{"schema_version":"2","scorer_version":"0.1.0","scoring_version":"prov-5+qual-2+sec-2","generated_at":"2026-11-14T14:52:01.494293Z","repo":{"ref":{"host":"github.com","owner":"Qihoo360","name":"poseidon"},"default_branch":"master","clone_url":"https://github.com/Qihoo360/poseidon.git","html_url":"https://github.com/Qihoo360/poseidon","description":"A search engine which can hold 100 trillion lines of log data.","stars":1985,"forks":430,"is_fork":false,"is_archived":false,"is_private":false,"size_kb":9604,"primary_language":"Go","license_spdx":"BSD-3-Clause","created_at":"2016-10-20T13:32:06Z","pushed_at":"2017-05-22T10:36:56Z","security_policy_url":null,"distribution":{"owner_created_at":"2013-04-07T08:36:54Z","owner_type":"Organization","release_assets":[]}},"commit_sha":"9be3a58756c2c604573075b6e7531f13f5ba7c1c","profile":{"lines_by_language":{"Go":38910,"Java":6510,"Shell":713},"files_by_category":{"source":154,"vendored":77,"other":59,"test":47,"docs":31,"config":20,"binary":12,"oversized":5,"generated":3},"source_lines":31691,"test_lines":14442},"pillars":{"ai_provenance":{"score":0.0,"confidence":0.49,"coverage":1.0,"label":"none-detected","breakdown":{"attributed_share":0.0,"suspected_share":0.0,"estimated_share":0.0,"ai_artifacts":0.0,"flagged_work_units":0.0,"flagged_releases":null,"style_index":0.063},"summary":"No AI attribution or AI-consistent velocity signals detected."},"quality":{"score":57.3,"confidence":0.9,"coverage":1.0,"label":"weak","breakdown":{"complexity":54.0,"duplication":61.6,"lint":68.3,"testing":47.8,"docs":65.0,"type_safety":null,"process":null},"summary":"Code quality is weak: test-to-source ratio 0.46, no CI test run detected; 21% of function code in complex or long functions; 8% duplicated lines. Weakest area: testing."},"security":{"score":75.1,"confidence":0.85,"coverage":1.0,"label":"adequate","breakdown":{"secrets":96.7,"sast":85.5,"dependencies":null,"ci_actions":null,"posture":0.0,"scorecard":null},"summary":"Security posture is adequate: no high-impact findings. Weakest area: posture."}},"analyzer_results":[{"analyzer":"sec-scorecard","pillar":"security","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":"no published OpenSSF Scorecard result for this repo"},{"analyzer":"sec-registry","pillar":"security","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":"no registry dependencies declared"},{"analyzer":"ai-attribution","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"commits":37.0,"attributed_commits":0.0,"attributed_commit_share":0.0,"effective_loc":51619.0,"attributed_loc":0.0,"attributed_loc_share":0.0,"tools_detected":0.0},"findings":[],"evidence":[],"data":{"attributed_loc_by_commit":{},"tools":{},"monthly":{"2016-10":{"loc":0,"attributed_loc":0},"2016-12":{"loc":51592,"attributed_loc":0},"2017-01":{"loc":27,"attributed_loc":0},"2017-03":{"loc":0,"attributed_loc":0},"2017-05":{"loc":0,"attributed_loc":0}}},"error":null},{"analyzer":"ai-artifacts","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"artifacts":0.0,"workflow_agents":0.0,"tools_configured":0.0},"findings":[],"evidence":[],"data":{"artifacts":[],"workflows":[],"tools":[]},"error":null},{"analyzer":"ai-velocity","pillar":"ai_provenance","status":"ok","tool_version":"prov-4","metrics":{"work_units":6.0,"flagged_units":0.0,"pre_ai_era_bursts":0.0,"pre_ai_era_measured_loc":270.0,"pre_ai_era_burst_loc":0.0,"measured_loc":270.0,"flagged_loc":0.0,"flagged_loc_share":0.0,"max_loc_per_hour":54.25,"median_loc_per_hour":54.25,"pr_timed_units":0.0,"excluded_import_loc":45904.0},"findings":[],"evidence":[],"data":{"flagged_loc_by_commit":{},"excluded_import_commits":["64856a481ae36c15d2bd0d111d4ad752f8f88b2b"]},"error":null},{"analyzer":"ai-release-velocity","pillar":"ai_provenance","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"ai-stylometry","pillar":"ai_provenance","status":"ok","tool_version":null,"metrics":{"lines_scanned":31691.0,"index":0.063,"count:narrated_steps":2.0,"per_kloc:narrated_steps":0.063,"files:narrated_steps":2.0,"count:placeholder":0.0,"per_kloc:placeholder":0.0,"files:placeholder":0.0,"count:emoji_in_code":0.0,"per_kloc:emoji_in_code":0.0,"files:emoji_in_code":0.0,"count:assistant_voice":0.0,"per_kloc:assistant_voice":0.0,"files:assistant_voice":0.0},"findings":[],"evidence":[{"kind":"stylometry:narrated_steps","description":"step-by-step narration comment: // First, find the last element","ref":"builder/docformat/src/github.com/golang/protobuf/protoc-gen-go/generator/generator.go:2684","url":"https://github.com/Qihoo360/poseidon/blob/9be3a58756c2c604573075b6e7531f13f5ba7c1c/builder/docformat/src/github.com/golang/protobuf/protoc-gen-go/generator/generator.go#L2684","weight":0.0},{"kind":"stylometry:narrated_steps","description":"step-by-step narration comment: // step 3. filter docId list","ref":"service/searcher/module/poseidon.go:122","url":"https://github.com/Qihoo360/poseidon/blob/9be3a58756c2c604573075b6e7531f13f5ba7c1c/service/searcher/module/poseidon.go#L122","weight":0.0}],"data":{},"error":null},{"analyzer":"sec-secrets","pillar":"security","status":"ok","tool_version":"gitleaks 8.30.1","metrics":{"secrets_current":0.0,"secrets_history":0.0,"secrets_nonprod":1.0,"secrets_low_confidence":0.0},"findings":[{"rule_id":"gitleaks/private-key","severity":"low","message":"Possible private-key secret in the current tree (test/docs/example file)","path":"builder/docformat/src/github.com/bitly/go-nsq/test/server.key","line":1,"fingerprint":"builder/docformat/src/github.com/bitly/go-nsq/test/server.key:private-key:1"}],"evidence":[],"data":{},"error":null},{"analyzer":"sec-sast","pillar":"security","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":44.0,"findings_high":0.0,"findings_medium":44.0,"findings_low":0.0,"weighted_findings":14.15,"scanned_lines":31691.0,"parse_errors":0.0},"findings":[{"rule_id":"opengrep/go.lang.security.audit.crypto.math-random-used","severity":"medium","message":"Do not use `math/rand`. Use `crypto/rand` instead. [confidence medium]","path":"builder/docformat/src/github.com/bitly/go-nsq/config.go","line":11,"fingerprint":"go.lang.security.audit.crypto.math-random-used:builder/docformat/src/github.com/bitly/go-nsq/config.go:11"},{"rule_id":"opengrep/go.lang.security.audit.unsafe-reflect-by-name","severity":"medium","message":"If an attacker can supply values that the application then uses to determine which method or field to invoke, the potential exists for the attacker to create control flow paths through the application that were not intended by the application developers. This attack vector may allow the attacker to  [confidence low]","path":"builder/docformat/src/github.com/bitly/go-nsq/config.go","line":286,"fingerprint":"go.lang.security.audit.unsafe-reflect-by-name:builder/docformat/src/github.com/bitly/go-nsq/config.go:286"},{"rule_id":"opengrep/go.lang.security.audit.unsafe-reflect-by-name","severity":"medium","message":"If an attacker can supply values that the application then uses to determine which method or field to invoke, the potential exists for the attacker to create control flow paths through the application that were not intended by the application developers. This attack vector may allow the attacker to  [confidence low]","path":"builder/docformat/src/github.com/bitly/go-nsq/config.go","line":361,"fingerprint":"go.lang.security.audit.unsafe-reflect-by-name:builder/docformat/src/github.com/bitly/go-nsq/config.go:361"},{"rule_id":"opengrep/go.lang.security.audit.use-of-unsafe-block","severity":"medium","message":"Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an attacker. Only use this package if you absolutely know what you'r [confidence low]","path":"builder/docformat/src/github.com/bitly/go-nsq/config.go","line":479,"fingerprint":"go.lang.security.audit.use-of-unsafe-block:builder/docformat/src/github.com/bitly/go-nsq/config.go:479"},{"rule_id":"opengrep/go.lang.security.audit.crypto.math-random-used","severity":"medium","message":"Do not use `math/rand`. Use `crypto/rand` instead. [confidence medium]","path":"builder/docformat/src/github.com/bitly/go-nsq/consumer.go","line":9,"fingerprint":"go.lang.security.audit.crypto.math-random-used:builder/docformat/src/github.com/bitly/go-nsq/consumer.go:9"},{"rule_id":"opengrep/go.lang.security.audit.crypto.use-of-sha1","severity":"medium","message":"Detected SHA1 hash algorithm which is considered insecure. SHA1 is not collision resistant and is therefore not suitable as a cryptographic signature. Use SHA256 or SHA3 instead. [confidence medium]","path":"builder/docformat/src/github.com/garyburd/redigo/redis/pool.go","line":317,"fingerprint":"go.lang.security.audit.crypto.use-of-sha1:builder/docformat/src/github.com/garyburd/redigo/redis/pool.go:317"},{"rule_id":"opengrep/go.lang.security.audit.crypto.use-of-sha1","severity":"medium","message":"Detected SHA1 hash algorithm which is considered insecure. SHA1 is not collision resistant and is therefore not suitable as a cryptographic signature. Use SHA256 or SHA3 instead. [confidence medium]","path":"builder/docformat/src/github.com/garyburd/redigo/redis/script.go","line":38,"fingerprint":"go.lang.security.audit.crypto.use-of-sha1:builder/docformat/src/github.com/garyburd/redigo/redis/script.go:38"},{"rule_id":"opengrep/go.lang.security.audit.use-of-unsafe-block","severity":"medium","message":"Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an attacker. Only use this package if you absolutely know what you'r [confidence low]","path":"builder/docformat/src/github.com/golang/protobuf/proto/pointer_unsafe.go","line":57,"fingerprint":"go.lang.security.audit.use-of-unsafe-block:builder/docformat/src/github.com/golang/protobuf/proto/pointer_unsafe.go:57"},{"rule_id":"opengrep/go.lang.security.audit.use-of-unsafe-block","severity":"medium","message":"Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an attacker. Only use this package if you absolutely know what you'r [confidence low]","path":"builder/docformat/src/github.com/golang/protobuf/proto/pointer_unsafe.go","line":68,"fingerprint":"go.lang.security.audit.use-of-unsafe-block:builder/docformat/src/github.com/golang/protobuf/proto/pointer_unsafe.go:68"},{"rule_id":"opengrep/go.lang.security.audit.use-of-unsafe-block","severity":"medium","message":"Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an attacker. Only use this package if you absolutely know what you'r [confidence low]","path":"builder/docformat/src/github.com/golang/protobuf/proto/pointer_unsafe.go","line":90,"fingerprint":"go.lang.security.audit.use-of-unsafe-block:builder/docformat/src/github.com/golang/protobuf/proto/pointer_unsafe.go:90"},{"rule_id":"opengrep/go.lang.security.audit.use-of-unsafe-block","severity":"medium","message":"Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an attacker. Only use this package if you absolutely know what you'r [confidence low]","path":"builder/docformat/src/github.com/golang/protobuf/proto/pointer_unsafe.go","line":95,"fingerprint":"go.lang.security.audit.use-of-unsafe-block:builder/docformat/src/github.com/golang/protobuf/proto/pointer_unsafe.go:95"},{"rule_id":"opengrep/go.lang.security.audit.use-of-unsafe-block","severity":"medium","message":"Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an attacker. Only use this package if you absolutely know what you'r [confidence low]","path":"builder/docformat/src/github.com/golang/protobuf/proto/pointer_unsafe.go","line":100,"fingerprint":"go.lang.security.audit.use-of-unsafe-block:builder/docformat/src/github.com/golang/protobuf/proto/pointer_unsafe.go:100"},{"rule_id":"opengrep/go.lang.security.audit.use-of-unsafe-block","severity":"medium","message":"Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an attacker. Only use this package if you absolutely know what you'r [confidence low]","path":"builder/docformat/src/github.com/golang/protobuf/proto/pointer_unsafe.go","line":105,"fingerprint":"go.lang.security.audit.use-of-unsafe-block:builder/docformat/src/github.com/golang/protobuf/proto/pointer_unsafe.go:105"},{"rule_id":"opengrep/go.lang.security.audit.use-of-unsafe-block","severity":"medium","message":"Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an attacker. Only use this package if you absolutely know what you'r [confidence low]","path":"builder/docformat/src/github.com/golang/protobuf/proto/pointer_unsafe.go","line":110,"fingerprint":"go.lang.security.audit.use-of-unsafe-block:builder/docformat/src/github.com/golang/protobuf/proto/pointer_unsafe.go:110"},{"rule_id":"opengrep/go.lang.security.audit.use-of-unsafe-block","severity":"medium","message":"Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an attacker. Only use this package if you absolutely know what you'r [confidence low]","path":"builder/docformat/src/github.com/golang/protobuf/proto/pointer_unsafe.go","line":115,"fingerprint":"go.lang.security.audit.use-of-unsafe-block:builder/docformat/src/github.com/golang/protobuf/proto/pointer_unsafe.go:115"},{"rule_id":"opengrep/go.lang.security.audit.use-of-unsafe-block","severity":"medium","message":"Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an attacker. Only use this package if you absolutely know what you'r [confidence low]","path":"builder/docformat/src/github.com/golang/protobuf/proto/pointer_unsafe.go","line":120,"fingerprint":"go.lang.security.audit.use-of-unsafe-block:builder/docformat/src/github.com/golang/protobuf/proto/pointer_unsafe.go:120"},{"rule_id":"opengrep/go.lang.security.audit.use-of-unsafe-block","severity":"medium","message":"Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an attacker. Only use this package if you absolutely know what you'r [confidence low]","path":"builder/docformat/src/github.com/golang/protobuf/proto/pointer_unsafe.go","line":125,"fingerprint":"go.lang.security.audit.use-of-unsafe-block:builder/docformat/src/github.com/golang/protobuf/proto/pointer_unsafe.go:125"},{"rule_id":"opengrep/go.lang.security.audit.use-of-unsafe-block","severity":"medium","message":"Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an attacker. Only use this package if you absolutely know what you'r [confidence low]","path":"builder/docformat/src/github.com/golang/protobuf/proto/pointer_unsafe.go","line":130,"fingerprint":"go.lang.security.audit.use-of-unsafe-block:builder/docformat/src/github.com/golang/protobuf/proto/pointer_unsafe.go:130"},{"rule_id":"opengrep/go.lang.security.audit.use-of-unsafe-block","severity":"medium","message":"Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an attacker. Only use this package if you absolutely know what you'r [confidence low]","path":"builder/docformat/src/github.com/golang/protobuf/proto/pointer_unsafe.go","line":135,"fingerprint":"go.lang.security.audit.use-of-unsafe-block:builder/docformat/src/github.com/golang/protobuf/proto/pointer_unsafe.go:135"},{"rule_id":"opengrep/go.lang.security.audit.use-of-unsafe-block","severity":"medium","message":"Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an attacker. Only use this package if you absolutely know what you'r [confidence low]","path":"builder/docformat/src/github.com/golang/protobuf/proto/pointer_unsafe.go","line":140,"fingerprint":"go.lang.security.audit.use-of-unsafe-block:builder/docformat/src/github.com/golang/protobuf/proto/pointer_unsafe.go:140"},{"rule_id":"opengrep/go.lang.security.audit.use-of-unsafe-block","severity":"medium","message":"Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an attacker. Only use this package if you absolutely know what you'r [confidence low]","path":"builder/docformat/src/github.com/golang/protobuf/proto/pointer_unsafe.go","line":145,"fingerprint":"go.lang.security.audit.use-of-unsafe-block:builder/docformat/src/github.com/golang/protobuf/proto/pointer_unsafe.go:145"},{"rule_id":"opengrep/go.lang.security.audit.use-of-unsafe-block","severity":"medium","message":"Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an attacker. Only use this package if you absolutely know what you'r [confidence low]","path":"builder/docformat/src/github.com/golang/protobuf/proto/pointer_unsafe.go","line":150,"fingerprint":"go.lang.security.audit.use-of-unsafe-block:builder/docformat/src/github.com/golang/protobuf/proto/pointer_unsafe.go:150"},{"rule_id":"opengrep/go.lang.security.audit.use-of-unsafe-block","severity":"medium","message":"Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an attacker. Only use this package if you absolutely know what you'r [confidence low]","path":"builder/docformat/src/github.com/golang/protobuf/proto/pointer_unsafe.go","line":185,"fingerprint":"go.lang.security.audit.use-of-unsafe-block:builder/docformat/src/github.com/golang/protobuf/proto/pointer_unsafe.go:185"},{"rule_id":"opengrep/go.lang.security.audit.use-of-unsafe-block","severity":"medium","message":"Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an attacker. Only use this package if you absolutely know what you'r [confidence low]","path":"builder/docformat/src/github.com/golang/protobuf/proto/pointer_unsafe.go","line":203,"fingerprint":"go.lang.security.audit.use-of-unsafe-block:builder/docformat/src/github.com/golang/protobuf/proto/pointer_unsafe.go:203"},{"rule_id":"opengrep/go.lang.security.audit.use-of-unsafe-block","severity":"medium","message":"Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an attacker. Only use this package if you absolutely know what you'r [confidence low]","path":"builder/docformat/src/github.com/golang/protobuf/proto/pointer_unsafe.go","line":215,"fingerprint":"go.lang.security.audit.use-of-unsafe-block:builder/docformat/src/github.com/golang/protobuf/proto/pointer_unsafe.go:215"},{"rule_id":"opengrep/go.lang.security.audit.use-of-unsafe-block","severity":"medium","message":"Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an attacker. Only use this package if you absolutely know what you'r [confidence low]","path":"builder/docformat/src/github.com/golang/protobuf/proto/pointer_unsafe.go","line":239,"fingerprint":"go.lang.security.audit.use-of-unsafe-block:builder/docformat/src/github.com/golang/protobuf/proto/pointer_unsafe.go:239"},{"rule_id":"opengrep/go.lang.security.audit.use-of-unsafe-block","severity":"medium","message":"Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an attacker. Only use this package if you absolutely know what you'r [confidence low]","path":"builder/docformat/src/github.com/golang/protobuf/proto/pointer_unsafe.go","line":254,"fingerprint":"go.lang.security.audit.use-of-unsafe-block:builder/docformat/src/github.com/golang/protobuf/proto/pointer_unsafe.go:254"},{"rule_id":"opengrep/go.lang.security.audit.use-of-unsafe-block","severity":"medium","message":"Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an attacker. Only use this package if you absolutely know what you'r [confidence low]","path":"builder/docformat/src/github.com/golang/protobuf/proto/pointer_unsafe.go","line":265,"fingerprint":"go.lang.security.audit.use-of-unsafe-block:builder/docformat/src/github.com/golang/protobuf/proto/pointer_unsafe.go:265"},{"rule_id":"opengrep/go.lang.security.audit.crypto.math-random-used","severity":"medium","message":"Do not use `math/rand`. Use `crypto/rand` instead. [confidence medium]","path":"builder/docformat/src/job/common.go","line":10,"fingerprint":"go.lang.security.audit.crypto.math-random-used:builder/docformat/src/job/common.go:10"},{"rule_id":"opengrep/go.lang.security.audit.crypto.use-of-sha1","severity":"medium","message":"Detected SHA1 hash algorithm which is considered insecure. SHA1 is not collision resistant and is therefore not suitable as a cryptographic signature. Use SHA256 or SHA3 instead. [confidence medium]","path":"builder/docformat/src/job/common.go","line":46,"fingerprint":"go.lang.security.audit.crypto.use-of-sha1:builder/docformat/src/job/common.go:46"},{"rule_id":"opengrep/go.lang.security.audit.crypto.math-random-used","severity":"medium","message":"Do not use `math/rand`. Use `crypto/rand` instead. [confidence medium]","path":"builder/docformat/src/job/logto_hdfs_collector.go","line":13,"fingerprint":"go.lang.security.audit.crypto.math-random-used:builder/docformat/src/job/logto_hdfs_collector.go:13"},{"rule_id":"opengrep/go.lang.security.audit.crypto.math-random-used","severity":"medium","message":"Do not use `math/rand`. Use `crypto/rand` instead. [confidence medium]","path":"builder/docformat/src/job/test_collector.go","line":6,"fingerprint":"go.lang.security.audit.crypto.math-random-used:builder/docformat/src/job/test_collector.go:6"},{"rule_id":"opengrep/go.lang.security.audit.crypto.math-random-used","severity":"medium","message":"Do not use `math/rand`. Use `crypto/rand` instead. [confidence medium]","path":"builder/docformat/src/job/test_processor.go","line":5,"fingerprint":"go.lang.security.audit.crypto.math-random-used:builder/docformat/src/job/test_processor.go:5"},{"rule_id":"opengrep/java.lang.security.audit.crypto.ssl.defaulthttpclient-is-deprecated","severity":"medium","message":"DefaultHttpClient is deprecated. Further, it does not support connections using TLS1.2, which makes using DefaultHttpClient a security hazard. Use HttpClientBuilder instead. [confidence low]","path":"builder/indexmeta/src/main/java/meta/MetaSetter.java","line":42,"fingerprint":"java.lang.security.audit.crypto.ssl.defaulthttpclient-is-deprecated:builder/indexmeta/src/main/java/meta/MetaSetter.java:42"},{"rule_id":"opengrep/go.lang.security.audit.xss.no-direct-write-to-responsewriter","severity":"medium","message":"Detected directly writing or similar in 'http.ResponseWriter.write()'. This bypasses HTML escaping that prevents cross-site scripting vulnerabilities. Instead, use the 'html/template' package and render data using 'template.Execute()'. [confidence low]","path":"service/idgenerator/module/idgenerator.go","line":75,"fingerprint":"go.lang.security.audit.xss.no-direct-write-to-responsewriter:service/idgenerator/module/idgenerator.go:75"},{"rule_id":"opengrep/go.lang.security.audit.xss.no-direct-write-to-responsewriter","severity":"medium","message":"Detected directly writing or similar in 'http.ResponseWriter.write()'. This bypasses HTML escaping that prevents cross-site scripting vulnerabilities. Instead, use the 'html/template' package and render data using 'template.Execute()'. [confidence low]","path":"service/meta/module/logic.go","line":44,"fingerprint":"go.lang.security.audit.xss.no-direct-write-to-responsewriter:service/meta/module/logic.go:44"},{"rule_id":"opengrep/go.lang.security.audit.xss.no-direct-write-to-responsewriter","severity":"medium","message":"Detected directly writing or similar in 'http.ResponseWriter.write()'. This bypasses HTML escaping that prevents cross-site scripting vulnerabilities. Instead, use the 'html/template' package and render data using 'template.Execute()'. [confidence low]","path":"service/meta/module/logic.go","line":47,"fingerprint":"go.lang.security.audit.xss.no-direct-write-to-responsewriter:service/meta/module/logic.go:47"},{"rule_id":"opengrep/go.lang.security.audit.xss.no-direct-write-to-responsewriter","severity":"medium","message":"Detected directly writing or similar in 'http.ResponseWriter.write()'. This bypasses HTML escaping that prevents cross-site scripting vulnerabilities. Instead, use the 'html/template' package and render data using 'template.Execute()'. [confidence low]","path":"service/meta/module/logic.go","line":132,"fingerprint":"go.lang.security.audit.xss.no-direct-write-to-responsewriter:service/meta/module/logic.go:132"},{"rule_id":"opengrep/go.lang.security.audit.xss.no-direct-write-to-responsewriter","severity":"medium","message":"Detected directly writing or similar in 'http.ResponseWriter.write()'. This bypasses HTML escaping that prevents cross-site scripting vulnerabilities. Instead, use the 'html/template' package and render data using 'template.Execute()'. [confidence low]","path":"service/meta/module/logic.go","line":134,"fingerprint":"go.lang.security.audit.xss.no-direct-write-to-responsewriter:service/meta/module/logic.go:134"},{"rule_id":"opengrep/go.lang.security.audit.xss.no-direct-write-to-responsewriter","severity":"medium","message":"Detected directly writing or similar in 'http.ResponseWriter.write()'. This bypasses HTML escaping that prevents cross-site scripting vulnerabilities. Instead, use the 'html/template' package and render data using 'template.Execute()'. [confidence low]","path":"service/proxy/module/proxy.go","line":108,"fingerprint":"go.lang.security.audit.xss.no-direct-write-to-responsewriter:service/proxy/module/proxy.go:108"},{"rule_id":"opengrep/go.lang.security.audit.xss.no-io-writestring-to-responsewriter","severity":"medium","message":"Detected 'io.WriteString()' writing directly to 'http.ResponseWriter'. This bypasses HTML escaping that prevents cross-site scripting vulnerabilities. Instead, use the 'html/template' package to render data to users. [confidence low]","path":"service/searcher/module/poseidon.go","line":252,"fingerprint":"go.lang.security.audit.xss.no-io-writestring-to-responsewriter:service/searcher/module/poseidon.go:252"},{"rule_id":"opengrep/go.lang.security.audit.xss.no-io-writestring-to-responsewriter","severity":"medium","message":"Detected 'io.WriteString()' writing directly to 'http.ResponseWriter'. This bypasses HTML escaping that prevents cross-site scripting vulnerabilities. Instead, use the 'html/template' package to render data to users. [confidence low]","path":"service/searcher/module/poseidon.go","line":262,"fingerprint":"go.lang.security.audit.xss.no-io-writestring-to-responsewriter:service/searcher/module/poseidon.go:262"},{"rule_id":"opengrep/go.lang.security.shared-url-struct-mutation","severity":"medium","message":"Shared URL struct may have been accidentally mutated. Ensure that this behavior is intended. [confidence low]","path":"service/searcher/poseidon/hdfs_reader.go","line":26,"fingerprint":"go.lang.security.shared-url-struct-mutation:service/searcher/poseidon/hdfs_reader.go:26"},{"rule_id":"opengrep/go.lang.security.shared-url-struct-mutation","severity":"medium","message":"Shared URL struct may have been accidentally mutated. Ensure that this behavior is intended. [confidence low]","path":"service/searcher/poseidon/inverted_index_gz_client.go","line":97,"fingerprint":"go.lang.security.shared-url-struct-mutation:service/searcher/poseidon/inverted_index_gz_client.go:97"}],"evidence":[],"data":{"rulesets":["go","java","bash"]},"error":null},{"analyzer":"sec-deps","pillar":"security","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-actions","pillar":"security","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-posture","pillar":"security","status":"ok","tool_version":null,"metrics":{"check:security_policy":0.0,"check:dependency_updates":0.0,"check:signed_commits":0.0,"check:lockfiles":1.0,"signed_commit_share":0.0,"unpinned_manifests":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-distribution","pillar":"security","status":"ok","tool_version":null,"metrics":{"signals":0.0,"binary_assets":0.0,"suspicious":0.0},"findings":[],"evidence":[],"data":{"signals":[],"suspicious":false,"unusual_traction":false,"metadata":true},"error":null},{"analyzer":"qual-complexity","pillar":"quality","status":"ok","tool_version":"lizard 1.25.1","metrics":{"functions":1399.0,"function_nloc":19552.0,"mean_ccn":3.7,"p90_ccn":8.0,"complex_functions":40.0,"long_functions":9.0,"many_param_functions":0.0,"risky_nloc_share":0.2052},"findings":[],"evidence":[{"kind":"complex-function","description":"generateMessage in builder/docformat/src/github.com/golang/protobuf/protoc-gen-go/generator/generator.go: complexity 143, 669 lines","ref":"builder/docformat/src/github.com/golang/protobuf/protoc-gen-go/generator/generator.go","url":"https://github.com/Qihoo360/poseidon/blob/9be3a58756c2c604573075b6e7531f13f5ba7c1c/builder/docformat/src/github.com/golang/protobuf/protoc-gen-go/generator/generator.go#L1651","weight":1.0},{"kind":"complex-function","description":"writeStruct in builder/docformat/src/github.com/golang/protobuf/proto/text.go: complexity 63, 162 lines","ref":"builder/docformat/src/github.com/golang/protobuf/proto/text.go","url":"https://github.com/Qihoo360/poseidon/blob/9be3a58756c2c604573075b6e7531f13f5ba7c1c/builder/docformat/src/github.com/golang/protobuf/proto/text.go#L178","weight":1.0},{"kind":"complex-function","description":"setEncAndDec in builder/docformat/src/github.com/golang/protobuf/proto/properties.go: complexity 48, 229 lines","ref":"builder/docformat/src/github.com/golang/protobuf/proto/properties.go","url":"https://github.com/Qihoo360/poseidon/blob/9be3a58756c2c604573075b6e7531f13f5ba7c1c/builder/docformat/src/github.com/golang/protobuf/proto/properties.go#L338","weight":0.8},{"kind":"complex-function","description":"readStruct in builder/docformat/src/github.com/golang/protobuf/proto/text_parser.go: complexity 43, 161 lines","ref":"builder/docformat/src/github.com/golang/protobuf/proto/text_parser.go","url":"https://github.com/Qihoo360/poseidon/blob/9be3a58756c2c604573075b6e7531f13f5ba7c1c/builder/docformat/src/github.com/golang/protobuf/proto/text_parser.go#L438","weight":0.7166666666666667},{"kind":"complex-function","description":"readAny in builder/docformat/src/github.com/golang/protobuf/proto/text_parser.go: complexity 39, 116 lines","ref":"builder/docformat/src/github.com/golang/protobuf/proto/text_parser.go","url":"https://github.com/Qihoo360/poseidon/blob/9be3a58756c2c604573075b6e7531f13f5ba7c1c/builder/docformat/src/github.com/golang/protobuf/proto/text_parser.go#L651","weight":0.65},{"kind":"complex-function","description":"setDefaults in builder/docformat/src/github.com/golang/protobuf/proto/lib.go: complexity 35, 118 lines","ref":"builder/docformat/src/github.com/golang/protobuf/proto/lib.go","url":"https://github.com/Qihoo360/poseidon/blob/9be3a58756c2c604573075b6e7531f13f5ba7c1c/builder/docformat/src/github.com/golang/protobuf/proto/lib.go#L556","weight":0.5833333333333334},{"kind":"complex-function","description":"unmarshalValue in builder/docformat/src/github.com/golang/protobuf/jsonpb/jsonpb.go: complexity 31, 106 lines","ref":"builder/docformat/src/github.com/golang/protobuf/jsonpb/jsonpb.go","url":"https://github.com/Qihoo360/poseidon/blob/9be3a58756c2c604573075b6e7531f13f5ba7c1c/builder/docformat/src/github.com/golang/protobuf/jsonpb/jsonpb.go#L351","weight":0.5166666666666667},{"kind":"complex-function","description":"mergeAny in builder/docformat/src/github.com/golang/protobuf/proto/clone.go: complexity 30, 88 lines","ref":"builder/docformat/src/github.com/golang/protobuf/proto/clone.go","url":"https://github.com/Qihoo360/poseidon/blob/9be3a58756c2c604573075b6e7531f13f5ba7c1c/builder/docformat/src/github.com/golang/protobuf/proto/clone.go#L105","weight":0.5},{"kind":"complex-function","description":"unmarshalType in builder/docformat/src/github.com/golang/protobuf/proto/decode.go: complexity 29, 90 lines","ref":"builder/docformat/src/github.com/golang/protobuf/proto/decode.go","url":"https://github.com/Qihoo360/poseidon/blob/9be3a58756c2c604573075b6e7531f13f5ba7c1c/builder/docformat/src/github.com/golang/protobuf/proto/decode.go#L366","weight":0.48333333333333334},{"kind":"complex-function","description":"equalAny in builder/docformat/src/github.com/golang/protobuf/proto/equal.go: complexity 28, 68 lines","ref":"builder/docformat/src/github.com/golang/protobuf/proto/equal.go","url":"https://github.com/Qihoo360/poseidon/blob/9be3a58756c2c604573075b6e7531f13f5ba7c1c/builder/docformat/src/github.com/golang/protobuf/proto/equal.go#L147","weight":0.4666666666666667}],"data":{},"error":null},{"analyzer":"qual-duplication","pillar":"quality","status":"ok","tool_version":"repotrust-dup-w6","metrics":{"compared_lines":22095.0,"duplicated_lines":1786.0,"duplicated_share":0.0808,"files":154.0},"findings":[],"evidence":[{"kind":"duplicate-code","description":"6+ duplicated lines: builder/docformat/script/common/demo.sh:9 and builder/index/src/main/bin/demo.sh:3","ref":"builder/docformat/script/common/demo.sh","url":"https://github.com/Qihoo360/poseidon/blob/9be3a58756c2c604573075b6e7531f13f5ba7c1c/builder/docformat/script/common/demo.sh#L9","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: builder/docformat/src/common/common.go:58 and builder/docformat/src/job/common.go:17","ref":"builder/docformat/src/common/common.go","url":"https://github.com/Qihoo360/poseidon/blob/9be3a58756c2c604573075b6e7531f13f5ba7c1c/builder/docformat/src/common/common.go#L58","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: builder/docformat/src/common/common.go:152 and service/idgenerator/module/redis.go:58","ref":"builder/docformat/src/common/common.go","url":"https://github.com/Qihoo360/poseidon/blob/9be3a58756c2c604573075b6e7531f13f5ba7c1c/builder/docformat/src/common/common.go#L152","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: builder/docformat/src/github.com/bitly/go-simplejson/simplejson_go10.go:28 and builder/docformat/src/github.com/bitly/go-simplejson/simplejson_go11.go:35","ref":"builder/docformat/src/github.com/bitly/go-simplejson/simplejson_go10.go","url":"https://github.com/Qihoo360/poseidon/blob/9be3a58756c2c604573075b6e7531f13f5ba7c1c/builder/docformat/src/github.com/bitly/go-simplejson/simplejson_go10.go#L28","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: builder/docformat/src/github.com/donnie4w/go-logger/logger/logger.go:109 and builder/docformat/src/github.com/donnie4w/go-logger/logger/logger.go:124","ref":"builder/docformat/src/github.com/donnie4w/go-logger/logger/logger.go","url":"https://github.com/Qihoo360/poseidon/blob/9be3a58756c2c604573075b6e7531f13f5ba7c1c/builder/docformat/src/github.com/donnie4w/go-logger/logger/logger.go#L109","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: builder/docformat/src/github.com/garyburd/redigo/internal/commandinfo.go:1 and builder/docformat/src/github.com/garyburd/redigo/internal/redistest/testdb.go:1","ref":"builder/docformat/src/github.com/garyburd/redigo/internal/commandinfo.go","url":"https://github.com/Qihoo360/poseidon/blob/9be3a58756c2c604573075b6e7531f13f5ba7c1c/builder/docformat/src/github.com/garyburd/redigo/internal/commandinfo.go#L1","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: builder/docformat/src/github.com/garyburd/redigo/redis/conn.go:1 and builder/docformat/src/github.com/garyburd/redigo/redis/doc.go:1","ref":"builder/docformat/src/github.com/garyburd/redigo/redis/conn.go","url":"https://github.com/Qihoo360/poseidon/blob/9be3a58756c2c604573075b6e7531f13f5ba7c1c/builder/docformat/src/github.com/garyburd/redigo/redis/conn.go#L1","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: builder/docformat/src/github.com/garyburd/redigo/redis/log.go:9 and builder/docformat/src/github.com/garyburd/redigo/redis/pool.go:9","ref":"builder/docformat/src/github.com/garyburd/redigo/redis/log.go","url":"https://github.com/Qihoo360/poseidon/blob/9be3a58756c2c604573075b6e7531f13f5ba7c1c/builder/docformat/src/github.com/garyburd/redigo/redis/log.go#L9","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: builder/docformat/src/github.com/garyburd/redigo/redis/reply.go:9 and builder/docformat/src/github.com/garyburd/redigo/redis/scan.go:9","ref":"builder/docformat/src/github.com/garyburd/redigo/redis/reply.go","url":"https://github.com/Qihoo360/poseidon/blob/9be3a58756c2c604573075b6e7531f13f5ba7c1c/builder/docformat/src/github.com/garyburd/redigo/redis/reply.go#L9","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: builder/docformat/src/github.com/garyburd/redigo/redis/reply.go:58 and builder/docformat/src/github.com/garyburd/redigo/redis/reply.go:87","ref":"builder/docformat/src/github.com/garyburd/redigo/redis/reply.go","url":"https://github.com/Qihoo360/poseidon/blob/9be3a58756c2c604573075b6e7531f13f5ba7c1c/builder/docformat/src/github.com/garyburd/redigo/redis/reply.go#L58","weight":0.3}],"data":{},"error":null},{"analyzer":"qual-lint","pillar":"quality","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":142.0,"weighted_findings":48.25,"scanned_lines":31691.0,"category:correctness":142.0},"findings":[{"rule_id":"opengrep/go.lang.correctness.permissions.incorrect-default-permission","severity":"medium","message":"Detected file permissions that are set to more than `0600` (user/owner can read and write). Setting file permissions to higher than `0600` is most likely unnecessary and violates the principle of least privilege. Instead, set permissions to be `0600` or less for os.Chmod, os.Mkdir, os.OpenFile, os.M","path":"builder/docformat/src/common/common.go","line":68,"fingerprint":"go.lang.correctness.permissions.incorrect-default-permission:builder/docformat/src/common/common.go:68"},{"rule_id":"opengrep/go.lang.correctness.permissions.incorrect-default-permission","severity":"medium","message":"Detected file permissions that are set to more than `0600` (user/owner can read and write). Setting file permissions to higher than `0600` is most likely unnecessary and violates the principle of least privilege. Instead, set permissions to be `0600` or less for os.Chmod, os.Mkdir, os.OpenFile, os.M","path":"builder/docformat/src/common/common.go","line":122,"fingerprint":"go.lang.correctness.permissions.incorrect-default-permission:builder/docformat/src/common/common.go:122"},{"rule_id":"opengrep/go.lang.correctness.permissions.incorrect-default-permission","severity":"medium","message":"Detected file permissions that are set to more than `0600` (user/owner can read and write). Setting file permissions to higher than `0600` is most likely unnecessary and violates the principle of least privilege. Instead, set permissions to be `0600` or less for os.Chmod, os.Mkdir, os.OpenFile, os.M","path":"builder/docformat/src/github.com/donnie4w/go-logger/logger/logger.go","line":84,"fingerprint":"go.lang.correctness.permissions.incorrect-default-permission:builder/docformat/src/github.com/donnie4w/go-logger/logger/logger.go:84"},{"rule_id":"opengrep/go.lang.correctness.permissions.incorrect-default-permission","severity":"medium","message":"Detected file permissions that are set to more than `0600` (user/owner can read and write). Setting file permissions to higher than `0600` is most likely unnecessary and violates the principle of least privilege. Instead, set permissions to be `0600` or less for os.Chmod, os.Mkdir, os.OpenFile, os.M","path":"builder/docformat/src/github.com/donnie4w/go-logger/logger/logger.go","line":101,"fingerprint":"go.lang.correctness.permissions.incorrect-default-permission:builder/docformat/src/github.com/donnie4w/go-logger/logger/logger.go:101"},{"rule_id":"opengrep/go.lang.correctness.use-filepath-join","severity":"medium","message":"`path.Join(...)` always joins using a forward slash. This may cause issues on Windows or other systems using a different delimiter. Use `filepath.Join(...)` instead which uses OS-specific path separators.","path":"builder/docformat/src/github.com/golang/protobuf/protoc-gen-go/internal/grpc/grpc.go","line":119,"fingerprint":"go.lang.correctness.use-filepath-join:builder/docformat/src/github.com/golang/protobuf/protoc-gen-go/internal/grpc/grpc.go:119"},{"rule_id":"opengrep/go.lang.correctness.use-filepath-join","severity":"medium","message":"`path.Join(...)` always joins using a forward slash. This may cause issues on Windows or other systems using a different delimiter. Use `filepath.Join(...)` instead which uses OS-specific path separators.","path":"builder/docformat/src/github.com/golang/protobuf/protoc-gen-go/internal/grpc/grpc.go","line":120,"fingerprint":"go.lang.correctness.use-filepath-join:builder/docformat/src/github.com/golang/protobuf/protoc-gen-go/internal/grpc/grpc.go:120"},{"rule_id":"opengrep/go.lang.correctness.permissions.incorrect-default-permission","severity":"medium","message":"Detected file permissions that are set to more than `0600` (user/owner can read and write). Setting file permissions to higher than `0600` is most likely unnecessary and violates the principle of least privilege. Instead, set permissions to be `0600` or less for os.Chmod, os.Mkdir, os.OpenFile, os.M","path":"builder/docformat/src/job/logto_hdfs_collector.go","line":128,"fingerprint":"go.lang.correctness.permissions.incorrect-default-permission:builder/docformat/src/job/logto_hdfs_collector.go:128"},{"rule_id":"opengrep/go.lang.correctness.permissions.incorrect-default-permission","severity":"medium","message":"Detected file permissions that are set to more than `0600` (user/owner can read and write). Setting file permissions to higher than `0600` is most likely unnecessary and violates the principle of least privilege. Instead, set permissions to be `0600` or less for os.Chmod, os.Mkdir, os.OpenFile, os.M","path":"builder/docformat/src/job/logto_hdfs_collector.go","line":497,"fingerprint":"go.lang.correctness.permissions.incorrect-default-permission:builder/docformat/src/job/logto_hdfs_collector.go:497"},{"rule_id":"opengrep/go.lang.correctness.permissions.incorrect-default-permission","severity":"medium","message":"Detected file permissions that are set to more than `0600` (user/owner can read and write). Setting file permissions to higher than `0600` is most likely unnecessary and violates the principle of least privilege. Instead, set permissions to be `0600` or less for os.Chmod, os.Mkdir, os.OpenFile, os.M","path":"builder/docformat/src/job/logto_hdfs_collector.go","line":548,"fingerprint":"go.lang.correctness.permissions.incorrect-default-permission:builder/docformat/src/job/logto_hdfs_collector.go:548"},{"rule_id":"opengrep/go.lang.correctness.permissions.incorrect-default-permission","severity":"medium","message":"Detected file permissions that are set to more than `0600` (user/owner can read and write). Setting file permissions to higher than `0600` is most likely unnecessary and violates the principle of least privilege. Instead, set permissions to be `0600` or less for os.Chmod, os.Mkdir, os.OpenFile, os.M","path":"builder/docformat/src/job/logto_hdfs_collector.go","line":558,"fingerprint":"go.lang.correctness.permissions.incorrect-default-permission:builder/docformat/src/job/logto_hdfs_collector.go:558"},{"rule_id":"opengrep/go.lang.correctness.permissions.incorrect-default-permission","severity":"medium","message":"Detected file permissions that are set to more than `0600` (user/owner can read and write). Setting file permissions to higher than `0600` is most likely unnecessary and violates the principle of least privilege. Instead, set permissions to be `0600` or less for os.Chmod, os.Mkdir, os.OpenFile, os.M","path":"builder/docformat/src/job/logto_hdfs_collector.go","line":697,"fingerprint":"go.lang.correctness.permissions.incorrect-default-permission:builder/docformat/src/job/logto_hdfs_collector.go:697"},{"rule_id":"opengrep/go.lang.correctness.permissions.incorrect-default-permission","severity":"medium","message":"Detected file permissions that are set to more than `0600` (user/owner can read and write). Setting file permissions to higher than `0600` is most likely unnecessary and violates the principle of least privilege. Instead, set permissions to be `0600` or less for os.Chmod, os.Mkdir, os.OpenFile, os.M","path":"builder/docformat/src/main/main.go","line":241,"fingerprint":"go.lang.correctness.permissions.incorrect-default-permission:builder/docformat/src/main/main.go:241"},{"rule_id":"opengrep/java.lang.correctness.no-string-eqeq","severity":"medium","message":"Strings should not be compared with '=='. This is a reference comparison operator. Use '.equals()' instead.","path":"builder/index/src/main/java/InvertedIndex/InvertedIndexGenerate.java","line":75,"fingerprint":"java.lang.correctness.no-string-eqeq:builder/index/src/main/java/InvertedIndex/InvertedIndexGenerate.java:75"},{"rule_id":"opengrep/java.lang.correctness.no-string-eqeq","severity":"medium","message":"Strings should not be compared with '=='. This is a reference comparison operator. Use '.equals()' instead.","path":"builder/indexmeta/src/main/java/meta/MetaConfigured.java","line":61,"fingerprint":"java.lang.correctness.no-string-eqeq:builder/indexmeta/src/main/java/meta/MetaConfigured.java:61"},{"rule_id":"opengrep/go.lang.correctness.permissions.incorrect-default-permission","severity":"medium","message":"Detected file permissions that are set to more than `0600` (user/owner can read and write). Setting file permissions to higher than `0600` is most likely unnecessary and violates the principle of least privilege. Instead, set permissions to be `0600` or less for os.Chmod, os.Mkdir, os.OpenFile, os.M","path":"service/idgenerator/main.go","line":36,"fingerprint":"go.lang.correctness.permissions.incorrect-default-permission:service/idgenerator/main.go:36"},{"rule_id":"opengrep/go.lang.correctness.permissions.incorrect-default-permission","severity":"medium","message":"Detected file permissions that are set to more than `0600` (user/owner can read and write). Setting file permissions to higher than `0600` is most likely unnecessary and violates the principle of least privilege. Instead, set permissions to be `0600` or less for os.Chmod, os.Mkdir, os.OpenFile, os.M","path":"service/proxy/main.go","line":35,"fingerprint":"go.lang.correctness.permissions.incorrect-default-permission:service/proxy/main.go:35"},{"rule_id":"opengrep/go.lang.correctness.permissions.incorrect-default-permission","severity":"medium","message":"Detected file permissions that are set to more than `0600` (user/owner can read and write). Setting file permissions to higher than `0600` is most likely unnecessary and violates the principle of least privilege. Instead, set permissions to be `0600` or less for os.Chmod, os.Mkdir, os.OpenFile, os.M","path":"service/searcher/main.go","line":35,"fingerprint":"go.lang.correctness.permissions.incorrect-default-permission:service/searcher/main.go:35"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/build.sh","line":3,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/build.sh:3"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/build.sh","line":10,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/build.sh:10"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/build.sh","line":11,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/build.sh:11"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-command-substitution-in-command","severity":"low","message":"The result of command substitution $(...) or `...`, if unquoted, is split on whitespace or other separators specified by the IFS variable. You should surround it with double quotes to avoid splitting the result.","path":"builder/docformat/build.sh","line":9,"fingerprint":"bash.lang.correctness.unquoted-command-substitution-in-command:builder/docformat/build.sh:9"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/docformat/build.sh","line":9,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/docformat/build.sh:9"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/docformat/build.sh","line":10,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/docformat/build.sh:10"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/docformat/build.sh","line":18,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/docformat/build.sh:18"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/docformat/build.sh","line":19,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/docformat/build.sh:19"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/docformat/build.sh","line":22,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/docformat/build.sh:22"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/docformat/build.sh","line":23,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/docformat/build.sh:23"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/docformat/build.sh","line":25,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/docformat/build.sh:25"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/docformat/build.sh","line":29,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/docformat/build.sh:29"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/docformat/build.sh","line":30,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/docformat/build.sh:30"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/docformat/build.sh","line":30,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/docformat/build.sh:30"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/docformat/build.sh","line":33,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/docformat/build.sh:33"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/docformat/build.sh","line":35,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/docformat/build.sh:35"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/docformat/build.sh","line":37,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/docformat/build.sh:37"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-command-substitution-in-command","severity":"low","message":"The result of command substitution $(...) or `...`, if unquoted, is split on whitespace or other separators specified by the IFS variable. You should surround it with double quotes to avoid splitting the result.","path":"builder/docformat/script/common/clean.sh","line":2,"fingerprint":"bash.lang.correctness.unquoted-command-substitution-in-command:builder/docformat/script/common/clean.sh:2"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/docformat/script/common/clean.sh","line":2,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/docformat/script/common/clean.sh:2"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/docformat/script/common/clean.sh","line":3,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/docformat/script/common/clean.sh:3"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/docformat/script/common/clean.sh","line":5,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/docformat/script/common/clean.sh:5"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/docformat/script/common/clean.sh","line":8,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/docformat/script/common/clean.sh:8"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/docformat/script/common/demo.sh","line":11,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/docformat/script/common/demo.sh:11"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/docformat/script/common/demo.sh","line":12,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/docformat/script/common/demo.sh:12"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/docformat/script/common/demo.sh","line":24,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/docformat/script/common/demo.sh:24"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/docformat/script/common/demo.sh","line":27,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/docformat/script/common/demo.sh:27"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-command-substitution-in-command","severity":"low","message":"The result of command substitution $(...) or `...`, if unquoted, is split on whitespace or other separators specified by the IFS variable. You should surround it with double quotes to avoid splitting the result.","path":"builder/docformat/script/common/install.sh","line":22,"fingerprint":"bash.lang.correctness.unquoted-command-substitution-in-command:builder/docformat/script/common/install.sh:22"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/docformat/script/common/install.sh","line":22,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/docformat/script/common/install.sh:22"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/docformat/script/common/install.sh","line":23,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/docformat/script/common/install.sh:23"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/docformat/script/common/install.sh","line":24,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/docformat/script/common/install.sh:24"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/docformat/script/common/install.sh","line":27,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/docformat/script/common/install.sh:27"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/docformat/script/common/install.sh","line":36,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/docformat/script/common/install.sh:36"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/docformat/script/common/install.sh","line":37,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/docformat/script/common/install.sh:37"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/docformat/script/common/install.sh","line":41,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/docformat/script/common/install.sh:41"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/docformat/script/common/install.sh","line":42,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/docformat/script/common/install.sh:42"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/docformat/script/common/local-hadoop.sh","line":12,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/docformat/script/common/local-hadoop.sh:12"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/docformat/script/common/local-hadoop.sh","line":16,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/docformat/script/common/local-hadoop.sh:16"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/docformat/script/common/local-hadoop.sh","line":23,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/docformat/script/common/local-hadoop.sh:23"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/docformat/script/common/local-hadoop.sh","line":27,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/docformat/script/common/local-hadoop.sh:27"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/docformat/script/common/real-hadoop.sh","line":5,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/docformat/script/common/real-hadoop.sh:5"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/docformat/src/github.com/bitly/go-nsq/test.sh","line":33,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/docformat/src/github.com/bitly/go-nsq/test.sh:33"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/docformat/src/github.com/bitly/go-nsq/test.sh","line":33,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/docformat/src/github.com/bitly/go-nsq/test.sh:33"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/docformat/src/github.com/bitly/go-nsq/test.sh","line":35,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/docformat/src/github.com/bitly/go-nsq/test.sh:35"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/docformat/src/github.com/bitly/go-nsq/test.sh","line":35,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/docformat/src/github.com/bitly/go-nsq/test.sh:35"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/index/src/main/bin/demo.sh","line":5,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/index/src/main/bin/demo.sh:5"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/index/src/main/bin/demo.sh","line":6,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/index/src/main/bin/demo.sh:6"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/index/src/main/bin/demo.sh","line":16,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/index/src/main/bin/demo.sh:16"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/index/src/main/bin/demo.sh","line":18,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/index/src/main/bin/demo.sh:18"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/index/src/main/bin/demo.sh","line":20,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/index/src/main/bin/demo.sh:20"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/index/src/main/bin/mock_start.sh","line":20,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/index/src/main/bin/mock_start.sh:20"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/index/src/main/bin/mock_start.sh","line":21,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/index/src/main/bin/mock_start.sh:21"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/index/src/main/bin/mock_start.sh","line":23,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/index/src/main/bin/mock_start.sh:23"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/index/src/main/bin/mock_start.sh","line":40,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/index/src/main/bin/mock_start.sh:40"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/index/src/main/bin/mock_start.sh","line":41,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/index/src/main/bin/mock_start.sh:41"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/index/src/main/bin/mock_start.sh","line":42,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/index/src/main/bin/mock_start.sh:42"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/index/src/main/bin/mock_start.sh","line":44,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/index/src/main/bin/mock_start.sh:44"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/index/src/main/bin/mock_start.sh","line":45,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/index/src/main/bin/mock_start.sh:45"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/index/src/main/bin/mock_start.sh","line":47,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/index/src/main/bin/mock_start.sh:47"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/index/src/main/bin/mock_start.sh","line":51,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/index/src/main/bin/mock_start.sh:51"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/index/src/main/bin/mock_start.sh","line":52,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/index/src/main/bin/mock_start.sh:52"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/index/src/main/bin/mock_start.sh","line":55,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/index/src/main/bin/mock_start.sh:55"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/index/src/main/bin/mock_start.sh","line":57,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/index/src/main/bin/mock_start.sh:57"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/index/src/main/bin/mock_start.sh","line":58,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/index/src/main/bin/mock_start.sh:58"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/index/src/main/bin/mock_start.sh","line":62,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/index/src/main/bin/mock_start.sh:62"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/index/src/main/bin/mock_start.sh","line":63,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/index/src/main/bin/mock_start.sh:63"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/index/src/main/bin/mock_start.sh","line":64,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/index/src/main/bin/mock_start.sh:64"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/index/src/main/bin/mock_start.sh","line":71,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/index/src/main/bin/mock_start.sh:71"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/index/src/main/bin/mock_start.sh","line":73,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/index/src/main/bin/mock_start.sh:73"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/index/src/main/bin/mock_start.sh","line":74,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/index/src/main/bin/mock_start.sh:74"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/index/src/main/bin/mock_start.sh","line":83,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/index/src/main/bin/mock_start.sh:83"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/index/src/main/bin/mock_start.sh","line":85,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/index/src/main/bin/mock_start.sh:85"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/index/src/main/bin/mock_start.sh","line":86,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/index/src/main/bin/mock_start.sh:86"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/index/src/main/bin/start.sh","line":9,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/index/src/main/bin/start.sh:9"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/index/src/main/bin/start.sh","line":15,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/index/src/main/bin/start.sh:15"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/index/src/main/bin/start.sh","line":16,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/index/src/main/bin/start.sh:16"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/index/src/main/bin/start.sh","line":18,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/index/src/main/bin/start.sh:18"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/index/src/main/bin/start.sh","line":39,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/index/src/main/bin/start.sh:39"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/index/src/main/bin/start.sh","line":40,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/index/src/main/bin/start.sh:40"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/index/src/main/bin/start.sh","line":41,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/index/src/main/bin/start.sh:41"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/index/src/main/bin/start.sh","line":45,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/index/src/main/bin/start.sh:45"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/index/src/main/bin/start.sh","line":46,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/index/src/main/bin/start.sh:46"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/index/src/main/bin/start.sh","line":48,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/index/src/main/bin/start.sh:48"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/index/src/main/bin/start.sh","line":52,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/index/src/main/bin/start.sh:52"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/index/src/main/bin/start.sh","line":54,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/index/src/main/bin/start.sh:54"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/index/src/main/bin/start.sh","line":56,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/index/src/main/bin/start.sh:56"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/index/src/main/bin/start.sh","line":58,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/index/src/main/bin/start.sh:58"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/index/src/main/bin/start.sh","line":59,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/index/src/main/bin/start.sh:59"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/index/src/main/bin/start.sh","line":61,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/index/src/main/bin/start.sh:61"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/index/src/main/bin/start.sh","line":62,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/index/src/main/bin/start.sh:62"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/index/src/main/bin/start.sh","line":65,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/index/src/main/bin/start.sh:65"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/index/src/main/bin/start.sh","line":66,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/index/src/main/bin/start.sh:66"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/index/src/main/bin/start.sh","line":73,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/index/src/main/bin/start.sh:73"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/index/src/main/bin/start.sh","line":75,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/index/src/main/bin/start.sh:75"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/index/src/main/bin/start.sh","line":76,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/index/src/main/bin/start.sh:76"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/index/src/main/bin/start.sh","line":78,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/index/src/main/bin/start.sh:78"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/index/src/main/bin/start.sh","line":79,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/index/src/main/bin/start.sh:79"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/index/src/main/bin/start.sh","line":89,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/index/src/main/bin/start.sh:89"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/index/src/main/bin/start.sh","line":91,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/index/src/main/bin/start.sh:91"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/index/src/main/bin/start.sh","line":92,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/index/src/main/bin/start.sh:92"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/index/src/main/bin/start.sh","line":94,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/index/src/main/bin/start.sh:94"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"builder/index/src/main/bin/start.sh","line":95,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:builder/index/src/main/bin/start.sh:95"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"common/proto/build.sh","line":11,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:common/proto/build.sh:11"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"common/proto/build.sh","line":12,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:common/proto/build.sh:12"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"service/allinone/build.sh","line":14,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:service/allinone/build.sh:14"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"service/allinone/build.sh","line":21,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:service/allinone/build.sh:21"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-command-substitution-in-command","severity":"low","message":"The result of command substitution $(...) or `...`, if unquoted, is split on whitespace or other separators specified by the IFS variable. You should surround it with double quotes to avoid splitting the result.","path":"service/hdfsreader/src/main/script/hdfsReader.sh","line":3,"fingerprint":"bash.lang.correctness.unquoted-command-substitution-in-command:service/hdfsreader/src/main/script/hdfsReader.sh:3"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"service/hdfsreader/src/main/script/hdfsReader.sh","line":3,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:service/hdfsreader/src/main/script/hdfsReader.sh:3"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"service/hdfsreader/src/main/script/hdfsReader.sh","line":4,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:service/hdfsreader/src/main/script/hdfsReader.sh:4"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"service/hdfsreader/src/main/script/hdfsReader.sh","line":5,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:service/hdfsreader/src/main/script/hdfsReader.sh:5"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"service/hdfsreader/src/main/script/hdfsReader.sh","line":6,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:service/hdfsreader/src/main/script/hdfsReader.sh:6"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"service/hdfsreader/src/main/script/hdfsReader.sh","line":30,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:service/hdfsreader/src/main/script/hdfsReader.sh:30"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"service/hdfsreader/src/main/script/hdfsReader.sh","line":39,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:service/hdfsreader/src/main/script/hdfsReader.sh:39"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"service/hdfsreader/src/main/script/hdfsReader.sh","line":43,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:service/hdfsreader/src/main/script/hdfsReader.sh:43"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"service/hdfsreader/src/main/script/hdfsReader.sh","line":44,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:service/hdfsreader/src/main/script/hdfsReader.sh:44"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"service/idgenerator/build.sh","line":8,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:service/idgenerator/build.sh:8"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"service/idgenerator/build.sh","line":15,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:service/idgenerator/build.sh:15"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"service/idgenerator/build.sh","line":23,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:service/idgenerator/build.sh:23"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"service/meta/build.sh","line":14,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:service/meta/build.sh:14"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"service/meta/build.sh","line":21,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:service/meta/build.sh:21"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"service/proxy/build.sh","line":14,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:service/proxy/build.sh:14"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"service/proxy/build.sh","line":21,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:service/proxy/build.sh:21"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"service/searcher/build.sh","line":13,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:service/searcher/build.sh:13"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"service/searcher/build.sh","line":21,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:service/searcher/build.sh:21"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"test.sh","line":10,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:test.sh:10"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"test.sh","line":11,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:test.sh:11"}],"evidence":[],"data":{},"error":null},{"analyzer":"qual-testing","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:has_tests":1.0,"check:test_ratio":0.9114,"check:ci_present":0.0,"check:ci_runs_tests":0.0,"check:ci_runs_lint":0.0,"check:tests_cochange":0.5,"test_lines":14442.0,"source_lines":31691.0,"test_ratio":0.4557,"ci_files":0.0,"cochange_share":0.125,"cochange_commits":8.0},"findings":[],"evidence":[],"data":{"test_commands":[],"lint_commands":[]},"error":null},{"analyzer":"qual-docs","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:readme":1.0,"check:license":1.0,"check:contributing":0.0,"check:changelog":0.0,"readme_lines":54.0},"findings":[],"evidence":[{"kind":"docs","description":"README.md","ref":"README.md","url":null,"weight":0.0},{"kind":"docs","description":"LICENSE","ref":"LICENSE","url":null,"weight":0.0}],"data":{},"error":null},{"analyzer":"qual-type-safety","pillar":"quality","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":null}],"flags":[]}