ShipShadow proof

hisopo/siteshadow-product

Repository

hisopo/siteshadow-product

Head SHA

68a2cc2051682a315eca42ee6c0b06aa47d14456

Branch

test

Status

completed

Conclusion

failure

Run

run_772e37a037014bac1b2e9cd8

Gate Results

Gate	Conclusion	Summary
ShipShadow / CR Routing Gate	success	The change record satisfies routing for ci-infra.
ShipShadow / Change Request Gate	success	The configured change request identifier pattern matched pull request metadata.
ShipShadow / Policy Gate	success	No blocked workflow or release-evidence policy violations were found.
ShipShadow / Publish Gate	failure	Publication is blocked by: ShipShadow / Security Gate.
ShipShadow / Secret Gate	success	Changed-file content passed the ShipShadow secret gate.
ShipShadow / Security Gate	failure	HIGH CWE-129-ALL-004 in data/qa_runner_baseline_77811a8_fp_regression.json HIGH CWE-261-ALL-004 in data/qa_runner_baseline_77811a8_fp_regression.json HIGH CWE-287-ALL-003 in data/qa_runner_baseline_77811a8_fp_regression.json HIGH CWE-494-ALL-001 in data/qa_runner_baseline_77811a8_fp_regression.json HIGH CWE-506-ALL-003 in data/qa_runner_baseline_77811a8_fp_regression.json HIGH CWE-676-ALL-006 in data/qa_runner_baseline_77811a8_fp_regression.json HIGH CWE-80-ALL-003 in data/qa_runner_baseline_77811a8_fp_regression.json CRITICAL CWE-89-001 in data/qa_runner_baseline_77811a8_fp_regression.json HIGH CWE-89-ALL-005 in data/qa_runner_baseline_77811a8_fp_regression.json HIGH DOCKER01-003 in data/qa_runner_baseline_77811a8_fp_regression.json CRITICAL I01-003 in data/qa_runner_baseline_77811a8_fp_regression.json HIGH CWE-129-ALL-004 in data/qa_runner_baseline_latest_fp_regression.json HIGH CWE-261-ALL-004 in data/qa_runner_baseline_latest_fp_regression.json HIGH CWE-287-ALL-003 in data/qa_runner_baseline_latest_fp_regression.json HIGH CWE-494-ALL-001 in data/qa_runner_baseline_latest_fp_regression.json HIGH CWE-506-ALL-003 in data/qa_runner_baseline_latest_fp_regression.json HIGH CWE-676-ALL-006 in data/qa_runner_baseline_latest_fp_regression.json HIGH CWE-80-ALL-003 in data/qa_runner_baseline_latest_fp_regression.json HIGH DOCKER01-003 in data/qa_runner_baseline_latest_fp_regression.json HIGH H23 in data/qa_runner_baseline_77811a8_fp_regression.json 63 blocking findings from an earlier commit on this repository have not been resolved: HIGH BLAZOR04-004 in data/qa_runner_baseline_16a3412_dedicated_blazor_rule_bench_01.json (introduced in 13772c5) HIGH CWE-532-ALL-001 in data/qa_runner_baseline_16a3412_fp_regression.json (introduced in 13772c5) HIGH CLOUD01-003 in data/qa_runner_baseline_16a3412_iac_config_bench_01.json (introduced in 13772c5) HIGH CLOUD01-004 in data/qa_runner_baseline_16a3412_iac_config_bench_01.json (introduced in 13772c5) HIGH CWE-382-ALL-004 in data/qa_runner_baseline_16a3412_js_real_bench_01_combined.json (introduced in 13772c5) CRITICAL I01-015 in data/qa_runner_baseline_16a3412_js_real_bench_01_combined.json (introduced in 13772c5) HIGH CWE-83-ALL-002 in data/qa_runner_baseline_16a3412_ossf_cve_js_bench_01.json (introduced in 13772c5) HIGH CWE-114-ALL-001 in data/qa_runner_baseline_16a3412_py_real_bench_01_combined.json (introduced in 13772c5) HIGH CWE-676-ALL-006 in data/qa_runner_baseline_16a3412_py_real_bench_01_combined.json (introduced in 13772c5) HIGH BLAZOR04-004 in data/qa_runner_baseline_latest_dedicated_blazor_rule_bench_01.json (introduced in 13772c5) HIGH CLOUD01-003 in data/qa_runner_baseline_latest_iac_config_bench_01.json (introduced in 13772c5) HIGH CLOUD01-004 in data/qa_runner_baseline_latest_iac_config_bench_01.json (introduced in 13772c5) HIGH CWE-382-ALL-004 in data/qa_runner_baseline_latest_js_real_bench_01_combined.json (introduced in 13772c5) HIGH CWE-83-ALL-002 in data/qa_runner_baseline_latest_ossf_cve_js_bench_01.json (introduced in 13772c5) HIGH CWE-114-ALL-001 in data/qa_runner_baseline_latest_py_real_bench_01_combined.json (introduced in 13772c5) HIGH CWE-676-ALL-006 in data/qa_runner_baseline_latest_py_real_bench_01_combined.json (introduced in 13772c5) HIGH CWE-129-ALL-004 in data/qa_runner_baseline_595e72f_fp_regression.json (introduced in 2fbae5e) HIGH CWE-261-ALL-004 in data/qa_runner_baseline_595e72f_fp_regression.json (introduced in 2fbae5e) HIGH CWE-287-ALL-003 in data/qa_runner_baseline_595e72f_fp_regression.json (introduced in 2fbae5e) HIGH CWE-394-ALL-001 in data/qa_runner_baseline_595e72f_fp_regression.json (introduced in 2fbae5e) HIGH CWE-494-ALL-001 in data/qa_runner_baseline_595e72f_fp_regression.json (introduced in 2fbae5e) HIGH CWE-506-ALL-003 in data/qa_runner_baseline_595e72f_fp_regression.json (introduced in 2fbae5e) HIGH CWE-676-ALL-006 in data/qa_runner_baseline_595e72f_fp_regression.json (introduced in 2fbae5e) HIGH CWE-80-ALL-003 in data/qa_runner_baseline_595e72f_fp_regression.json (introduced in 2fbae5e) CRITICAL CWE-89-001 in data/qa_runner_baseline_595e72f_fp_regression.json (introduced in 2fbae5e) HIGH CWE-89-ALL-005 in data/qa_runner_baseline_595e72f_fp_regression.json (introduced in 2fbae5e) HIGH DOCKER01-003 in data/qa_runner_baseline_595e72f_fp_regression.json (introduced in 2fbae5e) CRITICAL I01-003 in data/qa_runner_baseline_595e72f_fp_regression.json (introduced in 2fbae5e) HIGH CWE-129-ALL-004 in data/qa_runner_baseline_latest_fp_regression.json (introduced in 2fbae5e) HIGH CWE-261-ALL-004 in data/qa_runner_baseline_latest_fp_regression.json (introduced in 2fbae5e) HIGH CWE-287-ALL-003 in data/qa_runner_baseline_latest_fp_regression.json (introduced in 2fbae5e) HIGH CWE-494-ALL-001 in data/qa_runner_baseline_latest_fp_regression.json (introduced in 2fbae5e) HIGH CWE-506-ALL-003 in data/qa_runner_baseline_latest_fp_regression.json (introduced in 2fbae5e) HIGH CWE-676-ALL-006 in data/qa_runner_baseline_latest_fp_regression.json (introduced in 2fbae5e) HIGH CWE-80-ALL-003 in data/qa_runner_baseline_latest_fp_regression.json (introduced in 2fbae5e) HIGH DOCKER01-003 in data/qa_runner_baseline_latest_fp_regression.json (introduced in 2fbae5e) HIGH H23 in data/qa_runner_baseline_595e72f_fp_regression.json (introduced in 2fbae5e) HIGH CWE-129-ALL-004 in data/qa_runner_baseline_987ddaf_fp_regression.json (introduced in a7d7d45) HIGH CWE-261-ALL-004 in data/qa_runner_baseline_987ddaf_fp_regression.json (introduced in a7d7d45) HIGH CWE-287-ALL-003 in data/qa_runner_baseline_987ddaf_fp_regression.json (introduced in a7d7d45) HIGH CWE-394-ALL-001 in data/qa_runner_baseline_987ddaf_fp_regression.json (introduced in a7d7d45) HIGH CWE-494-ALL-001 in data/qa_runner_baseline_987ddaf_fp_regression.json (introduced in a7d7d45) HIGH CWE-506-ALL-003 in data/qa_runner_baseline_987ddaf_fp_regression.json (introduced in a7d7d45) HIGH CWE-676-ALL-006 in data/qa_runner_baseline_987ddaf_fp_regression.json (introduced in a7d7d45) HIGH CWE-80-ALL-003 in data/qa_runner_baseline_987ddaf_fp_regression.json (introduced in a7d7d45) CRITICAL CWE-89-001 in data/qa_runner_baseline_987ddaf_fp_regression.json (introduced in a7d7d45) HIGH CWE-89-ALL-005 in data/qa_runner_baseline_987ddaf_fp_regression.json (introduced in a7d7d45) HIGH DOCKER01-003 in data/qa_runner_baseline_987ddaf_fp_regression.json (introduced in a7d7d45) CRITICAL I01-003 in data/qa_runner_baseline_987ddaf_fp_regression.json (introduced in a7d7d45) HIGH H23 in data/qa_runner_baseline_987ddaf_fp_regression.json (introduced in a7d7d45) HIGH CWE-129-ALL-004 in data/qa_runner_baseline_6c73343_fp_regression.json (introduced in 36901d4) HIGH CWE-261-ALL-004 in data/qa_runner_baseline_6c73343_fp_regression.json (introduced in 36901d4) HIGH CWE-287-ALL-003 in data/qa_runner_baseline_6c73343_fp_regression.json (introduced in 36901d4) HIGH CWE-394-ALL-001 in data/qa_runner_baseline_6c73343_fp_regression.json (introduced in 36901d4) HIGH CWE-494-ALL-001 in data/qa_runner_baseline_6c73343_fp_regression.json (introduced in 36901d4) HIGH CWE-506-ALL-003 in data/qa_runner_baseline_6c73343_fp_regression.json (introduced in 36901d4) HIGH CWE-676-ALL-006 in data/qa_runner_baseline_6c73343_fp_regression.json (introduced in 36901d4) HIGH CWE-80-ALL-003 in data/qa_runner_baseline_6c73343_fp_regression.json (introduced in 36901d4) CRITICAL CWE-89-001 in data/qa_runner_baseline_6c73343_fp_regression.json (introduced in 36901d4) HIGH CWE-89-ALL-005 in data/qa_runner_baseline_6c73343_fp_regression.json (introduced in 36901d4) HIGH DOCKER01-003 in data/qa_runner_baseline_6c73343_fp_regression.json (introduced in 36901d4) CRITICAL I01-003 in data/qa_runner_baseline_6c73343_fp_regression.json (introduced in 36901d4) HIGH H23 in data/qa_runner_baseline_6c73343_fp_regression.json (introduced in 36901d4) This commit did not change the file, so ShipShadow did not re-scan it and the finding still stands. Resolve it by fixing the file - the next run that changes it will re-scan and clear the finding - or, if it is a confirmed false positive, adjudicate it in the installation FP registry or reproduce a reviewed content-bound override with a fresh scan.