message":"code injection via template expansion [confidence high]","path":".github/workflows/publish-codecov.yml","line":50,"fingerprint":"template-injection:.github/workflows/publish-codecov.yml:50"},{"rule_id":"zizmor/template-injection","severity":"low","message":"code injection via template expansion [confidence high]","path":".github/workflows/publish-codecov.yml","line":56,"fingerprint":"template-injection:.github/workflows/publish-codecov.yml:56"},{"rule_id":"zizmor/artipacked","severity":"low","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/releasy-dependency-commits.yml","line":15,"fingerprint":"artipacked:.github/workflows/releasy-dependency-commits.yml:15"},{"rule_id":"zizmor/artipacked","severity":"low","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/spellcheck.yml","line":10,"fingerprint":"artipacked:.github/workflows/spellcheck.yml:10"},{"rule_id":"zizmor/artipacked","severity":"low","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/update_readme_versions.yml","line":15,"fingerprint":"artipacked:.github/workflows/update_readme_versions.yml:15"},{"rule_id":"zizmor/template-injection","severity":"info","message":"code injection via template expansion [confidence low]","path":".github/workflows/create_version.yml","line":75,"fingerprint":"template-injection:.github/workflows/create_version.yml:75"},{"rule_id":"zizmor/template-injection","severity":"info","message":"code injection via template expansion [confidence low]","path":".github/workflows/create_version.yml","line":76,"fingerprint":"template-injection:.github/workflows/create_version.yml:76"},{"rule_id":"zizmor/template-injection","severity":"info","message":"code injection via template expansion [confidence low]","path":".github/workflows/create_version.yml","line":83,"fingerprint":"template-injection:.github/workflows/create_version.yml:83"},{"rule_id":"zizmor/template-injection","severity":"info","message":"code injection via template expansion [confidence low]","path":".github/workflows/create_version.yml","line":84,"fingerprint":"template-injection:.github/workflows/create_version.yml:84"},{"rule_id":"zizmor/template-injection","severity":"info","message":"code injection via template expansion [confidence low]","path":".github/workflows/create_version.yml","line":103,"fingerprint":"template-injection:.github/workflows/create_version.yml:103"},{"rule_id":"zizmor/template-injection","severity":"info","message":"code injection via template expansion [confidence low]","path":".github/workflows/docker-images.yml","line":94,"fingerprint":"template-injection:.github/workflows/docker-images.yml:94"},{"rule_id":"zizmor/template-injection","severity":"info","message":"code injection via template expansion [confidence low]","path":".github/workflows/update_readme_versions.yml","line":51,"fingerprint":"template-injection:.github/workflows/update_readme_versions.yml:51"},{"rule_id":"zizmor/template-injection","severity":"info","message":"code injection via template expansion [confidence low]","path":".github/workflows/update_readme_versions.yml","line":51,"fingerprint":"template-injection:.github/workflows/update_readme_versions.yml:51"},{"rule_id":"zizmor/template-injection","severity":"info","message":"code injection via template expansion [confidence low]","path":".github/workflows/update_readme_versions.yml","line":52,"fingerprint":"template-injection:.github/workflows/update_readme_versions.yml:52"},{"rule_id":"zizmor/template-injection","severity":"info","message":"code injection via template expansion [confidence low]","path":".github/workflows/update_readme_versions.yml","line":56,"fingerprint":"template-injection:.github/workflows/update_readme_versions.yml:56"},{"rule_id":"zizmor/template-injection","severity":"info","message":"code injection via template expansion [confidence low]","path":".github/workflows/update_readme_versions.yml","line":56,"fingerprint":"template-injection:.github/workflows/update_readme_versions.yml:56"},{"rule_id":"zizmor/template-injection","severity":"info","message":"code injection via template expansion [confidence low]","path":".github/workflows/update_readme_versions.yml","line":57,"fingerprint":"template-injection:.github/workflows/update_readme_versions.yml:57"},{"rule_id":"zizmor/template-injection","severity":"info","message":"code injection via template expansion [confidence low]","path":".github/workflows/update_readme_versions.yml","line":61,"fingerprint":"template-injection:.github/workflows/update_readme_versions.yml:61"},{"rule_id":"zizmor/template-injection","severity":"info","message":"code injection via template expansion [confidence low]","path":".github/workflows/update_readme_versions.yml","line":61,"fingerprint":"template-injection:.github/workflows/update_readme_versions.yml:61"},{"rule_id":"zizmor/template-injection","severity":"info","message":"code injection via template expansion [confidence low]","path":".github/workflows/update_readme_versions.yml","line":62,"fingerprint":"template-injection:.github/workflows/update_readme_versions.yml:62"},{"rule_id":"zizmor/template-injection","severity":"info","message":"code injection via template expansion [confidence low]","path":".github/workflows/update_readme_versions.yml","line":104,"fingerprint":"template-injection:.github/workflows/update_readme_versions.yml:104"}],"evidence":[],"data":{},"error":null},{"analyzer":"sec-posture","pillar":"security","status":"ok","tool_version":null,"metrics":{"check:security_policy":1.0,"check:dependency_updates":0.0,"check:signed_commits":1.0,"check:lockfiles":0.0,"signed_commit_share":0.995,"unpinned_manifests":41.0},"findings":[],"evidence":[{"kind":"posture","description":"Security policy: SECURITY.md","ref":"SECURITY.md","url":null,"weight":0.0},{"kind":"posture","description":"benches/Cargo.toml has no lockfile alongside it (unpinned dependencies)","ref":"benches/Cargo.toml","url":null,"weight":0.3},{"kind":"posture","description":"benches/benches-outputs/Cargo.toml has no lockfile alongside it (unpinned dependencies)","ref":"benches/benches-outputs/Cargo.toml","url":null,"weight":0.3},{"kind":"posture","description":"bin/chaos-test/Cargo.toml has no lockfile alongside it (unpinned dependencies)","ref":"bin/chaos-test/Cargo.toml","url":null,"weight":0.3},{"kind":"posture","description":"bin/e2e-test-client/Cargo.toml has no lockfile alongside it (unpinned dependencies)","ref":"bin/e2e-test-client/Cargo.toml","url":null,"weight":0.3},{"kind":"posture","description":"bin/fuel-core-client/Cargo.toml has no lockfile alongside it (unpinned dependencies)","ref":"bin/fuel-core-client/Cargo.toml","url":null,"weight":0.3},{"kind":"posture","description":"bin/fuel-core/Cargo.toml has no lockfile alongside it (unpinned dependencies)","ref":"bin/fuel-core/Cargo.toml","url":null,"weight":0.3},{"kind":"posture","description":"bin/keygen/Cargo.toml has no lockfile alongside it (unpinned dependencies)","ref":"bin/keygen/Cargo.toml","url":null,"weight":0.3},{"kind":"posture","description":"crates/chain-config/Cargo.toml has no lockfile alongside it (unpinned dependencies)","ref":"crates/chain-config/Cargo.toml","url":null,"weight":0.3},{"kind":"posture","description":"crates/client/Cargo.toml has no lockfile alongside it (unpinned dependencies)","ref":"crates/client/Cargo.toml","url":null,"weight":0.3},{"kind":"posture","description":"crates/compression/Cargo.toml has no lockfile alongside it (unpinned dependencies)","ref":"crates/compression/Cargo.toml","url":null,"weight":0.3},{"kind":"posture","description":"crates/database/Cargo.toml has no lockfile alongside it (unpinned dependencies)","ref":"crates/database/Cargo.toml","url":null,"weight":0.3},{"kind":"posture","description":"crates/fuel-core/Cargo.toml has no lockfile alongside it (unpinned dependencies)","ref":"crates/fuel-core/Cargo.toml","url":null,"weight":0.3},{"kind":"posture","description":"crates/fuel-gas-price-algorithm/Cargo.toml has no lockfile alongside it (unpinned dependencies)","ref":"crates/fuel-gas-price-algorithm/Cargo.toml","url":null,"weight":0.3},{"kind":"posture","description":"crates/keygen/Cargo.toml has no lockfile alongside it (unpinned dependencies)","ref":"crates/keygen/Cargo.toml","url":null,"weight":0.3},{"kind":"posture","description":"crates/metrics/Cargo.toml has no lockfile alongside it (unpinned dependencies)","ref":"crates/metrics/Cargo.toml","url":null,"weight":0.3},{"kind":"posture","description":"crates/provider/Cargo.toml has no lockfile alongside it (unpinned dependencies)","ref":"crates/provider/Cargo.toml","url":null,"weight":0.3},{"kind":"posture","description":"crates/services/Cargo.toml has no lockfile alongside it (unpinned dependencies)","ref":"crates/services/Cargo.toml","url":null,"weight":0.3},{"kind":"posture","description":"crates/services/block_aggregator_api/Cargo.toml has no lockfile alongside it (unpinned dependencies)","ref":"crates/services/block_aggregator_api/Cargo.toml","url":null,"weight":0.3},{"kind":"posture","description":"crates/services/compression/Cargo.toml has no lockfile alongside it (unpinned dependencies)","ref":"crates/services/compression/Cargo.toml","url":null,"weight":0.3},{"kind":"posture","description":"crates/services/consensus_module/Cargo.toml has no lockfile alongside it (unpinned dependencies)","ref":"crates/services/consensus_module/Cargo.toml","url":null,"weight":0.3}],"data":{},"error":null},{"analyzer":"sec-distribution","pillar":"security","status":"ok","tool_version":null,"metrics":{"signals":1.0,"binary_assets":40.0,"suspicious":0.0},"findings":[],"evidence":[{"kind":"binary-release-asset","description":"release v0.48.4 ships fuel-core-0.48.4-aarch64-apple-darwin.tar.gz (5 downloads)","ref":"fuel-core-0.48.4-aarch64-apple-darwin.tar.gz","url":"https://github.com/FuelLabs/fuel-core/releases/download/v0.48.4/fuel-core-0.48.4-aarch64-apple-darwin.tar.gz","weight":0.0},{"kind":"binary-release-asset","description":"release v0.48.4 ships fuel-core-0.48.4-aarch64-unknown-linux-gnu.tar.gz (6 downloads)","ref":"fuel-core-0.48.4-aarch64-unknown-linux-gnu.tar.gz","url":"https://github.com/FuelLabs/fuel-core/releases/download/v0.48.4/fuel-core-0.48.4-aarch64-unknown-linux-gnu.tar.gz","weight":0.0},{"kind":"binary-release-asset","description":"release v0.48.4 ships fuel-core-0.48.4-x86_64-apple-darwin.tar.gz (5 downloads)","ref":"fuel-core-0.48.4-x86_64-apple-darwin.tar.gz","url":"https://github.com/FuelLabs/fuel-core/releases/download/v0.48.4/fuel-core-0.48.4-x86_64-apple-darwin.tar.gz","weight":0.0},{"kind":"binary-release-asset","description":"release v0.48.4 ships fuel-core-0.48.4-x86_64-unknown-linux-gnu.tar.gz (23 downloads)","ref":"fuel-core-0.48.4-x86_64-unknown-linux-gnu.tar.gz","url":"https://github.com/FuelLabs/fuel-core/releases/download/v0.48.4/fuel-core-0.48.4-x86_64-unknown-linux-gnu.tar.gz","weight":0.0},{"kind":"binary-release-asset","description":"release v0.48.3 ships fuel-core-0.48.3-aarch64-apple-darwin.tar.gz (237 downloads)","ref":"fuel-core-0.48.3-aarch64-apple-darwin.tar.gz","url":"https://github.com/FuelLabs/fuel-core/releases/download/v0.48.3/fuel-core-0.48.3-aarch64-apple-darwin.tar.gz","weight":0.0}],"data":{"signals":["binary-release-assets"],"suspicious":false,"unusual_traction":false,"metadata":true},"error":null},{"analyzer":"qual-complexity","pillar":"quality","status":"ok","tool_version":"lizard 1.25.1","metrics":{"functions":6545.0,"function_nloc":99329.0,"mean_ccn":2.09,"p90_ccn":4.0,"complex_functions":42.0,"long_functions":66.0,"many_param_functions":21.0,"risky_nloc_share":0.1334},"findings":[],"evidence":[{"kind":"complex-function","description":"try_from in crates/client/src/client/schema/tx/transparent_receipt.rs: complexity 77, 333 lines","ref":"crates/client/src/client/schema/tx/transparent_receipt.rs","url":"https://github.com/FuelLabs/fuel-core/blob/8bd82d4d1ff4e6da7a0e9febbe96e6a864d79f1f/crates/client/src/client/schema/tx/transparent_receipt.rs#L75","weight":1.0},{"kind":"complex-function","description":"try_from in crates/client/src/client/schema/tx/transparent_tx.rs: complexity 64, 266 lines","ref":"crates/client/src/client/schema/tx/transparent_tx.rs","url":"https://github.com/FuelLabs/fuel-core/blob/8bd82d4d1ff4e6da7a0e9febbe96e6a864d79f1f/crates/client/src/client/schema/tx/transparent_tx.rs#L182","weight":1.0},{"kind":"complex-function","description":"receipt_from_proto in crates/services/block_aggregator_api/src/blocks/old_block_source/convertor_adapter/proto_to_fuel_conversions.rs: complexity 44, 199 lines","ref":"crates/services/block_aggregator_api/src/blocks/old_block_source/convertor_adapter/proto_to_fuel_conversions.rs","url":"https://github.com/FuelLabs/fuel-core/blob/8bd82d4d1ff4e6da7a0e9febbe96e6a864d79f1f/crates/services/block_aggregator_api/src/blocks/old_block_source/convertor_adapter/proto_to_fuel_conversions.rs#L299","weight":0.7333333333333333},{"kind":"complex-function","description":"tx_from_proto_tx in crates/services/block_aggregator_api/src/blocks/old_block_source/convertor_adapter/proto_to_fuel_conversions.rs: complexity 42, 275 lines","ref":"crates/services/block_aggregator_api/src/blocks/old_block_source/convertor_adapter/proto_to_fuel_conversions.rs","url":"https://github.com/FuelLabs/fuel-core/blob/8bd82d4d1ff4e6da7a0e9febbe96e6a864d79f1f/crates/services/block_aggregator_api/src/blocks/old_block_source/convertor_adapter/proto_to_fuel_conversions.rs#L570","weight":0.7},{"kind":"complex-function","description":"rollback_to in crates/fuel-core/src/combined_database.rs: complexity 40, 119 lines","ref":"crates/fuel-core/src/combined_database.rs","url":"https://github.com/FuelLabs/fuel-core/blob/8bd82d4d1ff4e6da7a0e9febbe96e6a864d79f1f/crates/fuel-core/src/combined_database.rs#L461","weight":0.6666666666666666},{"kind":"complex-function","description":"input_from_proto_input in crates/services/block_aggregator_api/src/blocks/old_block_source/convertor_adapter/proto_to_fuel_conversions.rs: complexity 36, 211 lines","ref":"crates/services/block_aggregator_api/src/blocks/old_block_source/convertor_adapter/proto_to_fuel_conversions.rs","url":"https://github.com/FuelLabs/fuel-core/blob/8bd82d4d1ff4e6da7a0e9febbe96e6a864d79f1f/crates/services/block_aggregator_api/src/blocks/old_block_source/convertor_adapter/proto_to_fuel_conversions.rs#L859","weight":0.6},{"kind":"complex-function","description":"get_config in bin/fuel-core/src/cli/run.rs: complexity 30, 413 lines","ref":"bin/fuel-core/src/cli/run.rs","url":"https://github.com/FuelLabs/fuel-core/blob/8bd82d4d1ff4e6da7a0e9febbe96e6a864d79f1f/bin/fuel-core/src/cli/run.rs#L351","weight":0.5},{"kind":"complex-function","description":"init_sub_services in crates/fuel-core/src/service/sub_services.rs: complexity 30, 433 lines","ref":"crates/fuel-core/src/service/sub_services.rs","url":"https://github.com/FuelLabs/fuel-core/blob/8bd82d4d1ff4e6da7a0e9febbe96e6a864d79f1f/crates/fuel-core/src/service/sub_services.rs#L138","weight":0.5},{"kind":"complex-function","description":"run in crates/services/p2p/src/service.rs: complexity 29, 150 lines","ref":"crates/services/p2p/src/service.rs","url":"https://github.com/FuelLabs/fuel-core/blob/8bd82d4d1ff4e6da7a0e9febbe96e6a864d79f1f/crates/services/p2p/src/service.rs#L953","weight":0.48333333333333334},{"kind":"complex-function","description":"run_workers in crates/fuel-core/src/service/genesis/importer.rs: complexity 28, 31 lines","ref":"crates/fuel-core/src/service/genesis/importer.rs","url":"https://github.com/FuelLabs/fuel-core/blob/8bd82d4d1ff4e6da7a0e9febbe96e6a864d79f1f/crates/fuel-core/src/service/genesis/importer.rs#L128","weight":0.4666666666666667}],"data":{},"error":null},{"analyzer":"qual-duplication","pillar":"quality","status":"ok","tool_version":"repotrust-dup-w6","metrics":{"compared_lines":119577.0,"duplicated_lines":19273.0,"duplicated_share":0.1612,"files":687.0},"findings":[],"evidence":[{"kind":"duplicate-code","description":"6+ duplicated lines: benches/benches/block_target_gas.rs:60 and benches/benches/vm_set/alu.rs:16","ref":"benches/benches/block_target_gas.rs","url":"https://github.com/FuelLabs/fuel-core/blob/8bd82d4d1ff4e6da7a0e9febbe96e6a864d79f1f/benches/benches/block_target_gas.rs#L60","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: benches/benches/block_target_gas.rs:380 and benches/benches/vm_set/blockchain.rs:123","ref":"benches/benches/block_target_gas.rs","url":"https://github.com/FuelLabs/fuel-core/blob/8bd82d4d1ff4e6da7a0e9febbe96e6a864d79f1f/benches/benches/block_target_gas.rs#L380","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: benches/benches/block_target_gas.rs:399 and crates/fuel-core/src/service.rs:215","ref":"benches/benches/block_target_gas.rs","url":"https://github.com/FuelLabs/fuel-core/blob/8bd82d4d1ff4e6da7a0e9febbe96e6a864d79f1f/benches/benches/block_target_gas.rs#L399","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: benches/benches/block_target_gas_set/alu.rs:396 and benches/benches/vm_set/alu.rs:359","ref":"benches/benches/block_target_gas_set/alu.rs","url":"https://github.com/FuelLabs/fuel-core/blob/8bd82d4d1ff4e6da7a0e9febbe96e6a864d79f1f/benches/benches/block_target_gas_set/alu.rs#L396","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: benches/benches/block_target_gas_set/alu.rs:406 and benches/benches/block_target_gas_set/alu.rs:478","ref":"benches/benches/block_target_gas_set/alu.rs","url":"https://github.com/FuelLabs/fuel-core/blob/8bd82d4d1ff4e6da7a0e9febbe96e6a864d79f1f/benches/benches/block_target_gas_set/alu.rs#L406","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: benches/benches/block_target_gas_set/contract.rs:105 and benches/benches/block_target_gas_set/contract.rs:294","ref":"benches/benches/block_target_gas_set/contract.rs","url":"https://github.com/FuelLabs/fuel-core/blob/8bd82d4d1ff4e6da7a0e9febbe96e6a864d79f1f/benches/benches/block_target_gas_set/contract.rs#L105","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: benches/benches/block_target_gas_set/crypto.rs:24 and benches/benches/block_target_gas_set/crypto.rs:49","ref":"benches/benches/block_target_gas_set/crypto.rs","url":"https://github.com/FuelLabs/fuel-core/blob/8bd82d4d1ff4e6da7a0e9febbe96e6a864d79f1f/benches/benches/block_target_gas_set/crypto.rs#L24","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: benches/benches/block_target_gas_set/crypto.rs:80 and benches/benches/vm_set/crypto.rs:61","ref":"benches/benches/block_target_gas_set/crypto.rs","url":"https://github.com/FuelLabs/fuel-core/blob/8bd82d4d1ff4e6da7a0e9febbe96e6a864d79f1f/benches/benches/block_target_gas_set/crypto.rs#L80","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: benches/benches/block_target_gas_set/memory.rs:43 and benches/benches/block_target_gas_set/memory.rs:44","ref":"benches/benches/block_target_gas_set/memory.rs","url":"https://github.com/FuelLabs/fuel-core/blob/8bd82d4d1ff4e6da7a0e9febbe96e6a864d79f1f/benches/benches/block_target_gas_set/memory.rs#L43","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: benches/benches/db_lookup_times.rs:25 and benches/benches/db_lookup_times.rs:53","ref":"benches/benches/db_lookup_times.rs","url":"https://github.com/FuelLabs/fuel-core/blob/8bd82d4d1ff4e6da7a0e9febbe96e6a864d79f1f/benches/benches/db_lookup_times.rs#L25","weight":0.3}],"data":{},"error":null},{"analyzer":"qual-lint","pillar":"quality","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":1.0,"weighted_findings":0.25,"scanned_lines":167581.0,"category:correctness":1.0},"findings":[{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":".github/workflows/scripts/verify_tag.sh","line":28,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:.github/workflows/scripts/verify_tag.sh:28"}],"evidence":[],"data":{},"error":null},{"analyzer":"qual-testing","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:has_tests":1.0,"check:test_ratio":0.3756,"check:ci_present":1.0,"check:ci_runs_tests":1.0,"check:ci_runs_lint":1.0,"check:tests_cochange":1.0,"test_lines":31506.0,"source_lines":167762.0,"test_ratio":0.1878,"ci_files":14.0,"cochange_share":0.3982,"cochange_commits":226.0},"findings":[],"evidence":[{"kind":"ci","description":"CI config: .github/workflows/chaos-test.yml","ref":".github/workflows/chaos-test.yml","url":null,"weight":0.0},{"kind":"ci","description":"CI config: .github/workflows/ci.yml","ref":".github/workflows/ci.yml","url":null,"weight":0.0},{"kind":"ci","description":"CI config: .github/workflows/create_version.yml","ref":".github/workflows/create_version.yml","url":null,"weight":0.0},{"kind":"ci","description":"CI config: .github/workflows/delete-test-env.yml","ref":".github/workflows/delete-test-env.yml","url":null,"weight":0.0},{"kind":"ci","description":"CI config: .github/workflows/dependencies.yml","ref":".github/workflows/dependencies.yml","url":null,"weight":0.0},{"kind":"ci","description":"CI config: .github/workflows/deploy-test-env.yml","ref":".github/workflows/deploy-test-env.yml","url":null,"weight":0.0},{"kind":"ci","description":"CI config: .github/workflows/docker-images.yml","ref":".github/workflows/docker-images.yml","url":null,"weight":0.0},{"kind":"ci","description":"CI config: .github/workflows/e2e-test-beta4-dev.yml","ref":".github/workflows/e2e-test-beta4-dev.yml","url":null,"weight":0.0},{"kind":"ci","description":"CI config: .github/workflows/nightly-benchmark.yml","ref":".github/workflows/nightly-benchmark.yml","url":null,"weight":0.0},{"kind":"ci","description":"CI config: .github/workflows/nightly-cargo-audit.yml","ref":".github/workflows/nightly-cargo-audit.yml","url":null,"weight":0.0},{"kind":"ci","description":"CI runs tests (go test, cargo test)","ref":null,"url":null,"weight":0.0},{"kind":"ci","description":"CI runs linters (clippy, rustfmt)","ref":null,"url":null,"weight":0.0}],"data":{"test_commands":["go test","cargo test"],"lint_commands":["clippy","rustfmt"]},"error":null},{"analyzer":"qual-docs","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:readme":1.0,"check:license":1.0,"check:contributing":1.0,"check:changelog":1.0,"readme_lines":155.0},"findings":[],"evidence":[{"kind":"docs","description":"README.md","ref":"README.md","url":null,"weight":0.0},{"kind":"docs","description":"LICENSE","ref":"LICENSE","url":null,"weight":0.0},{"kind":"docs","description":"CONTRIBUTING.md","ref":"CONTRIBUTING.md","url":null,"weight":0.0},{"kind":"docs","description":"CHANGELOG.md","ref":"CHANGELOG.md","url":null,"weight":0.0}],"data":{},"error":null},{"analyzer":"qual-type-safety","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:strict_config":0.0,"check:low_escape_density":1.0,"escapes":0.0,"escapes_per_kloc":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"x-blame","pillar":"ai_provenance","status":"ok","tool_version":"git-blame","metrics":{"ai_lines":5917.0,"other_lines":161845.0,"files_blamed":687.0,"blame_failures":0.0,"quality:ai_findings":0.0,"quality:ai_per_kloc":0.0,"quality:other_findings":1.0,"quality:other_per_kloc":0.006,"quality:ratio":0.0,"security:ai_findings":0.0,"security:ai_per_kloc":0.0,"security:other_findings":26.0,"security:other_per_kloc":0.161,"security:ratio":0.0},"findings":[],"evidence":[],"data":{"sampled":false,"comparable":true},"error":null}],"flags":[]}