addedInput schema / properties / findings / items
Added value: +{
+ "description": "A single finding from `scan_path --format json`.",
+ "properties": {
+ "algorithm": {
+ "description": "Classical algorithm family, when applicable.",
+ "type": "string"
+ },
+ "category": {
+ "type": "string"
+ },
+ "confidence": {
+ "type": "string"
+ },
+ "cwe": {
+ "description": "e.g. \"CWE-327\".",
+ "type": "string"
+ },
+ "hndl": {
+ "description": "Exposed to harvest-now-decrypt-later.",
+ "type": "boolean"
+ },
+ "location": {
+ "description": "Where the finding is.",
+ "properties": {
+ "file": {
+ "type": "string"
+ },
+ "line": {
+ "type": "number"
+ }
+ },
+ "required": [
+ "file"
+ ],
+ "type": "object"
+ },
+ "message": {
+ "type": "string"
+ },
+ "remediation": {
+ "type": "string"
+ },
+ "ruleId": {
+ "description": "Stable rule id, e.g. \"rsa-keygen\".",
+ "type": "string"
+ },
+ "severity": {
+ "description": "critical | high | medium | low | info.",
+ "type": "string"
+ },
+ "title": {
+ "type": "string"
+ }
+ },
+ "required": [
+ "ruleId",
+ "location"
+ ],
+ "type": "object"
+}
addedInput schema / properties / verdicts / items
Added value: +{
+ "description": "A triage verdict for one finding.",
+ "properties": {
+ "exposureScore": {
+ "description": "Real-world exposure (higher = more exposed).",
+ "type": "number"
+ },
+ "fingerprint": {
+ "description": "Fingerprint of the finding this verdict applies to.",
+ "type": "string"
+ },
+ "priority": {
+ "enum": [
+ "now",
+ "soon",
+ "later"
+ ],
+ "type": "string"
+ },
+ "rationale": {
+ "description": "Why this exposure score / priority.",
+ "type": "string"
+ }
+ },
+ "required": [
+ "fingerprint",
+ "exposureScore",
+ "priority",
+ "rationale"
+ ],
+ "type": "object"
+}