{
  "schema_version": "scan_result.v1",
  "scan_id": "954bdd8b",
  "project_name": "venruk",
  "timestamp": "2026-06-27T12:59:06.211910+00:00",
  "scan_started_at": "2026-06-27T12:59:05.890658+00:00",
  "scan_completed_at": "2026-06-27T12:59:06.211910+00:00",
  "duration_seconds": 0.32,
  "scan_mode": "quick",
  "profile": null,
  "files_scanned": 1,
  "lines_scanned": 3,
  "languages": [
    "python"
  ],
  "frameworks": [],
  "scanners_run": [
    "secrets",
    "quality",
    "sast",
    "dependencies"
  ],
  "scores": {
    "security": 81.0,
    "quality": 100.0,
    "maintainability": 100.0,
    "architecture": 55.0,
    "compliance": 100.0,
    "overall": 87.5,
    "grade": "A"
  },
  "summary": {
    "total": 6,
    "critical": 3,
    "high": 2,
    "medium": 1,
    "low": 0,
    "info": 0
  },
  "findings": [
    {
      "schema_version": "finding.v1",
      "id": "CC-CRY-001",
      "title": "Hardcoded Credential \u2014 variable `password`",
      "description": "Variable `password` is assigned a hardcoded string 
literal. Credentials in source code are exposed in version control and build 
artifacts.",
      "severity": "high",
      "category": "security",
      "confidence": "high",
      "location": {
        "file": "main.py",
        "start_line": 1,
        "end_line": 1,
        "start_col": 0,
        "end_col": 22,
        "snippet": null
      },
      "rule_id": "CC-CRY-001",
      "scanner": "sast",
      "cwe_id": "CWE-798",
      "owasp_id": "A07:2021",
      "cvss_score": null,
      "fix_suggestion": "Load `password` from an environment variable: 
`os.environ.get('PASSWORD')`",
      "fix_diff": null,
      "effort_minutes": null,
      "references": [],
      "tags": [],
      "metadata": {
        "ownership_resolution_method": "Git History",
        "reachability": {
          "status": "unknown",
          "confidence": "LOW",
          "entrypoint_ids": [],
          "attack_path_ids": [],
          "unresolved_call_count": 0,
          "analysis_version": "reachability.v2"
        }
      },
      "ai_status": null,
      "ai_confidence": null,
      "ai_reasoning": null,
      "is_root_cause": false,
      "related_findings": [],
      "owner": "mohan67nv",
      "fingerprint": "9fba4f0544560152",
      "timestamp": "2026-06-27T12:59:05.939620+00:00"
    },
    {
      "schema_version": "finding.v1",
      "id": "CC-PY2-001:main.py:3",
      "title": "Use of eval() detected",
      "description": "Use of eval() detected",
      "severity": "high",
      "category": "security",
      "confidence": "high",
      "location": {
        "file": "main.py",
        "start_line": 3,
        "end_line": 3,
        "start_col": null,
        "end_col": null,
        "snippet": null
      },
      "rule_id": "CC-PY2-001",
      "scanner": "sast",
      "cwe_id": null,
      "owasp_id": null,
      "cvss_score": null,
      "fix_suggestion": null,
      "fix_diff": null,
      "effort_minutes": null,
      "references": [],
      "tags": [],
      "metadata": {
        "ownership_resolution_method": "Git History",
        "reachability": {
          "status": "unknown",
          "confidence": "LOW",
          "entrypoint_ids": [],
          "attack_path_ids": [],
          "unresolved_call_count": 0,
          "analysis_version": "reachability.v2"
        }
      },
      "ai_status": null,
      "ai_confidence": null,
      "ai_reasoning": null,
      "is_root_cause": false,
      "related_findings": [],
      "owner": "mohan67nv",
      "fingerprint": "d4d0d51b2d1dcdd3",
      "timestamp": "2026-06-27T12:59:05.939650+00:00"
    },
    {
      "schema_version": "finding.v1",
      "id": "CC-PY2-003:main.py:1",
      "title": "Hardcoded password assignment",
      "description": "Hardcoded password assignment",
      "severity": "medium",
      "category": "security",
      "confidence": "high",
      "location": {
        "file": "main.py",
        "start_line": 1,
        "end_line": 1,
        "start_col": null,
        "end_col": null,
        "snippet": null
      },
      "rule_id": "CC-PY2-003",
      "scanner": "sast",
      "cwe_id": null,
      "owasp_id": null,
      "cvss_score": null,
      "fix_suggestion": null,
      "fix_diff": null,
      "effort_minutes": null,
      "references": [],
      "tags": [],
      "metadata": {
        "ownership_resolution_method": "Git History",
        "reachability": {
          "status": "unknown",
          "confidence": "LOW",
          "entrypoint_ids": [],
          "attack_path_ids": [],
          "unresolved_call_count": 0,
          "analysis_version": "reachability.v2"
        }
      },
      "ai_status": null,
      "ai_confidence": null,
      "ai_reasoning": null,
      "is_root_cause": false,
      "related_findings": [],
      "owner": "mohan67nv",
      "fingerprint": "f56292a3493fb5a8",
      "timestamp": "2026-06-27T12:59:05.939667+00:00"
    },
    {
      "schema_version": "finding.v1",
      "id": "ARCH-CHOKE-file:main.py",
      "title": "High-Risk Chokepoint: file:main.py",
      "description": "This FILE is depended upon by 1 components but contains a 
vulnerability: Hardcoded Credential \u2014 variable `password`.",
      "severity": "critical",
      "category": "architecture",
      "confidence": "high",
      "location": {
        "file": "file:main.py",
        "start_line": 1,
        "end_line": 1,
        "start_col": null,
        "end_col": null,
        "snippet": ""
      },
      "rule_id": "ARCH-CHOKEPOINT",
      "scanner": "tech-debt",
      "cwe_id": "",
      "owasp_id": "",
      "cvss_score": null,
      "fix_suggestion": null,
      "fix_diff": null,
      "effort_minutes": null,
      "references": [],
      "tags": [],
      "metadata": {
        "ownership_resolution_method": "Fallback"
      },
      "ai_status": null,
      "ai_confidence": null,
      "ai_reasoning": null,
      "is_root_cause": false,
      "related_findings": [],
      "owner": "Unknown",
      "fingerprint": "4d50119bb75b1107",
      "timestamp": "2026-06-27T12:59:06.151219+00:00"
    },
    {
      "schema_version": "finding.v1",
      "id": "ARCH-CHOKE-file:main.py",
      "title": "High-Risk Chokepoint: file:main.py",
      "description": "This FILE is depended upon by 1 components but contains a 
vulnerability: Use of eval() detected.",
      "severity": "critical",
      "category": "architecture",
      "confidence": "high",
      "location": {
        "file": "file:main.py",
        "start_line": 1,
        "end_line": 1,
        "start_col": null,
        "end_col": null,
        "snippet": ""
      },
      "rule_id": "ARCH-CHOKEPOINT",
      "scanner": "tech-debt",
      "cwe_id": "",
      "owasp_id": "",
      "cvss_score": null,
      "fix_suggestion": null,
      "fix_diff": null,
      "effort_minutes": null,
      "references": [],
      "tags": [],
      "metadata": {
        "ownership_resolution_method": "Fallback"
      },
      "ai_status": null,
      "ai_confidence": null,
      "ai_reasoning": null,
      "is_root_cause": false,
      "related_findings": [],
      "owner": "Unknown",
      "fingerprint": "4d50119bb75b1107",
      "timestamp": "2026-06-27T12:59:06.151311+00:00"
    },
    {
      "schema_version": "finding.v1",
      "id": "ARCH-CHOKE-file:main.py",
      "title": "High-Risk Chokepoint: file:main.py",
      "description": "This FILE is depended upon by 1 components but contains a 
vulnerability: Hardcoded password assignment.",
      "severity": "critical",
      "category": "architecture",
      "confidence": "high",
      "location": {
        "file": "file:main.py",
        "start_line": 1,
        "end_line": 1,
        "start_col": null,
        "end_col": null,
        "snippet": ""
      },
      "rule_id": "ARCH-CHOKEPOINT",
      "scanner": "tech-debt",
      "cwe_id": "",
      "owasp_id": "",
      "cvss_score": null,
      "fix_suggestion": null,
      "fix_diff": null,
      "effort_minutes": null,
      "references": [],
      "tags": [],
      "metadata": {
        "ownership_resolution_method": "Fallback"
      },
      "ai_status": null,
      "ai_confidence": null,
      "ai_reasoning": null,
      "is_root_cause": false,
      "related_findings": [],
      "owner": "Unknown",
      "fingerprint": "4d50119bb75b1107",
      "timestamp": "2026-06-27T12:59:06.151344+00:00"
    }
  ],
  "metadata": {
    "risk_attribution": {
      "mohan67nv": {
        "critical": 0,
        "high": 2,
        "medium": 1,
        "low": 0,
        "info": 0,
        "total_findings": 3,
        "risk_score": 19.0,
        "blast_radius_services": 0
      },
      "Unknown": {
        "critical": 3,
        "high": 0,
        "medium": 0,
        "low": 0,
        "info": 0,
        "total_findings": 3,
        "risk_score": 45.0,
        "blast_radius_services": 0
      }
    },
    "reachability": {
      "schema_version": "reachability.v1",
      "entrypoints_detected": 0,
      "findings_analyzed": 3,
      "findings_reachable": 0,
      "findings_unreachable": 0,
      "findings_unknown": 3,
      "attack_paths_total": 0,
      "attack_paths_max_length": 0,
      "attack_paths_min_length": 0,
      "entrypoints_used": 0,
      "unresolved_calls": 0
    },
    "ownership": {
      "schema_version": "ownership.v1",
      "unique_owners": 1,
      "findings_with_owner": 3,
      "findings_without_owner": 3
    },
    "risk_attribution_v2": {
      "schema_version": "risk_attribution_v2.v1",
      "findings_scope": "scanner_findings_only",
      "owners": {
        "mohan67nv": {
          "reachable_findings": 0,
          "unreachable_findings": 0,
          "unknown_findings": 3,
          "not_analyzed_findings": 0,
          "attack_path_count": 0,
          "total_findings": 3,
          "risk_score": 19.0
        }
      }
    },
    "attack_paths": {
      "schema_version": "attack_paths.v1",
      "entrypoints": [],
      "attack_paths": [],
      "finding_meta": {
        "CC-CRY-001": {
          "finding_id": "CC-CRY-001",
          "status": "unknown",
          "confidence": "LOW",
          "entrypoint_ids": [],
          "attack_path_ids": [],
          "unresolved_call_count": 0,
          "analysis_version": "reachability.v2"
        },
        "CC-PY2-001:main.py:3": {
          "finding_id": "CC-PY2-001:main.py:3",
          "status": "unknown",
          "confidence": "LOW",
          "entrypoint_ids": [],
          "attack_path_ids": [],
          "unresolved_call_count": 0,
          "analysis_version": "reachability.v2"
        },
        "CC-PY2-003:main.py:1": {
          "finding_id": "CC-PY2-003:main.py:1",
          "status": "unknown",
          "confidence": "LOW",
          "entrypoint_ids": [],
          "attack_path_ids": [],
          "unresolved_call_count": 0,
          "analysis_version": "reachability.v2"
        }
      },
      "stats": {
        "entrypoints": 0,
        "attack_paths": 0,
        "unresolved_calls": 0,
        "findings_analyzed": 3,
        "findings_reachable": 0,
        "findings_unreachable": 0,
        "findings_unknown": 3
      },
      "node_locations": {},
      "limits_hit": {},
      "finding_diagnostics": {
        "CC-CRY-001": {
          "finding_id": "CC-CRY-001",
          "entrypoints_checked": 0,
          "nodes_visited": 0,
          "hard_gaps_in_scope": 0,
          "soft_gaps_in_scope": 0,
          "depth_limit_hit": false,
          "ghost_entrypoints_skipped": 0,
          "target_callables_found": 0,
          "ambiguous_aliases_in_resolution": 0
        },
        "CC-PY2-001:main.py:3": {
          "finding_id": "CC-PY2-001:main.py:3",
          "entrypoints_checked": 0,
          "nodes_visited": 0,
          "hard_gaps_in_scope": 0,
          "soft_gaps_in_scope": 0,
          "depth_limit_hit": false,
          "ghost_entrypoints_skipped": 0,
          "target_callables_found": 1,
          "ambiguous_aliases_in_resolution": 0
        },
        "CC-PY2-003:main.py:1": {
          "finding_id": "CC-PY2-003:main.py:1",
          "entrypoints_checked": 0,
          "nodes_visited": 0,
          "hard_gaps_in_scope": 0,
          "soft_gaps_in_scope": 0,
          "depth_limit_hit": false,
          "ghost_entrypoints_skipped": 0,
          "target_callables_found": 0,
          "ambiguous_aliases_in_resolution": 0
        }
      },
      "analysis_complete": true
    },
    "pipeline": {
      "schema_version": "pipeline.v1",
      "stages": {
        "discovery": {
          "duration_ms": 48.94,
          "status": "success"
        },
        "scanning": {
          "duration_ms": 125.37,
          "status": "success"
        },
        "correlation": {
          "duration_ms": 4.37,
          "status": "success"
        },
        "graph": {
          "duration_ms": 23.67,
          "status": "success"
        },
        "enrichment": {
          "duration_ms": 18.66,
          "status": "success"
        },
        "risk": {
          "duration_ms": 37.58,
          "status": "success"
        }
      },
      "total_duration_ms": 258.9
    }
  }
}
