codeql-python-results.sarif

{"$schema":"https://json.schemastore.org/sarif-2.1.0.json","version":"2.1.0","runs":[{"tool":{"driver":{"name":"CodeQL","organization":"GitHub","semanticVersion":"2.24.1","notifications":[{"id":"py/diagnostics/extraction-warnings","name":"py/diagnostics/extraction-warnings","shortDescription":{"text":"Python extraction warnings"},"fullDescription":{"text":"List all extraction warnings for Python files in the source code directory."},"defaultConfiguration":{"enabled":true},"properties":{"description":"List all extraction warnings for Python files in the source code directory.","id":"py/diagnostics/extraction-warnings","kind":"diagnostic","name":"Python extraction warnings"}},{"id":"py/diagnostics/successfully-extracted-files","name":"py/diagnostics/successfully-extracted-files","shortDescription":{"text":"Extracted Python files"},"fullDescription":{"text":"Lists all Python files in the source code directory that were extracted."},"defaultConfiguration":{"enabled":true},"properties":{"tags":["successfully-extracted-files"],"description":"Lists all Python files in the source code directory that were extracted.","id":"py/diagnostics/successfully-extracted-files","kind":"diagnostic","name":"Extracted Python files"}},{"id":"py/baseline/expected-extracted-files","name":"py/baseline/expected-extracted-files","shortDescription":{"text":"Expected extracted files"},"fullDescription":{"text":"Files appearing in the source archive that are expected to be extracted."},"defaultConfiguration":{"enabled":true},"properties":{"tags":["expected-extracted-files","telemetry"]}},{"id":"cli/file-coverage-baseline","name":"cli/file-coverage-baseline","shortDescription":{"text":"File coverage baseline telemetry"},"fullDescription":{"text":"File coverage baseline telemetry"},"defaultConfiguration":{"enabled":true}},{"id":"cli/platform","name":"cli/platform","shortDescription":{"text":"Platform"},"fullDescription":{"text":"Platform"},"defaultConfiguration":{"enabled":true}}],"rules":[{"id":"py/csrf-protection-disabled","name":"py/csrf-protection-disabled","shortDescription":{"text":"CSRF protection weakened or disabled"},"fullDescription":{"text":"Disabling or weakening CSRF protection may make the application vulnerable to a Cross-Site Request Forgery (CSRF) attack."},"defaultConfiguration":{"enabled":true,"level":"warning"},"properties":{"tags":["security","external/cwe/cwe-352"],"description":"Disabling or weakening CSRF protection may make the application\n              vulnerable to a Cross-Site Request Forgery (CSRF) attack.","id":"py/csrf-protection-disabled","kind":"problem","name":"CSRF protection weakened or disabled","precision":"high","problem.severity":"warning","security-severity":"8.8"}},{"id":"py/bind-socket-all-network-interfaces","name":"py/bind-socket-all-network-interfaces","shortDescription":{"text":"Binding a socket to all network interfaces"},"fullDescription":{"text":"Binding a socket to all interfaces opens it up to traffic from any IPv4 address and is therefore associated with security risks."},"defaultConfiguration":{"enabled":true,"level":"error"},"properties":{"tags":["security","external/cwe/cwe-200"],"description":"Binding a socket to all interfaces opens it up to traffic from any IPv4 address\n and is therefore associated with security risks.","id":"py/bind-socket-all-network-interfaces","kind":"problem","name":"Binding a socket to all network interfaces","precision":"high","problem.severity":"error","security-severity":"6.5","sub-severity":"low"}},{"id":"py/http-response-splitting","name":"py/http-response-splitting","shortDescription":{"text":"HTTP Response Splitting"},"fullDescription":{"text":"Writing user input directly to an HTTP header makes code vulnerable to attack by header splitting."},"defaultConfiguration":{"enabled":true,"level":"error"},"properties":{"tags":["security","external/cwe/cwe-113","external/cwe/cwe-079"],"description":"Writing user input directly to an HTTP header\n              makes code vulnerable to attack by header splitting.","id":"py/http-response-splitting","kind":"path-problem","name":"HTTP Response Splitting","precision":"high","problem.severity":"error","security-severity":"6.1"}},{"id":"py/url-redirection","name":"py/url-redirection","shortDescription":{"text":"URL redirection from remote source"},"fullDescription":{"text":"URL redirection based on unvalidated user input may cause redirection to malicious web sites."},"defaultConfiguration":{"enabled":true,"level":"error"},"properties":{"tags":["security","external/cwe/cwe-601"],"description":"URL redirection based on unvalidated user input\n              may cause redirection to malicious web sites.","id":"py/url-redirection","kind":"path-problem","name":"URL redirection from remote source","precision":"high","problem.severity":"error","security-severity":"6.1","sub-severity":"low"}},{"id":"py/unsafe-deserialization","name":"py/unsafe-deserialization","shortDescription":{"text":"Deserialization of user-controlled data"},"fullDescription":{"text":"Deserializing user-controlled data may allow attackers to execute arbitrary code."},"defaultConfiguration":{"enabled":true,"level":"error"},"properties":{"tags":["external/cwe/cwe-502","security","serialization"],"description":"Deserializing user-controlled data may allow attackers to execute arbitrary code.","id":"py/unsafe-deserialization","kind":"path-problem","name":"Deserialization of user-controlled data","precision":"high","problem.severity":"error","security-severity":"9.8","sub-severity":"high"}},{"id":"py/stack-trace-exposure","name":"py/stack-trace-exposure","shortDescription":{"text":"Information exposure through an exception"},"fullDescription":{"text":"Leaking information about an exception, such as messages and stack traces, to an external user can expose implementation details that are useful to an attacker for developing a subsequent exploit."},"defaultConfiguration":{"enabled":true,"level":"error"},"properties":{"tags":["security","external/cwe/cwe-209","external/cwe/cwe-497"],"description":"Leaking information about an exception, such as messages and stack traces, to an\n              external user can expose implementation details that are useful to an attacker for\n              developing a subsequent exploit.","id":"py/stack-trace-exposure","kind":"path-problem","name":"Information exposure through an exception","precision":"high","problem.severity":"error","security-severity":"5.4"}},{"id":"py/code-injection","name":"py/code-injection","shortDescription":{"text":"Code injection"},"fullDescription":{"text":"Interpreting unsanitized user input as code allows a malicious user to perform arbitrary code execution."},"defaultConfiguration":{"enabled":true,"level":"error"},"properties":{"tags":["security","external/cwe/cwe-094","external/cwe/cwe-095","external/cwe/cwe-116"],"description":"Interpreting unsanitized user input as code allows a malicious user to perform arbitrary\n              code execution.","id":"py/code-injection","kind":"path-problem","name":"Code injection","precision":"high","problem.severity":"error","security-severity":"9.3","sub-severity":"high"}},{"id":"py/xpath-injection","name":"py/xpath-injection","shortDescription":{"text":"XPath query built from user-controlled sources"},"fullDescription":{"text":"Building a XPath query from user-controlled sources is vulnerable to insertion of malicious Xpath code by the user."},"defaultConfiguration":{"enabled":true,"level":"error"},"properties":{"tags":["security","external/cwe/cwe-643"],"description":"Building a XPath query from user-controlled sources is vulnerable to insertion of\n              malicious Xpath code by the user.","id":"py/xpath-injection","kind":"path-problem","name":"XPath query built from user-controlled sources","precision":"high","problem.severity":"error","security-severity":"9.8"}},{"id":"py/xml-bomb","name":"py/xml-bomb","shortDescription":{"text":"XML internal entity expansion"},"fullDescription":{"text":"Parsing user input as an XML document with arbitrary internal entity expansion is vulnerable to denial-of-service attacks."},"defaultConfiguration":{"enabled":true,"level":"warning"},"properties":{"tags":["security","external/cwe/cwe-776","external/cwe/cwe-400"],"description":"Parsing user input as an XML document with arbitrary internal\n              entity expansion is vulnerable to denial-of-service attacks.","id":"py/xml-bomb","kind":"path-problem","name":"XML internal entity expansion","precision":"high","problem.severity":"warning","security-severity":"7.5"}},{"id":"py/xxe","name":"py/xxe","shortDescription":{"text":"XML external entity expansion"},"fullDescription":{"text":"Parsing user input as an XML document with external entity expansion is vulnerable to XXE attacks."},"defaultConfiguration":{"enabled":true,"level":"error"},"properties":{"tags":["security","external/cwe/cwe-611","external/cwe/cwe-827"],"description":"Parsing user input as an XML document with external\n              entity expansion is vulnerable to XXE attacks.","id":"py/xxe","kind":"path-problem","name":"XML external entity expansion","precision":"high","problem.severity":"error","security-severity":"9.1"}},{"id":"py/weak-crypto-key","name":"py/weak-crypto-key","shortDescription":{"text":"Use of weak cryptographic key"},"fullDescription":{"text":"Use of a cryptographic key that is too small may allow the encryption to be broken."},"defaultConfiguration":{"enabled":true,"level":"error"},"properties":{"tags":["security","external/cwe/cwe-326"],"description":"Use of a cryptographic key that is too small may allow the encryption to be broken.","id":"py/weak-crypto-key","kind":"problem","name":"Use of weak cryptographic key","precision":"high","problem.severity":"error","security-severity":"7.5"}},{"id":"py/reflective-xss","name":"py/reflective-xss","shortDescription":{"text":"Reflected server-side cross-site scripting"},"fullDescription":{"text":"Writing user input directly to a web page allows for a cross-site scripting vulnerability."},"defaultConfiguration":{"enabled":true,"level":"error"},"properties":{"tags":["security","external/cwe/cwe-079","external/cwe/cwe-116"],"description":"Writing user input directly to a web page\n              allows for a cross-site scripting vulnerability.","id":"py/reflective-xss","kind":"path-problem","name":"Reflected server-side cross-site scripting","precision":"high","problem.severity":"error","security-severity":"6.1","sub-severity":"high"}},{"id":"py/insecure-temporary-file","name":"py/insecure-temporary-file","shortDescription":{"text":"Insecure temporary file"},"fullDescription":{"text":"Creating a temporary file using this method may be insecure."},"defaultConfiguration":{"enabled":true,"level":"error"},"properties":{"tags":["external/cwe/cwe-377","security"],"description":"Creating a temporary file using this method may be insecure.","id":"py/insecure-temporary-file","kind":"problem","name":"Insecure temporary file","precision":"high","problem.severity":"error","security-severity":"7.0","sub-severity":"high"}},{"id":"py/redos","name":"py/redos","shortDescription":{"text":"Inefficient regular expression"},"fullDescription":{"text":"A regular expression that requires exponential time to match certain inputs can be a performance bottleneck, and may be vulnerable to denial-of-service attacks."},"defaultConfiguration":{"enabled":true,"level":"error"},"properties":{"tags":["security","external/cwe/cwe-1333","external/cwe/cwe-730","external/cwe/cwe-400"],"description":"A regular expression that requires exponential time to match certain inputs\n              can be a performance bottleneck, and may be vulnerable to denial-of-service\n              attacks.","id":"py/redos","kind":"problem","name":"Inefficient regular expression","precision":"high","problem.severity":"error","security-severity":"7.5"}},{"id":"py/regex-injection","name":"py/regex-injection","shortDescription":{"text":"Regular expression injection"},"fullDescription":{"text":"User input should not be used in regular expressions without first being escaped, otherwise a malicious user may be able to inject an expression that could require exponential time on certain inputs."},"defaultConfiguration":{"enabled":true,"level":"error"},"properties":{"tags":["security","external/cwe/cwe-730","external/cwe/cwe-400"],"description":"User input should not be used in regular expressions without first being escaped,\n              otherwise a malicious user may be able to inject an expression that could require\n              exponential time on certain inputs.","id":"py/regex-injection","kind":"path-problem","name":"Regular expression injection","precision":"high","problem.severity":"error","security-severity":"7.5"}},{"id":"py/polynomial-redos","name":"py/polynomial-redos","shortDescription":{"text":"Polynomial regular expression used on uncontrolled data"},"fullDescription":{"text":"A regular expression that can require polynomial time to match may be vulnerable to denial-of-service attacks."},"defaultConfiguration":{"enabled":true,"level":"warning"},"properties":{"tags":["security","external/cwe/cwe-1333","external/cwe/cwe-730","external/cwe/cwe-400"],"description":"A regular expression that can require polynomial time\n              to match may be vulnerable to denial-of-service attacks.","id":"py/polynomial-redos","kind":"path-problem","name":"Polynomial regular expression used on uncontrolled data","precision":"high","problem.severity":"warning","security-severity":"7.5"}},{"id":"py/ldap-injection","name":"py/ldap-injection","shortDescription":{"text":"LDAP query built from user-controlled sources"},"fullDescription":{"text":"Building an LDAP query from user-controlled sources is vulnerable to insertion of malicious LDAP code by the user."},"defaultConfiguration":{"enabled":true,"level":"error"},"properties":{"tags":["security","external/cwe/cwe-090"],"description":"Building an LDAP query from user-controlled sources is vulnerable to insertion of\n              malicious LDAP code by the user.","id":"py/ldap-injection","kind":"path-problem","name":"LDAP query built from user-controlled sources","precision":"high","problem.severity":"error","security-severity":"9.8"}},{"id":"py/template-injection","name":"py/template-injection","shortDescription":{"text":"Server Side Template Injection"},"fullDescription":{"text":"Using user-controlled data to create a template can lead to remote code execution or cross site scripting."},"defaultConfiguration":{"enabled":true,"level":"error"},"properties":{"tags":["security","external/cwe/cwe-074"],"description":"Using user-controlled data to create a template can lead to remote code execution or cross site scripting.","id":"py/template-injection","kind":"path-problem","name":"Server Side Template Injection","precision":"high","problem.severity":"error","security-severity":"9.3"}},{"id":"py/sql-injection","name":"py/sql-injection","shortDescription":{"text":"SQL query built from user-controlled sources"},"fullDescription":{"text":"Building a SQL query from user-controlled sources is vulnerable to insertion of malicious SQL code by the user."},"defaultConfiguration":{"enabled":true,"level":"error"},"properties":{"tags":["security","external/cwe/cwe-089"],"description":"Building a SQL query from user-controlled sources is vulnerable to insertion of\n              malicious SQL code by the user.","id":"py/sql-injection","kind":"path-problem","name":"SQL query built from user-controlled sources","precision":"high","problem.severity":"error","security-severity":"8.8"}},{"id":"py/samesite-none-cookie","name":"py/samesite-none-cookie","shortDescription":{"text":"Sensitive cookie with `SameSite` attribute set to `None`"},"fullDescription":{"text":"Cookies with `SameSite` set to `None` can allow for Cross-Site Request Forgery (CSRF) attacks."},"defaultConfiguration":{"enabled":true,"level":"warning"},"properties":{"tags":["security","external/cwe/cwe-1275"],"description":"Cookies with `SameSite` set to `None` can allow for Cross-Site Request Forgery (CSRF) attacks.","id":"py/samesite-none-cookie","kind":"problem","name":"Sensitive cookie with `SameSite` attribute set to `None`","precision":"high","problem.severity":"warning","security-severity":"4.0"}},{"id":"py/path-injection","name":"py/path-injection","shortDescription":{"text":"Uncontrolled data used in path expression"},"fullDescription":{"text":"Accessing paths influenced by users can allow an attacker to access unexpected resources."},"defaultConfiguration":{"enabled":true,"level":"error"},"properties":{"tags":["correctness","security","external/cwe/cwe-022","external/cwe/cwe-023","external/cwe/cwe-036","external/cwe/cwe-073","external/cwe/cwe-099"],"description":"Accessing paths influenced by users can allow an attacker to access unexpected resources.","id":"py/path-injection","kind":"path-problem","name":"Uncontrolled data used in path expression","precision":"high","problem.severity":"error","security-severity":"7.5","sub-severity":"high"}},{"id":"py/pam-auth-bypass","name":"py/pam-auth-bypass","shortDescription":{"text":"PAM authorization bypass due to incorrect usage"},"fullDescription":{"text":"Not using `pam_acct_mgmt` after `pam_authenticate` to check the validity of a login can lead to authorization bypass."},"defaultConfiguration":{"enabled":true,"level":"warning"},"properties":{"tags":["security","external/cwe/cwe-285"],"description":"Not using `pam_acct_mgmt` after `pam_authenticate` to check the validity of a login can lead to authorization bypass.","id":"py/pam-auth-bypass","kind":"path-problem","name":"PAM authorization bypass due to incorrect usage","precision":"high","problem.severity":"warning","security-severity":"8.1"}},{"id":"py/incomplete-url-substring-sanitization","name":"py/incomplete-url-substring-sanitization","shortDescription":{"text":"Incomplete URL substring sanitization"},"fullDescription":{"text":"Security checks on the substrings of an unparsed URL are often vulnerable to bypassing."},"defaultConfiguration":{"enabled":true,"level":"warning"},"properties":{"tags":["correctness","security","external/cwe/cwe-020"],"description":"Security checks on the substrings of an unparsed URL are often vulnerable to bypassing.","id":"py/incomplete-url-substring-sanitization","kind":"problem","name":"Incomplete URL substring sanitization","precision":"high","problem.severity":"warning","security-severity":"7.8"}},{"id":"py/overly-large-range","name":"py/overly-large-range","shortDescription":{"text":"Overly permissive regular expression range"},"fullDescription":{"text":"Overly permissive regular expression ranges match a wider range of characters than intended. This may allow an attacker to bypass a filter or sanitizer."},"defaultConfiguration":{"enabled":true,"level":"warning"},"properties":{"tags":["correctness","security","external/cwe/cwe-020"],"description":"Overly permissive regular expression ranges match a wider range of characters than intended.\n              This may allow an attacker to bypass a filter or sanitizer.","id":"py/overly-large-range","kind":"problem","name":"Overly permissive regular expression range","precision":"high","problem.severity":"warning","security-severity":"4.0"}},{"id":"py/cookie-injection","name":"py/cookie-injection","shortDescription":{"text":"Construction of a cookie using user-supplied input"},"fullDescription":{"text":"Constructing cookies from user input may allow an attacker to perform a Cookie Poisoning attack."},"defaultConfiguration":{"enabled":true,"level":"warning"},"properties":{"tags":["security","external/cwe/cwe-020"],"description":"Constructing cookies from user input may allow an attacker to perform a Cookie Poisoning attack.","id":"py/cookie-injection","kind":"path-problem","name":"Construction of a cookie using user-supplied input","precision":"high","problem.severity":"warning","security-severity":"5.0"}},{"id":"py/incomplete-hostname-regexp","name":"py/incomplete-hostname-regexp","shortDescription":{"text":"Incomplete regular expression for hostnames"},"fullDescription":{"text":"Matching a URL or hostname against a regular expression that contains an unescaped dot as part of the hostname might match more hostnames than expected."},"defaultConfiguration":{"enabled":true,"level":"warning"},"properties":{"tags":["correctness","security","external/cwe/cwe-020"],"description":"Matching a URL or hostname against a regular expression that contains an unescaped dot as part of the hostname might match more hostnames than expected.","id":"py/incomplete-hostname-regexp","kind":"problem","name":"Incomplete regular expression for hostnames","precision":"high","problem.severity":"warning","security-severity":"7.8"}},{"id":"py/client-exposed-cookie","name":"py/client-exposed-cookie","shortDescription":{"text":"Sensitive cookie missing `HttpOnly` attribute"},"fullDescription":{"text":"Cookies without the `HttpOnly` attribute set can be accessed by JS scripts, making them more vulnerable to XSS attacks."},"defaultConfiguration":{"enabled":true,"level":"warning"},"properties":{"tags":["security","external/cwe/cwe-1004"],"description":"Cookies without the `HttpOnly` attribute set can be accessed by JS scripts, making them more vulnerable to XSS attacks.","id":"py/client-exposed-cookie","kind":"problem","name":"Sensitive cookie missing `HttpOnly` attribute","precision":"high","problem.severity":"warning","security-severity":"5.0"}},{"id":"py/insecure-cookie","name":"py/insecure-cookie","shortDescription":{"text":"Failure to use secure cookies"},"fullDescription":{"text":"Insecure cookies may be sent in cleartext, which makes them vulnerable to interception."},"defaultConfiguration":{"enabled":true,"level":"warning"},"properties":{"tags":["security","external/cwe/cwe-614"],"description":"Insecure cookies may be sent in cleartext, which makes them vulnerable to\n              interception.","id":"py/insecure-cookie","kind":"problem","name":"Failure to use secure cookies","precision":"high","problem.severity":"warning","security-severity":"5.0"}},{"id":"py/clear-text-logging-sensitive-data","name":"py/clear-text-logging-sensitive-data","shortDescription":{"text":"Clear-text logging of sensitive information"},"fullDescription":{"text":"Logging sensitive information without encryption or hashing can expose it to an attacker."},"defaultConfiguration":{"enabled":true,"level":"error"},"properties":{"tags":["security","external/cwe/cwe-312","external/cwe/cwe-359","external/cwe/cwe-532"],"description":"Logging sensitive information without encryption or hashing can\n              expose it to an attacker.","id":"py/clear-text-logging-sensitive-data","kind":"path-problem","name":"Clear-text logging of sensitive information","precision":"high","problem.severity":"error","security-severity":"7.5"}},{"id":"py/clear-text-storage-sensitive-data","name":"py/clear-text-storage-sensitive-data","shortDescription":{"text":"Clear-text storage of sensitive information"},"fullDescription":{"text":"Sensitive information stored without encryption or hashing can expose it to an attacker."},"defaultConfiguration":{"enabled":true,"level":"error"},"properties":{"tags":["security","external/cwe/cwe-312","external/cwe/cwe-315","external/cwe/cwe-359"],"description":"Sensitive information stored without encryption or hashing can expose it to an\n              attacker.","id":"py/clear-text-storage-sensitive-data","kind":"path-problem","name":"Clear-text storage of sensitive information","precision":"high","problem.severity":"error","security-severity":"7.5"}},{"id":"py/flask-debug","name":"py/flask-debug","shortDescription":{"text":"Flask app is run in debug mode"},"fullDescription":{"text":"Running a Flask app in debug mode may allow an attacker to run arbitrary code through the Werkzeug debugger."},"defaultConfiguration":{"enabled":true,"level":"error"},"properties":{"tags":["security","external/cwe/cwe-215","external/cwe/cwe-489"],"description":"Running a Flask app in debug mode may allow an attacker to run arbitrary code through the Werkzeug debugger.","id":"py/flask-debug","kind":"problem","name":"Flask app is run in debug mode","precision":"high","problem.severity":"error","security-severity":"7.5"}},{"id":"py/bad-tag-filter","name":"py/bad-tag-filter","shortDescription":{"text":"Bad HTML filtering regexp"},"fullDescription":{"text":"Matching HTML tags using regular expressions is hard to do right, and can easily lead to security issues."},"defaultConfiguration":{"enabled":true,"level":"warning"},"properties":{"tags":["correctness","security","external/cwe/cwe-116","external/cwe/cwe-020","external/cwe/cwe-185","external/cwe/cwe-186"],"description":"Matching HTML tags using regular expressions is hard to do right, and can easily lead to security issues.","id":"py/bad-tag-filter","kind":"problem","name":"Bad HTML filtering regexp","precision":"high","problem.severity":"warning","security-severity":"7.8"}},{"id":"py/paramiko-missing-host-key-validation","name":"py/paramiko-missing-host-key-validation","shortDescription":{"text":"Accepting unknown SSH host keys when using Paramiko"},"fullDescription":{"text":"Accepting unknown host keys can allow man-in-the-middle attacks."},"defaultConfiguration":{"enabled":true,"level":"error"},"properties":{"tags":["security","external/cwe/cwe-295"],"description":"Accepting unknown host keys can allow man-in-the-middle attacks.","id":"py/paramiko-missing-host-key-validation","kind":"problem","name":"Accepting unknown SSH host keys when using Paramiko","precision":"high","problem.severity":"error","security-severity":"7.5"}},{"id":"py/full-ssrf","name":"py/full-ssrf","shortDescription":{"text":"Full server-side request forgery"},"fullDescription":{"text":"Making a network request to a URL that is fully user-controlled allows for request forgery attacks."},"defaultConfiguration":{"enabled":true,"level":"error"},"properties":{"tags":["security","external/cwe/cwe-918"],"description":"Making a network request to a URL that is fully user-controlled allows for request forgery attacks.","id":"py/full-ssrf","kind":"path-problem","name":"Full server-side request forgery","precision":"high","problem.severity":"error","security-severity":"9.1"}},{"id":"py/command-line-injection","name":"py/command-line-injection","shortDescription":{"text":"Uncontrolled command line"},"fullDescription":{"text":"Using externally controlled strings in a command line may allow a malicious user to change the meaning of the command."},"defaultConfiguration":{"enabled":true,"level":"error"},"properties":{"tags":["correctness","security","external/cwe/cwe-078","external/cwe/cwe-088"],"description":"Using externally controlled strings in a command line may allow a malicious\n              user to change the meaning of the command.","id":"py/command-line-injection","kind":"path-problem","name":"Uncontrolled command line","precision":"high","problem.severity":"error","security-severity":"9.8","sub-severity":"high"}},{"id":"py/nosql-injection","name":"py/nosql-injection","shortDescription":{"text":"NoSQL Injection"},"fullDescription":{"text":"Building a NoSQL query from user-controlled sources is vulnerable to insertion of malicious NoSQL code by the user."},"defaultConfiguration":{"enabled":true,"level":"error"},"properties":{"tags":["security","external/cwe/cwe-943"],"description":"Building a NoSQL query from user-controlled sources is vulnerable to insertion of\n              malicious NoSQL code by the user.","id":"py/nosql-injection","kind":"path-problem","name":"NoSQL Injection","precision":"high","problem.severity":"error","security-severity":"8.8"}},{"id":"py/insecure-protocol","name":"py/insecure-protocol","shortDescription":{"text":"Use of insecure SSL/TLS version"},"fullDescription":{"text":"Using an insecure SSL/TLS version may leave the connection vulnerable to attacks."},"defaultConfiguration":{"enabled":true,"level":"warning"},"properties":{"tags":["security","external/cwe/cwe-327"],"description":"Using an insecure SSL/TLS version may leave the connection vulnerable to attacks.","id":"py/insecure-protocol","kind":"problem","name":"Use of insecure SSL/TLS version","precision":"high","problem.severity":"warning","security-severity":"7.5"}},{"id":"py/weak-cryptographic-algorithm","name":"py/weak-cryptographic-algorithm","shortDescription":{"text":"Use of a broken or weak cryptographic algorithm"},"fullDescription":{"text":"Using broken or weak cryptographic algorithms can compromise security."},"defaultConfiguration":{"enabled":true,"level":"warning"},"properties":{"tags":["security","external/cwe/cwe-327"],"description":"Using broken or weak cryptographic algorithms can compromise security.","id":"py/weak-cryptographic-algorithm","kind":"problem","name":"Use of a broken or weak cryptographic algorithm","precision":"high","problem.severity":"warning","security-severity":"7.5"}},{"id":"py/weak-sensitive-data-hashing","name":"py/weak-sensitive-data-hashing","shortDescription":{"text":"Use of a broken or weak cryptographic hashing algorithm on sensitive data"},"fullDescription":{"text":"Using broken or weak cryptographic hashing algorithms can compromise security."},"defaultConfiguration":{"enabled":true,"level":"warning"},"properties":{"tags":["security","external/cwe/cwe-327","external/cwe/cwe-328","external/cwe/cwe-916"],"description":"Using broken or weak cryptographic hashing algorithms can compromise security.","id":"py/weak-sensitive-data-hashing","kind":"path-problem","name":"Use of a broken or weak cryptographic hashing algorithm on sensitive data","precision":"high","problem.severity":"warning","security-severity":"7.5"}},{"id":"py/insecure-default-protocol","name":"py/insecure-default-protocol","shortDescription":{"text":"Default version of SSL/TLS may be insecure"},"fullDescription":{"text":"Leaving the SSL/TLS version unspecified may result in an insecure default protocol being used."},"defaultConfiguration":{"enabled":true,"level":"warning"},"properties":{"tags":["security","external/cwe/cwe-327"],"description":"Leaving the SSL/TLS version unspecified may result in an insecure\n              default protocol being used.","id":"py/insecure-default-protocol","kind":"problem","name":"Default version of SSL/TLS may be insecure","precision":"high","problem.severity":"warning","security-severity":"7.5"}},{"id":"py/use-of-input","name":"py/use-of-input","shortDescription":{"text":"'input' function used in Python 2"},"fullDescription":{"text":"The built-in function 'input' is used which, in Python 2, can allow arbitrary code to be run."},"defaultConfiguration":{"enabled":true,"level":"error"},"properties":{"tags":["security","correctness","external/cwe/cwe-094","external/cwe/cwe-095"],"description":"The built-in function 'input' is used which, in Python 2, can allow arbitrary code to be run.","id":"py/use-of-input","kind":"problem","name":"'input' function used in Python 2","precision":"high","problem.severity":"error","security-severity":"9.8","sub-severity":"high"}},{"id":"py/summary/lines-of-code","name":"py/summary/lines-of-code","shortDescription":{"text":"Total lines of Python code in the database"},"fullDescription":{"text":"The total number of lines of Python code across all files, including external libraries and auto-generated files. This is a useful metric of the size of a database. This query counts the lines of code, excluding whitespace or comments."},"defaultConfiguration":{"enabled":true},"properties":{"tags":["summary","telemetry"],"description":"The total number of lines of Python code across all files, including\n   external libraries and auto-generated files. This is a useful metric of the size of a\n   database. This query counts the lines of code, excluding whitespace or comments.","id":"py/summary/lines-of-code","kind":"metric","name":"Total lines of Python code in the database"}},{"id":"py/summary/lines-of-user-code","name":"py/summary/lines-of-user-code","shortDescription":{"text":"Total lines of user written Python code in the database"},"fullDescription":{"text":"The total number of lines of Python code from the source code directory, excluding auto-generated files. This query counts the lines of code, excluding whitespace or comments. Note: If external libraries are included in the codebase either in a checked-in virtual environment or as vendored code, that will currently be counted as user written code."},"defaultConfiguration":{"enabled":true},"properties":{"tags":["summary","lines-of-code","debug"],"description":"The total number of lines of Python code from the source code directory,\n   excluding auto-generated files. This query counts the lines of code, excluding\n   whitespace or comments. Note: If external libraries are included in the codebase\n   either in a checked-in virtual environment or as vendored code, that will currently\n   be counted as user written code.","id":"py/summary/lines-of-user-code","kind":"metric","name":"Total lines of user written Python code in the database"}}]},"extensions":[{"name":"codeql/python-queries","semanticVersion":"1.7.6+fedb9464aff82db8e415b26211efa75d806dc9f4","locations":[{"uri":"file:///opt/claude/.codeql/packages/codeql/python-queries/1.7.6/","description":{"text":"The QL pack root directory."},"properties":{"tags":["CodeQL/LocalPackRoot"]}},{"uri":"file:///opt/claude/.codeql/packages/codeql/python-queries/1.7.6/qlpack.yml","description":{"text":"The QL pack definition file."},"properties":{"tags":["CodeQL/LocalPackDefinitionFile"]}}]},{"name":"codeql/python-all","semanticVersion":"6.1.0+fedb9464aff82db8e415b26211efa75d806dc9f4","locations":[{"uri":"file:///opt/claude/.codeql/packages/codeql/python-queries/1.7.6/.codeql/libraries/codeql/python-all/6.1.0/","description":{"text":"The QL pack root directory."},"properties":{"tags":["CodeQL/LocalPackRoot"]}},{"uri":"file:///opt/claude/.codeql/packages/codeql/python-queries/1.7.6/.codeql/libraries/codeql/python-all/6.1.0/qlpack.yml","description":{"text":"The QL pack definition file."},"properties":{"tags":["CodeQL/LocalPackDefinitionFile"]}}]},{"name":"codeql/threat-models","semanticVersion":"1.0.41+fedb9464aff82db8e415b26211efa75d806dc9f4","locations":[{"uri":"file:///opt/claude/.codeql/packages/codeql/python-queries/1.7.6/.codeql/libraries/codeql/threat-models/1.0.41/","description":{"text":"The QL pack root directory."},"properties":{"tags":["CodeQL/LocalPackRoot"]}},{"uri":"file:///opt/claude/.codeql/packages/codeql/python-queries/1.7.6/.codeql/libraries/codeql/threat-models/1.0.41/qlpack.yml","description":{"text":"The QL pack definition file."},"properties":{"tags":["CodeQL/LocalPackDefinitionFile"]}}]}]},"invocations":[{"toolExecutionNotifications":[{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"api/firmware.py","uriBaseId":"%SRCROOT%","index":3}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/diagnostics/successfully-extracted-files","index":1},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"api/catalog.py","uriBaseId":"%SRCROOT%","index":6}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/diagnostics/successfully-extracted-files","index":1},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"db/__init__.py","uriBaseId":"%SRCROOT%","index":7}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/diagnostics/successfully-extracted-files","index":1},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"api/discovery.py","uriBaseId":"%SRCROOT%","index":0}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/diagnostics/successfully-extracted-files","index":1},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"api/support.py","uriBaseId":"%SRCROOT%","index":8}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/diagnostics/successfully-extracted-files","index":1},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"api/colors.py","uriBaseId":"%SRCROOT%","index":2}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/diagnostics/successfully-extracted-files","index":1},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"config.py","uriBaseId":"%SRCROOT%","index":9}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/diagnostics/successfully-extracted-files","index":1},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"api/spools.py","uriBaseId":"%SRCROOT%","index":10}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/diagnostics/successfully-extracted-files","index":1},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"api/settings.py","uriBaseId":"%SRCROOT%","index":11}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/diagnostics/successfully-extracted-files","index":1},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"api/__init__.py","uriBaseId":"%SRCROOT%","index":12}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/diagnostics/successfully-extracted-files","index":1},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"api/device.py","uriBaseId":"%SRCROOT%","index":4}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/diagnostics/successfully-extracted-files","index":1},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"api/serial.py","uriBaseId":"%SRCROOT%","index":13}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/diagnostics/successfully-extracted-files","index":1},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"api/tags.py","uriBaseId":"%SRCROOT%","index":14}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/diagnostics/successfully-extracted-files","index":1},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"db/database.py","uriBaseId":"%SRCROOT%","index":15}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/diagnostics/successfully-extracted-files","index":1},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"api/updates.py","uriBaseId":"%SRCROOT%","index":16}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/diagnostics/successfully-extracted-files","index":1},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tags/openspool.py","uriBaseId":"%SRCROOT%","index":17}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/diagnostics/successfully-extracted-files","index":1},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/integration/test_catalog_api.py","uriBaseId":"%SRCROOT%","index":18}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/diagnostics/successfully-extracted-files","index":1},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"models.py","uriBaseId":"%SRCROOT%","index":19}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/diagnostics/successfully-extracted-files","index":1},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/integration/test_firmware_api.py","uriBaseId":"%SRCROOT%","index":20}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/diagnostics/successfully-extracted-files","index":1},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"api/api_keys.py","uriBaseId":"%SRCROOT%","index":5}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/diagnostics/successfully-extracted-files","index":1},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/unit/test_mqtt_client.py","uriBaseId":"%SRCROOT%","index":21}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/diagnostics/successfully-extracted-files","index":1},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tags/models.py","uriBaseId":"%SRCROOT%","index":22}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/diagnostics/successfully-extracted-files","index":1},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"main.py","uriBaseId":"%SRCROOT%","index":1}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/diagnostics/successfully-extracted-files","index":1},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/integration/__init__.py","uriBaseId":"%SRCROOT%","index":23}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/diagnostics/successfully-extracted-files","index":1},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/conftest.py","uriBaseId":"%SRCROOT%","index":24}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/diagnostics/successfully-extracted-files","index":1},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/integration/test_discovery_api.py","uriBaseId":"%SRCROOT%","index":25}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/diagnostics/successfully-extracted-files","index":1},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"api/cloud.py","uriBaseId":"%SRCROOT%","index":26}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/diagnostics/successfully-extracted-files","index":1},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tags/spoolease_format.py","uriBaseId":"%SRCROOT%","index":27}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/diagnostics/successfully-extracted-files","index":1},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/unit/test_database.py","uriBaseId":"%SRCROOT%","index":28}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/diagnostics/successfully-extracted-files","index":1},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"services/bambu_cloud.py","uriBaseId":"%SRCROOT%","index":29}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/diagnostics/successfully-extracted-files","index":1},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/integration/test_printers_api.py","uriBaseId":"%SRCROOT%","index":30}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/diagnostics/successfully-extracted-files","index":1},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/integration/test_cloud_api.py","uriBaseId":"%SRCROOT%","index":31}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/diagnostics/successfully-extracted-files","index":1},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"services/__init__.py","uriBaseId":"%SRCROOT%","index":32}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/diagnostics/successfully-extracted-files","index":1},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/__init__.py","uriBaseId":"%SRCROOT%","index":33}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/diagnostics/successfully-extracted-files","index":1},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"services/bambu_ftp.py","uriBaseId":"%SRCROOT%","index":34}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/diagnostics/successfully-extracted-files","index":1},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"api/printers.py","uriBaseId":"%SRCROOT%","index":35}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/diagnostics/successfully-extracted-files","index":1},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/integration/test_colors_api.py","uriBaseId":"%SRCROOT%","index":36}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/diagnostics/successfully-extracted-files","index":1},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/integration/test_spools_api.py","uriBaseId":"%SRCROOT%","index":37}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/diagnostics/successfully-extracted-files","index":1},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/integration/test_support_api.py","uriBaseId":"%SRCROOT%","index":38}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/diagnostics/successfully-extracted-files","index":1},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/integration/test_updates_api.py","uriBaseId":"%SRCROOT%","index":39}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/diagnostics/successfully-extracted-files","index":1},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/unit/test_auto_connect.py","uriBaseId":"%SRCROOT%","index":40}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/diagnostics/successfully-extracted-files","index":1},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tags/openprinttag.py","uriBaseId":"%SRCROOT%","index":41}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/diagnostics/successfully-extracted-files","index":1},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tags/decoder.py","uriBaseId":"%SRCROOT%","index":42}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/diagnostics/successfully-extracted-files","index":1},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"mqtt/__init__.py","uriBaseId":"%SRCROOT%","index":43}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/diagnostics/successfully-extracted-files","index":1},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"usage_tracker.py","uriBaseId":"%SRCROOT%","index":44}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/diagnostics/successfully-extracted-files","index":1},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/unit/__init__.py","uriBaseId":"%SRCROOT%","index":45}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/diagnostics/successfully-extracted-files","index":1},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tags/__init__.py","uriBaseId":"%SRCROOT%","index":46}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/diagnostics/successfully-extracted-files","index":1},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/integration/test_tags_api.py","uriBaseId":"%SRCROOT%","index":47}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/diagnostics/successfully-extracted-files","index":1},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tags/opentag3d.py","uriBaseId":"%SRCROOT%","index":48}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/diagnostics/successfully-extracted-files","index":1},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/integration/test_api_keys_api.py","uriBaseId":"%SRCROOT%","index":49}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/diagnostics/successfully-extracted-files","index":1},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/integration/test_device_api.py","uriBaseId":"%SRCROOT%","index":50}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/diagnostics/successfully-extracted-files","index":1},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/integration/test_settings_api.py","uriBaseId":"%SRCROOT%","index":51}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/diagnostics/successfully-extracted-files","index":1},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"mqtt/client.py","uriBaseId":"%SRCROOT%","index":52}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/diagnostics/successfully-extracted-files","index":1},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tags/bambulab.py","uriBaseId":"%SRCROOT%","index":53}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/diagnostics/successfully-extracted-files","index":1},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/unit/test_updates.py","uriBaseId":"%SRCROOT%","index":54}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/diagnostics/successfully-extracted-files","index":1},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/unit/test_bambu_cloud.py","uriBaseId":"%SRCROOT%","index":55}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/diagnostics/successfully-extracted-files","index":1},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/integration/test_ams_api.py","uriBaseId":"%SRCROOT%","index":56}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/diagnostics/successfully-extracted-files","index":1},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/unit/test_tag_decoders.py","uriBaseId":"%SRCROOT%","index":57}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/diagnostics/successfully-extracted-files","index":1},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"venv/lib/python3.13/site-packages/markdown_it/port.yaml","uriBaseId":"%SRCROOT%","index":58}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/diagnostics/successfully-extracted-files","index":1},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"venv/lib/python3.13/site-packages/material/plugins/social/templates/default/accent.yml","uriBaseId":"%SRCROOT%","index":59}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/diagnostics/successfully-extracted-files","index":1},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"venv/lib/python3.13/site-packages/material/plugins/social/templates/default/invert.yml","uriBaseId":"%SRCROOT%","index":60}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/diagnostics/successfully-extracted-files","index":1},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"venv/lib/python3.13/site-packages/material/plugins/social/templates/default/only/image.yml","uriBaseId":"%SRCROOT%","index":61}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/diagnostics/successfully-extracted-files","index":1},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"venv/lib/python3.13/site-packages/material/plugins/social/templates/default/variant.yml","uriBaseId":"%SRCROOT%","index":62}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/diagnostics/successfully-extracted-files","index":1},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"venv/lib/python3.13/site-packages/material/plugins/social/templates/default.yml","uriBaseId":"%SRCROOT%","index":63}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/diagnostics/successfully-extracted-files","index":1},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"venv/lib/python3.13/site-packages/material/templates/mkdocs_theme.yml","uriBaseId":"%SRCROOT%","index":64}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/diagnostics/successfully-extracted-files","index":1},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"venv/lib/python3.13/site-packages/mkdocs/themes/mkdocs/mkdocs_theme.yml","uriBaseId":"%SRCROOT%","index":65}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/diagnostics/successfully-extracted-files","index":1},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"venv/lib/python3.13/site-packages/mkdocs/themes/readthedocs/mkdocs_theme.yml","uriBaseId":"%SRCROOT%","index":66}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/diagnostics/successfully-extracted-files","index":1},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"venv/lib/python3.13/site-packages/pre_commit/resources/empty_template_environment.yml","uriBaseId":"%SRCROOT%","index":67}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/diagnostics/successfully-extracted-files","index":1},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"venv/lib/python3.13/site-packages/pre_commit/resources/empty_template_pubspec.yaml","uriBaseId":"%SRCROOT%","index":68}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/diagnostics/successfully-extracted-files","index":1},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"mqtt/client.py","uriBaseId":"%SRCROOT%","index":52}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/baseline/expected-extracted-files","index":2},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"services/bambu_cloud.py","uriBaseId":"%SRCROOT%","index":29}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/baseline/expected-extracted-files","index":2},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"api/support.py","uriBaseId":"%SRCROOT%","index":8}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/baseline/expected-extracted-files","index":2},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/integration/test_device_api.py","uriBaseId":"%SRCROOT%","index":50}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/baseline/expected-extracted-files","index":2},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/integration/test_api_keys_api.py","uriBaseId":"%SRCROOT%","index":49}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/baseline/expected-extracted-files","index":2},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/integration/test_settings_api.py","uriBaseId":"%SRCROOT%","index":51}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/baseline/expected-extracted-files","index":2},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tags/bambulab.py","uriBaseId":"%SRCROOT%","index":53}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/baseline/expected-extracted-files","index":2},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tags/openspool.py","uriBaseId":"%SRCROOT%","index":17}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/baseline/expected-extracted-files","index":2},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/integration/test_updates_api.py","uriBaseId":"%SRCROOT%","index":39}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/baseline/expected-extracted-files","index":2},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/integration/test_firmware_api.py","uriBaseId":"%SRCROOT%","index":20}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/baseline/expected-extracted-files","index":2},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tags/models.py","uriBaseId":"%SRCROOT%","index":22}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/baseline/expected-extracted-files","index":2},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tags/opentag3d.py","uriBaseId":"%SRCROOT%","index":48}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/baseline/expected-extracted-files","index":2},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/integration/test_colors_api.py","uriBaseId":"%SRCROOT%","index":36}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/baseline/expected-extracted-files","index":2},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/unit/test_mqtt_client.py","uriBaseId":"%SRCROOT%","index":21}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/baseline/expected-extracted-files","index":2},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"services/__init__.py","uriBaseId":"%SRCROOT%","index":32}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/baseline/expected-extracted-files","index":2},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/unit/test_auto_connect.py","uriBaseId":"%SRCROOT%","index":40}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/baseline/expected-extracted-files","index":2},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/integration/test_ams_api.py","uriBaseId":"%SRCROOT%","index":56}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/baseline/expected-extracted-files","index":2},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/unit/test_updates.py","uriBaseId":"%SRCROOT%","index":54}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/baseline/expected-extracted-files","index":2},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"models.py","uriBaseId":"%SRCROOT%","index":19}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/baseline/expected-extracted-files","index":2},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"api/firmware.py","uriBaseId":"%SRCROOT%","index":3}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/baseline/expected-extracted-files","index":2},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"config.py","uriBaseId":"%SRCROOT%","index":9}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/baseline/expected-extracted-files","index":2},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/unit/__init__.py","uriBaseId":"%SRCROOT%","index":45}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/baseline/expected-extracted-files","index":2},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"usage_tracker.py","uriBaseId":"%SRCROOT%","index":44}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/baseline/expected-extracted-files","index":2},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/__init__.py","uriBaseId":"%SRCROOT%","index":33}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/baseline/expected-extracted-files","index":2},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/unit/test_bambu_cloud.py","uriBaseId":"%SRCROOT%","index":55}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/baseline/expected-extracted-files","index":2},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/integration/test_tags_api.py","uriBaseId":"%SRCROOT%","index":47}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/baseline/expected-extracted-files","index":2},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/integration/test_cloud_api.py","uriBaseId":"%SRCROOT%","index":31}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/baseline/expected-extracted-files","index":2},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"api/api_keys.py","uriBaseId":"%SRCROOT%","index":5}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/baseline/expected-extracted-files","index":2},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"api/printers.py","uriBaseId":"%SRCROOT%","index":35}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/baseline/expected-extracted-files","index":2},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"api/device.py","uriBaseId":"%SRCROOT%","index":4}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/baseline/expected-extracted-files","index":2},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"api/__init__.py","uriBaseId":"%SRCROOT%","index":12}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/baseline/expected-extracted-files","index":2},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/unit/test_tag_decoders.py","uriBaseId":"%SRCROOT%","index":57}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/baseline/expected-extracted-files","index":2},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"api/colors.py","uriBaseId":"%SRCROOT%","index":2}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/baseline/expected-extracted-files","index":2},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/integration/test_spools_api.py","uriBaseId":"%SRCROOT%","index":37}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/baseline/expected-extracted-files","index":2},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"api/discovery.py","uriBaseId":"%SRCROOT%","index":0}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/baseline/expected-extracted-files","index":2},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"mqtt/__init__.py","uriBaseId":"%SRCROOT%","index":43}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/baseline/expected-extracted-files","index":2},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/integration/test_catalog_api.py","uriBaseId":"%SRCROOT%","index":18}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/baseline/expected-extracted-files","index":2},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"main.py","uriBaseId":"%SRCROOT%","index":1}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/baseline/expected-extracted-files","index":2},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"db/database.py","uriBaseId":"%SRCROOT%","index":15}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/baseline/expected-extracted-files","index":2},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tags/__init__.py","uriBaseId":"%SRCROOT%","index":46}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/baseline/expected-extracted-files","index":2},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"api/updates.py","uriBaseId":"%SRCROOT%","index":16}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/baseline/expected-extracted-files","index":2},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tags/decoder.py","uriBaseId":"%SRCROOT%","index":42}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/baseline/expected-extracted-files","index":2},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tags/spoolease_format.py","uriBaseId":"%SRCROOT%","index":27}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/baseline/expected-extracted-files","index":2},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/integration/test_support_api.py","uriBaseId":"%SRCROOT%","index":38}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/baseline/expected-extracted-files","index":2},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"api/tags.py","uriBaseId":"%SRCROOT%","index":14}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/baseline/expected-extracted-files","index":2},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"services/bambu_ftp.py","uriBaseId":"%SRCROOT%","index":34}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/baseline/expected-extracted-files","index":2},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/integration/test_discovery_api.py","uriBaseId":"%SRCROOT%","index":25}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/baseline/expected-extracted-files","index":2},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"api/spools.py","uriBaseId":"%SRCROOT%","index":10}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/baseline/expected-extracted-files","index":2},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"api/settings.py","uriBaseId":"%SRCROOT%","index":11}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/baseline/expected-extracted-files","index":2},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tags/openprinttag.py","uriBaseId":"%SRCROOT%","index":41}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/baseline/expected-extracted-files","index":2},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"api/catalog.py","uriBaseId":"%SRCROOT%","index":6}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/baseline/expected-extracted-files","index":2},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/integration/__init__.py","uriBaseId":"%SRCROOT%","index":23}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/baseline/expected-extracted-files","index":2},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"db/__init__.py","uriBaseId":"%SRCROOT%","index":7}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/baseline/expected-extracted-files","index":2},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/unit/test_database.py","uriBaseId":"%SRCROOT%","index":28}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/baseline/expected-extracted-files","index":2},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"api/serial.py","uriBaseId":"%SRCROOT%","index":13}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/baseline/expected-extracted-files","index":2},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/integration/test_printers_api.py","uriBaseId":"%SRCROOT%","index":30}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/baseline/expected-extracted-files","index":2},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"api/cloud.py","uriBaseId":"%SRCROOT%","index":26}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/baseline/expected-extracted-files","index":2},"properties":{"formattedMessage":{"text":""}}},{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/conftest.py","uriBaseId":"%SRCROOT%","index":24}}}],"message":{"text":""},"level":"none","descriptor":{"id":"py/baseline/expected-extracted-files","index":2},"properties":{"formattedMessage":{"text":""}}},{"message":{"text":""},"level":"none","timeUtc":"2026-02-11T11:02:36.641515324Z","descriptor":{"id":"cli/file-coverage-baseline","index":3},"properties":{"attributes":{"durationMilliseconds":76},"visibility":{"statusPage":false,"telemetry":true}}},{"message":{"text":""},"level":"none","timeUtc":"2026-02-11T11:02:36.647446960Z","descriptor":{"id":"cli/platform","index":4},"properties":{"attributes":{"arch":"amd64","name":"Linux","version":"6.17.4-2-pve"},"visibility":{"statusPage":false,"telemetry":true}}}],"executionSuccessful":true}],"artifacts":[{"location":{"uri":"api/discovery.py","uriBaseId":"%SRCROOT%","index":0}},{"location":{"uri":"main.py","uriBaseId":"%SRCROOT%","index":1}},{"location":{"uri":"api/colors.py","uriBaseId":"%SRCROOT%","index":2}},{"location":{"uri":"api/firmware.py","uriBaseId":"%SRCROOT%","index":3}},{"location":{"uri":"api/device.py","uriBaseId":"%SRCROOT%","index":4}},{"location":{"uri":"api/api_keys.py","uriBaseId":"%SRCROOT%","index":5}},{"location":{"uri":"api/catalog.py","uriBaseId":"%SRCROOT%","index":6}},{"location":{"uri":"db/__init__.py","uriBaseId":"%SRCROOT%","index":7}},{"location":{"uri":"api/support.py","uriBaseId":"%SRCROOT%","index":8}},{"location":{"uri":"config.py","uriBaseId":"%SRCROOT%","index":9}},{"location":{"uri":"api/spools.py","uriBaseId":"%SRCROOT%","index":10}},{"location":{"uri":"api/settings.py","uriBaseId":"%SRCROOT%","index":11}},{"location":{"uri":"api/__init__.py","uriBaseId":"%SRCROOT%","index":12}},{"location":{"uri":"api/serial.py","uriBaseId":"%SRCROOT%","index":13}},{"location":{"uri":"api/tags.py","uriBaseId":"%SRCROOT%","index":14}},{"location":{"uri":"db/database.py","uriBaseId":"%SRCROOT%","index":15}},{"location":{"uri":"api/updates.py","uriBaseId":"%SRCROOT%","index":16}},{"location":{"uri":"tags/openspool.py","uriBaseId":"%SRCROOT%","index":17}},{"location":{"uri":"tests/integration/test_catalog_api.py","uriBaseId":"%SRCROOT%","index":18}},{"location":{"uri":"models.py","uriBaseId":"%SRCROOT%","index":19}},{"location":{"uri":"tests/integration/test_firmware_api.py","uriBaseId":"%SRCROOT%","index":20}},{"location":{"uri":"tests/unit/test_mqtt_client.py","uriBaseId":"%SRCROOT%","index":21}},{"location":{"uri":"tags/models.py","uriBaseId":"%SRCROOT%","index":22}},{"location":{"uri":"tests/integration/__init__.py","uriBaseId":"%SRCROOT%","index":23}},{"location":{"uri":"tests/conftest.py","uriBaseId":"%SRCROOT%","index":24}},{"location":{"uri":"tests/integration/test_discovery_api.py","uriBaseId":"%SRCROOT%","index":25}},{"location":{"uri":"api/cloud.py","uriBaseId":"%SRCROOT%","index":26}},{"location":{"uri":"tags/spoolease_format.py","uriBaseId":"%SRCROOT%","index":27}},{"location":{"uri":"tests/unit/test_database.py","uriBaseId":"%SRCROOT%","index":28}},{"location":{"uri":"services/bambu_cloud.py","uriBaseId":"%SRCROOT%","index":29}},{"location":{"uri":"tests/integration/test_printers_api.py","uriBaseId":"%SRCROOT%","index":30}},{"location":{"uri":"tests/integration/test_cloud_api.py","uriBaseId":"%SRCROOT%","index":31}},{"location":{"uri":"services/__init__.py","uriBaseId":"%SRCROOT%","index":32}},{"location":{"uri":"tests/__init__.py","uriBaseId":"%SRCROOT%","index":33}},{"location":{"uri":"services/bambu_ftp.py","uriBaseId":"%SRCROOT%","index":34}},{"location":{"uri":"api/printers.py","uriBaseId":"%SRCROOT%","index":35}},{"location":{"uri":"tests/integration/test_colors_api.py","uriBaseId":"%SRCROOT%","index":36}},{"location":{"uri":"tests/integration/test_spools_api.py","uriBaseId":"%SRCROOT%","index":37}},{"location":{"uri":"tests/integration/test_support_api.py","uriBaseId":"%SRCROOT%","index":38}},{"location":{"uri":"tests/integration/test_updates_api.py","uriBaseId":"%SRCROOT%","index":39}},{"location":{"uri":"tests/unit/test_auto_connect.py","uriBaseId":"%SRCROOT%","index":40}},{"location":{"uri":"tags/openprinttag.py","uriBaseId":"%SRCROOT%","index":41}},{"location":{"uri":"tags/decoder.py","uriBaseId":"%SRCROOT%","index":42}},{"location":{"uri":"mqtt/__init__.py","uriBaseId":"%SRCROOT%","index":43}},{"location":{"uri":"usage_tracker.py","uriBaseId":"%SRCROOT%","index":44}},{"location":{"uri":"tests/unit/__init__.py","uriBaseId":"%SRCROOT%","index":45}},{"location":{"uri":"tags/__init__.py","uriBaseId":"%SRCROOT%","index":46}},{"location":{"uri":"tests/integration/test_tags_api.py","uriBaseId":"%SRCROOT%","index":47}},{"location":{"uri":"tags/opentag3d.py","uriBaseId":"%SRCROOT%","index":48}},{"location":{"uri":"tests/integration/test_api_keys_api.py","uriBaseId":"%SRCROOT%","index":49}},{"location":{"uri":"tests/integration/test_device_api.py","uriBaseId":"%SRCROOT%","index":50}},{"location":{"uri":"tests/integration/test_settings_api.py","uriBaseId":"%SRCROOT%","index":51}},{"location":{"uri":"mqtt/client.py","uriBaseId":"%SRCROOT%","index":52}},{"location":{"uri":"tags/bambulab.py","uriBaseId":"%SRCROOT%","index":53}},{"location":{"uri":"tests/unit/test_updates.py","uriBaseId":"%SRCROOT%","index":54}},{"location":{"uri":"tests/unit/test_bambu_cloud.py","uriBaseId":"%SRCROOT%","index":55}},{"location":{"uri":"tests/integration/test_ams_api.py","uriBaseId":"%SRCROOT%","index":56}},{"location":{"uri":"tests/unit/test_tag_decoders.py","uriBaseId":"%SRCROOT%","index":57}},{"location":{"uri":"venv/lib/python3.13/site-packages/markdown_it/port.yaml","uriBaseId":"%SRCROOT%","index":58}},{"location":{"uri":"venv/lib/python3.13/site-packages/material/plugins/social/templates/default/accent.yml","uriBaseId":"%SRCROOT%","index":59}},{"location":{"uri":"venv/lib/python3.13/site-packages/material/plugins/social/templates/default/invert.yml","uriBaseId":"%SRCROOT%","index":60}},{"location":{"uri":"venv/lib/python3.13/site-packages/material/plugins/social/templates/default/only/image.yml","uriBaseId":"%SRCROOT%","index":61}},{"location":{"uri":"venv/lib/python3.13/site-packages/material/plugins/social/templates/default/variant.yml","uriBaseId":"%SRCROOT%","index":62}},{"location":{"uri":"venv/lib/python3.13/site-packages/material/plugins/social/templates/default.yml","uriBaseId":"%SRCROOT%","index":63}},{"location":{"uri":"venv/lib/python3.13/site-packages/material/templates/mkdocs_theme.yml","uriBaseId":"%SRCROOT%","index":64}},{"location":{"uri":"venv/lib/python3.13/site-packages/mkdocs/themes/mkdocs/mkdocs_theme.yml","uriBaseId":"%SRCROOT%","index":65}},{"location":{"uri":"venv/lib/python3.13/site-packages/mkdocs/themes/readthedocs/mkdocs_theme.yml","uriBaseId":"%SRCROOT%","index":66}},{"location":{"uri":"venv/lib/python3.13/site-packages/pre_commit/resources/empty_template_environment.yml","uriBaseId":"%SRCROOT%","index":67}},{"location":{"uri":"venv/lib/python3.13/site-packages/pre_commit/resources/empty_template_pubspec.yaml","uriBaseId":"%SRCROOT%","index":68}}],"results":[{"ruleId":"py/bind-socket-all-network-interfaces","ruleIndex":1,"rule":{"id":"py/bind-socket-all-network-interfaces","index":1},"message":{"text":"'' binds a socket to all interfaces."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"api/discovery.py","uriBaseId":"%SRCROOT%","index":0},"region":{"startLine":161,"startColumn":9,"endColumn":30}}}],"partialFingerprints":{"primaryLocationLineHash":"5fa9b124945323fc:1","primaryLocationStartColumnFingerprint":"0"}},{"ruleId":"py/bind-socket-all-network-interfaces","ruleIndex":1,"rule":{"id":"py/bind-socket-all-network-interfaces","index":1},"message":{"text":"'0.0.0.0' binds a socket to all interfaces."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"main.py","uriBaseId":"%SRCROOT%","index":1},"region":{"startLine":343,"startColumn":5,"endColumn":41}}}],"partialFingerprints":{"primaryLocationLineHash":"8b9b8021fe6b90a:1","primaryLocationStartColumnFingerprint":"0"}},{"ruleId":"py/stack-trace-exposure","ruleIndex":5,"rule":{"id":"py/stack-trace-exposure","index":5},"message":{"text":"[Stack trace information](1) flows to this location and may be exposed to an external user."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"api/colors.py","uriBaseId":"%SRCROOT%","index":2},"region":{"startLine":288,"startColumn":30,"endColumn":40}}}],"partialFingerprints":{"primaryLocationLineHash":"c412d85a2eba4670:1","primaryLocationStartColumnFingerprint":"25"},"codeFlows":[{"threadFlows":[{"locations":[{"location":{"physicalLocation":{"artifactLocation":{"uri":"api/colors.py","uriBaseId":"%SRCROOT%","index":2},"region":{"startLine":265,"startColumn":35,"endColumn":36}},"message":{"text":"ControlFlowNode for e"}}},{"location":{"physicalLocation":{"artifactLocation":{"uri":"api/colors.py","uriBaseId":"%SRCROOT%","index":2},"region":{"startLine":267,"startColumn":13,"endColumn":25}},"message":{"text":"ControlFlowNode for error_result"}}},{"location":{"physicalLocation":{"artifactLocation":{"uri":"api/colors.py","uriBaseId":"%SRCROOT%","index":2},"region":{"startLine":275,"startColumn":13,"endColumn":58}},"message":{"text":"ControlFlowNode for Yield"}},"taxa":[{"id":"AdditionalTaintStep","properties":{"CodeQL/DataflowRole":"step"}}]},{"location":{"physicalLocation":{"artifactLocation":{"uri":"api/colors.py","uriBaseId":"%SRCROOT%","index":2},"region":{"startLine":288,"startColumn":30,"endColumn":40}},"message":{"text":"ControlFlowNode for generate()"}}}]}]}],"relatedLocations":[{"id":1,"physicalLocation":{"artifactLocation":{"uri":"api/colors.py","uriBaseId":"%SRCROOT%","index":2},"region":{"startLine":265,"startColumn":35,"endColumn":36}},"message":{"text":"Stack trace information"}},{"physicalLocation":{"artifactLocation":{"uri":"api/colors.py","uriBaseId":"%SRCROOT%","index":2},"region":{"startLine":265,"startColumn":35,"endColumn":36}}}]},{"ruleId":"py/polynomial-redos","ruleIndex":15,"rule":{"id":"py/polynomial-redos","index":15},"message":{"text":"This [regular expression](1) that depends on a [user-provided value](2) may run slow on strings starting with '9.9.9' and with many repetitions of '99'."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"api/firmware.py","uriBaseId":"%SRCROOT%","index":3},"region":{"startLine":85,"startColumn":63,"endColumn":64}}}],"partialFingerprints":{"primaryLocationLineHash":"785cad1b087dd9c0:1","primaryLocationStartColumnFingerprint":"58"},"codeFlows":[{"threadFlows":[{"locations":[{"location":{"physicalLocation":{"artifactLocation":{"uri":"api/firmware.py","uriBaseId":"%SRCROOT%","index":3},"region":{"startLine":133,"startColumn":33,"endColumn":48}},"message":{"text":"ControlFlowNode for current_version"}}},{"location":{"physicalLocation":{"artifactLocation":{"uri":"api/firmware.py","uriBaseId":"%SRCROOT%","index":3},"region":{"startLine":222,"startColumn":57,"endColumn":72}},"message":{"text":"ControlFlowNode for current_version"}}},{"location":{"physicalLocation":{"artifactLocation":{"uri":"api/firmware.py","uriBaseId":"%SRCROOT%","index":3},"region":{"startLine":99,"startColumn":23,"endColumn":30}},"message":{"text":"ControlFlowNode for current"}}},{"location":{"physicalLocation":{"artifactLocation":{"uri":"api/firmware.py","uriBaseId":"%SRCROOT%","index":3},"region":{"startLine":105,"startColumn":41,"endColumn":48}},"message":{"text":"ControlFlowNode for current"}}},{"location":{"physicalLocation":{"artifactLocation":{"uri":"api/firmware.py","uriBaseId":"%SRCROOT%","index":3},"region":{"startLine":72,"startColumn":20,"endColumn":21}},"message":{"text":"ControlFlowNode for v"}}},{"location":{"physicalLocation":{"artifactLocation":{"uri":"api/firmware.py","uriBaseId":"%SRCROOT%","index":3},"region":{"startLine":80,"startColumn":36,"endColumn":37}},"message":{"text":"ControlFlowNode for v"}}},{"location":{"physicalLocation":{"artifactLocation":{"uri":"api/firmware.py","uriBaseId":"%SRCROOT%","index":3},"region":{"startLine":80,"startColumn":9,"endColumn":38}},"message":{"text":"ControlFlowNode for Attribute()"}},"taxa":[{"id":"re.sub","properties":{"CodeQL/DataflowRole":"step"}}]},{"location":{"physicalLocation":{"artifactLocation":{"uri":"api/firmware.py","uriBaseId":"%SRCROOT%","index":3},"region":{"startLine":80,"startColumn":5,"endColumn":6}},"message":{"text":"ControlFlowNode for v"}}},{"location":{"physicalLocation":{"artifactLocation":{"uri":"api/firmware.py","uriBaseId":"%SRCROOT%","index":3},"region":{"startLine":81,"startColumn":35,"endColumn":36}},"message":{"text":"ControlFlowNode for v"}}},{"location":{"physicalLocation":{"artifactLocation":{"uri":"api/firmware.py","uriBaseId":"%SRCROOT%","index":3},"region":{"startLine":81,"startColumn":9,"endColumn":37}},"message":{"text":"ControlFlowNode for Attribute()"}},"taxa":[{"id":"re.sub","properties":{"CodeQL/DataflowRole":"step"}}]},{"location":{"physicalLocation":{"artifactLocation":{"uri":"api/firmware.py","uriBaseId":"%SRCROOT%","index":3},"region":{"startLine":81,"startColumn":5,"endColumn":6}},"message":{"text":"ControlFlowNode for v"}}},{"location":{"physicalLocation":{"artifactLocation":{"uri":"api/firmware.py","uriBaseId":"%SRCROOT%","index":3},"region":{"startLine":82,"startColumn":34,"endColumn":35}},"message":{"text":"ControlFlowNode for v"}}},{"location":{"physicalLocation":{"artifactLocation":{"uri":"api/firmware.py","uriBaseId":"%SRCROOT%","index":3},"region":{"startLine":82,"startColumn":9,"endColumn":36}},"message":{"text":"ControlFlowNode for Attribute()"}},"taxa":[{"id":"re.sub","properties":{"CodeQL/DataflowRole":"step"}}]},{"location":{"physicalLocation":{"artifactLocation":{"uri":"api/firmware.py","uriBaseId":"%SRCROOT%","index":3},"region":{"startLine":82,"startColumn":5,"endColumn":6}},"message":{"text":"ControlFlowNode for v"}}},{"location":{"physicalLocation":{"artifactLocation":{"uri":"api/firmware.py","uriBaseId":"%SRCROOT%","index":3},"region":{"startLine":85,"startColumn":63,"endColumn":64}},"message":{"text":"ControlFlowNode for v"}}}]}]}],"relatedLocations":[{"id":1,"physicalLocation":{"artifactLocation":{"uri":"api/firmware.py","uriBaseId":"%SRCROOT%","index":3},"region":{"startLine":85,"startColumn":54,"endColumn":57}},"message":{"text":"regular expression"}},{"id":2,"physicalLocation":{"artifactLocation":{"uri":"api/firmware.py","uriBaseId":"%SRCROOT%","index":3},"region":{"startLine":133,"startColumn":33,"endColumn":48}},"message":{"text":"user-provided value"}},{"physicalLocation":{"artifactLocation":{"uri":"api/firmware.py","uriBaseId":"%SRCROOT%","index":3},"region":{"startLine":133,"startColumn":33,"endColumn":48}}}]},{"ruleId":"py/full-ssrf","ruleIndex":33,"rule":{"id":"py/full-ssrf","index":33},"message":{"text":"The full URL of this request depends on a [user-provided value](1).\nThe full URL of this request depends on a [user-provided value](2).\nThe full URL of this request depends on a [user-provided value](3)."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"api/device.py","uriBaseId":"%SRCROOT%","index":4},"region":{"startLine":328,"startColumn":30,"endColumn":72}}}],"partialFingerprints":{"primaryLocationLineHash":"14b21351fe5d8aaa:1","primaryLocationStartColumnFingerprint":"17"},"codeFlows":[{"threadFlows":[{"locations":[{"location":{"physicalLocation":{"artifactLocation":{"uri":"api/device.py","uriBaseId":"%SRCROOT%","index":4},"region":{"startLine":95,"startColumn":30,"endColumn":36}},"message":{"text":"ControlFlowNode for config"}}},{"location":{"physicalLocation":{"artifactLocation":{"uri":"api/device.py","uriBaseId":"%SRCROOT%","index":4},"region":{"startLine":98,"startColumn":5,"endColumn":19}},"message":{"text":"ControlFlowNode for _device_config"}}},{"location":{"physicalLocation":{"artifactLocation":{"uri":"api/device.py","uriBaseId":"%SRCROOT%","index":4},"region":{"startLine":115,"startColumn":12,"endColumn":26}},"message":{"text":"ControlFlowNode for _device_config"}}},{"location":{"physicalLocation":{"artifactLocation":{"uri":"api/device.py","uriBaseId":"%SRCROOT%","index":4},"region":{"startLine":120,"startColumn":43,"endColumn":60}},"message":{"text":"ControlFlowNode for Attribute"}},"taxa":[{"id":"AdditionalTaintStep","properties":{"CodeQL/DataflowRole":"step"}}]},{"location":{"physicalLocation":{"artifactLocation":{"uri":"api/device.py","uriBaseId":"%SRCROOT%","index":4},"region":{"startLine":313,"startColumn":25,"endColumn":27}},"message":{"text":"ControlFlowNode for ip"}}},{"location":{"physicalLocation":{"artifactLocation":{"uri":"api/device.py","uriBaseId":"%SRCROOT%","index":4},"region":{"startLine":328,"startColumn":41,"endColumn":71}},"message":{"text":"ControlFlowNode for Fstring"}}}]}]},{"threadFlows":[{"locations":[{"location":{"physicalLocation":{"artifactLocation":{"uri":"api/device.py","uriBaseId":"%SRCROOT%","index":4},"region":{"startLine":95,"startColumn":30,"endColumn":36}},"message":{"text":"ControlFlowNode for config"}}},{"location":{"physicalLocation":{"artifactLocation":{"uri":"api/device.py","uriBaseId":"%SRCROOT%","index":4},"region":{"startLine":98,"startColumn":5,"endColumn":19}},"message":{"text":"ControlFlowNode for _device_config"}}},{"location":{"physicalLocation":{"artifactLocation":{"uri":"api/device.py","uriBaseId":"%SRCROOT%","index":4},"region":{"startLine":120,"startColumn":43,"endColumn":57}},"message":{"text":"ControlFlowNode for _device_config"}}},{"location":{"physicalLocation":{"artifactLocation":{"uri":"api/device.py","uriBaseId":"%SRCROOT%","index":4},"region":{"startLine":120,"startColumn":43,"endColumn":60}},"message":{"text":"ControlFlowNode for Attribute"}},"taxa":[{"id":"AdditionalTaintStep","properties":{"CodeQL/DataflowRole":"step"}}]},{"location":{"physicalLocation":{"artifactLocation":{"uri":"api/device.py","uriBaseId":"%SRCROOT%","index":4},"region":{"startLine":313,"startColumn":25,"endColumn":27}},"message":{"text":"ControlFlowNode for ip"}}},{"location":{"physicalLocation":{"artifactLocation":{"uri":"api/device.py","uriBaseId":"%SRCROOT%","index":4},"region":{"startLine":328,"startColumn":41,"endColumn":71}},"message":{"text":"ControlFlowNode for Fstring"}}}]}]},{"threadFlows":[{"locations":[{"location":{"physicalLocation":{"artifactLocation":{"uri":"api/device.py","uriBaseId":"%SRCROOT%","index":4},"region":{"startLine":104,"startColumn":26,"endColumn":32}},"message":{"text":"ControlFlowNode for config"}}},{"location":{"physicalLocation":{"artifactLocation":{"uri":"api/device.py","uriBaseId":"%SRCROOT%","index":4},"region":{"startLine":113,"startColumn":9,"endColumn":23}},"message":{"text":"ControlFlowNode for _device_config"}}},{"location":{"physicalLocation":{"artifactLocation":{"uri":"api/device.py","uriBaseId":"%SRCROOT%","index":4},"region":{"startLine":120,"startColumn":43,"endColumn":60}},"message":{"text":"ControlFlowNode for Attribute"}},"taxa":[{"id":"AdditionalTaintStep","properties":{"CodeQL/DataflowRole":"step"}}]},{"location":{"physicalLocation":{"artifactLocation":{"uri":"api/device.py","uriBaseId":"%SRCROOT%","index":4},"region":{"startLine":313,"startColumn":25,"endColumn":27}},"message":{"text":"ControlFlowNode for ip"}}},{"location":{"physicalLocation":{"artifactLocation":{"uri":"api/device.py","uriBaseId":"%SRCROOT%","index":4},"region":{"startLine":328,"startColumn":41,"endColumn":71}},"message":{"text":"ControlFlowNode for Fstring"}}}]}]},{"threadFlows":[{"locations":[{"location":{"physicalLocation":{"artifactLocation":{"uri":"api/device.py","uriBaseId":"%SRCROOT%","index":4},"region":{"startLine":193,"startColumn":23,"endColumn":25}},"message":{"text":"ControlFlowNode for ip"}}},{"location":{"physicalLocation":{"artifactLocation":{"uri":"api/device.py","uriBaseId":"%SRCROOT%","index":4},"region":{"startLine":195,"startColumn":39,"endColumn":41}},"message":{"text":"ControlFlowNode for ip"}}},{"location":{"physicalLocation":{"artifactLocation":{"uri":"api/device.py","uriBaseId":"%SRCROOT%","index":4},"region":{"startLine":313,"startColumn":25,"endColumn":27}},"message":{"text":"ControlFlowNode for ip"}}},{"location":{"physicalLocation":{"artifactLocation":{"uri":"api/device.py","uriBaseId":"%SRCROOT%","index":4},"region":{"startLine":328,"startColumn":41,"endColumn":71}},"message":{"text":"ControlFlowNode for Fstring"}}}]}]}],"relatedLocations":[{"id":1,"physicalLocation":{"artifactLocation":{"uri":"api/device.py","uriBaseId":"%SRCROOT%","index":4},"region":{"startLine":95,"startColumn":30,"endColumn":36}},"message":{"text":"user-provided value"}},{"id":2,"physicalLocation":{"artifactLocation":{"uri":"api/device.py","uriBaseId":"%SRCROOT%","index":4},"region":{"startLine":104,"startColumn":26,"endColumn":32}},"message":{"text":"user-provided value"}},{"id":3,"physicalLocation":{"artifactLocation":{"uri":"api/device.py","uriBaseId":"%SRCROOT%","index":4},"region":{"startLine":193,"startColumn":23,"endColumn":25}},"message":{"text":"user-provided value"}},{"physicalLocation":{"artifactLocation":{"uri":"api/device.py","uriBaseId":"%SRCROOT%","index":4},"region":{"startLine":95,"startColumn":30,"endColumn":36}}},{"physicalLocation":{"artifactLocation":{"uri":"api/device.py","uriBaseId":"%SRCROOT%","index":4},"region":{"startLine":328,"startColumn":41,"endColumn":71}}},{"physicalLocation":{"artifactLocation":{"uri":"api/device.py","uriBaseId":"%SRCROOT%","index":4},"region":{"startLine":104,"startColumn":26,"endColumn":32}}},{"physicalLocation":{"artifactLocation":{"uri":"api/device.py","uriBaseId":"%SRCROOT%","index":4},"region":{"startLine":193,"startColumn":23,"endColumn":25}}}]},{"ruleId":"py/weak-sensitive-data-hashing","ruleIndex":38,"rule":{"id":"py/weak-sensitive-data-hashing","index":38},"message":{"text":"[Sensitive data (password)](1) is used in a hashing algorithm (SHA256) that is insecure for password hashing, since it is not a computationally expensive hash function.\n[Sensitive data (password)](2) is used in a hashing algorithm (SHA256) that is insecure for password hashing, since it is not a computationally expensive hash function.\n[Sensitive data (password)](3) is used in a hashing algorithm (SHA256) that is insecure for password hashing, since it is not a computationally expensive hash function.\n[Sensitive data (password)](4) is used in a hashing algorithm (SHA256) that is insecure for password hashing, since it is not a computationally expensive hash function.\n[Sensitive data (password)](5) is used in a hashing algorithm (SHA256) that is insecure for password hashing, since it is not a computationally expensive hash function.\n[Sensitive data (password)](6) is used in a hashing algorithm (SHA256) that is insecure for password hashing, since it is not a computationally expensive hash function.\n[Sensitive data (password)](7) is used in a hashing algorithm (SHA256) that is insecure for password hashing, since it is not a computationally expensive hash function."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"api/api_keys.py","uriBaseId":"%SRCROOT%","index":5},"region":{"startLine":78,"startColumn":27,"endColumn":39}}}],"partialFingerprints":{"primaryLocationLineHash":"a853577aa004f9de:1","primaryLocationStartColumnFingerprint":"22"},"codeFlows":[{"threadFlows":[{"locations":[{"location":{"physicalLocation":{"artifactLocation":{"uri":"api/api_keys.py","uriBaseId":"%SRCROOT%","index":5},"region":{"startLine":239,"startColumn":5,"endColumn":14}},"message":{"text":"ControlFlowNode for x_api_key"}}},{"location":{"physicalLocation":{"artifactLocation":{"uri":"api/api_keys.py","uriBaseId":"%SRCROOT%","index":5},"region":{"startLine":251,"startColumn":9,"endColumn":22}},"message":{"text":"ControlFlowNode for api_key_value"}}},{"location":{"physicalLocation":{"artifactLocation":{"uri":"api/api_keys.py","uriBaseId":"%SRCROOT%","index":5},"region":{"startLine":274,"startColumn":27,"endColumn":40}},"message":{"text":"ControlFlowNode for api_key_value"}}},{"location":{"physicalLocation":{"artifactLocation":{"uri":"api/api_keys.py","uriBaseId":"%SRCROOT%","index":5},"region":{"startLine":76,"startColumn":20,"endColumn":23}},"message":{"text":"ControlFlowNode for key"}}},{"location":{"physicalLocation":{"artifactLocation":{"uri":"api/api_keys.py","uriBaseId":"%SRCROOT%","index":5},"region":{"startLine":78,"startColumn":27,"endColumn":39}},"message":{"text":"ControlFlowNode for Attribute()"}}}]}]},{"threadFlows":[{"locations":[{"location":{"physicalLocation":{"artifactLocation":{"uri":"api/api_keys.py","uriBaseId":"%SRCROOT%","index":5},"region":{"startLine":248,"startColumn":21,"endColumn":25}},"message":{"text":"ControlFlowNode for None"}}},{"location":{"physicalLocation":{"artifactLocation":{"uri":"api/api_keys.py","uriBaseId":"%SRCROOT%","index":5},"region":{"startLine":248,"startColumn":5,"endColumn":18}},"message":{"text":"ControlFlowNode for api_key_value"}}},{"location":{"physicalLocation":{"artifactLocation":{"uri":"api/api_keys.py","uriBaseId":"%SRCROOT%","index":5},"region":{"startLine":274,"startColumn":27,"endColumn":40}},"message":{"text":"ControlFlowNode for api_key_value"}}},{"location":{"physicalLocation":{"artifactLocation":{"uri":"api/api_keys.py","uriBaseId":"%SRCROOT%","index":5},"region":{"startLine":76,"startColumn":20,"endColumn":23}},"message":{"text":"ControlFlowNode for key"}}},{"location":{"physicalLocation":{"artifactLocation":{"uri":"api/api_keys.py","uriBaseId":"%SRCROOT%","index":5},"region":{"startLine":78,"startColumn":27,"endColumn":39}},"message":{"text":"ControlFlowNode for Attribute()"}}}]}]},{"threadFlows":[{"locations":[{"location":{"physicalLocation":{"artifactLocation":{"uri":"api/api_keys.py","uriBaseId":"%SRCROOT%","index":5},"region":{"startLine":251,"startColumn":25,"endColumn":34}},"message":{"text":"ControlFlowNode for x_api_key"}}},{"location":{"physicalLocation":{"artifactLocation":{"uri":"api/api_keys.py","uriBaseId":"%SRCROOT%","index":5},"region":{"startLine":251,"startColumn":9,"endColumn":22}},"message":{"text":"ControlFlowNode for api_key_value"}}},{"location":{"physicalLocation":{"artifactLocation":{"uri":"api/api_keys.py","uriBaseId":"%SRCROOT%","index":5},"region":{"startLine":274,"startColumn":27,"endColumn":40}},"message":{"text":"ControlFlowNode for api_key_value"}}},{"location":{"physicalLocation":{"artifactLocation":{"uri":"api/api_keys.py","uriBaseId":"%SRCROOT%","index":5},"region":{"startLine":76,"startColumn":20,"endColumn":23}},"message":{"text":"ControlFlowNode for key"}}},{"location":{"physicalLocation":{"artifactLocation":{"uri":"api/api_keys.py","uriBaseId":"%SRCROOT%","index":5},"region":{"startLine":78,"startColumn":27,"endColumn":39}},"message":{"text":"ControlFlowNode for Attribute()"}}}]}]},{"threadFlows":[{"locations":[{"location":{"physicalLocation":{"artifactLocation":{"uri":"api/api_keys.py","uriBaseId":"%SRCROOT%","index":5},"region":{"startLine":253,"startColumn":25,"endColumn":61}},"message":{"text":"ControlFlowNode for Attribute()"}}},{"location":{"physicalLocation":{"artifactLocation":{"uri":"api/api_keys.py","uriBaseId":"%SRCROOT%","index":5},"region":{"startLine":253,"startColumn":9,"endColumn":22}},"message":{"text":"ControlFlowNode for api_key_value"}}},{"location":{"physicalLocation":{"artifactLocation":{"uri":"api/api_keys.py","uriBaseId":"%SRCROOT%","index":5},"region":{"startLine":274,"startColumn":27,"endColumn":40}},"message":{"text":"ControlFlowNode for api_key_value"}}},{"location":{"physicalLocation":{"artifactLocation":{"uri":"api/api_keys.py","uriBaseId":"%SRCROOT%","index":5},"region":{"startLine":76,"startColumn":20,"endColumn":23}},"message":{"text":"ControlFlowNode for key"}}},{"location":{"physicalLocation":{"artifactLocation":{"uri":"api/api_keys.py","uriBaseId":"%SRCROOT%","index":5},"region":{"startLine":78,"startColumn":27,"endColumn":39}},"message":{"text":"ControlFlowNode for Attribute()"}}}]}]}],"relatedLocations":[{"id":1,"physicalLocation":{"artifactLocation":{"uri":"api/api_keys.py","uriBaseId":"%SRCROOT%","index":5},"region":{"startLine":239,"startColumn":5,"endColumn":14}},"message":{"text":"Sensitive data (password)"}},{"id":2,"physicalLocation":{"artifactLocation":{"uri":"api/api_keys.py","uriBaseId":"%SRCROOT%","index":5},"region":{"startLine":248,"startColumn":21,"endColumn":25}},"message":{"text":"Sensitive data (password)"}},{"id":3,"physicalLocation":{"artifactLocation":{"uri":"api/api_keys.py","uriBaseId":"%SRCROOT%","index":5},"region":{"startLine":251,"startColumn":25,"endColumn":34}},"message":{"text":"Sensitive data (password)"}},{"id":4,"physicalLocation":{"artifactLocation":{"uri":"api/api_keys.py","uriBaseId":"%SRCROOT%","index":5},"region":{"startLine":253,"startColumn":25,"endColumn":61}},"message":{"text":"Sensitive data (password)"}},{"id":5,"physicalLocation":{"artifactLocation":{"uri":"api/api_keys.py","uriBaseId":"%SRCROOT%","index":5},"region":{"startLine":297,"startColumn":9,"endColumn":18}},"message":{"text":"Sensitive data (password)"}},{"id":6,"physicalLocation":{"artifactLocation":{"uri":"api/api_keys.py","uriBaseId":"%SRCROOT%","index":5},"region":{"startLine":297,"startColumn":33,"endColumn":64}},"message":{"text":"Sensitive data (password)"}},{"id":7,"physicalLocation":{"artifactLocation":{"uri":"api/api_keys.py","uriBaseId":"%SRCROOT%","index":5},"region":{"startLine":239,"startColumn":29,"endColumn":60}},"message":{"text":"Sensitive data (password)"}},{"physicalLocation":{"artifactLocation":{"uri":"api/api_keys.py","uriBaseId":"%SRCROOT%","index":5},"region":{"startLine":239,"startColumn":5,"endColumn":14}}},{"physicalLocation":{"artifactLocation":{"uri":"api/api_keys.py","uriBaseId":"%SRCROOT%","index":5},"region":{"startLine":248,"startColumn":21,"endColumn":25}}},{"physicalLocation":{"artifactLocation":{"uri":"api/api_keys.py","uriBaseId":"%SRCROOT%","index":5},"region":{"startLine":251,"startColumn":25,"endColumn":34}}},{"physicalLocation":{"artifactLocation":{"uri":"api/api_keys.py","uriBaseId":"%SRCROOT%","index":5},"region":{"startLine":253,"startColumn":25,"endColumn":61}}}]}],"columnKind":"unicodeCodePoints","properties":{"semmle.formatSpecifier":"sarifv2.1.0","metricResults":[{"rule":{"id":"py/summary/lines-of-code","index":41},"ruleId":"py/summary/lines-of-code","ruleIndex":41,"value":13704},{"rule":{"id":"py/summary/lines-of-user-code","index":42},"ruleId":"py/summary/lines-of-user-code","ruleIndex":42,"value":13704,"baseline":13239}]}}]}