ShipShadow proof

hisopo/siteshadow-product

Repository

hisopo/siteshadow-product

Head SHA

77811a87c5541f9737bcdb158ef7f042d911692f

Branch

prod

Status

completed

Conclusion

failure

Run

run_7f0ce1b4b81f323df5c1238e

Gate Results

Gate	Conclusion	Summary
ShipShadow / Policy Gate	success	No blocked workflow or release-evidence policy violations were found.
ShipShadow / Publish Gate	failure	Publication is blocked by: ShipShadow / Security Gate, ShipShadow / Secret Gate.
ShipShadow / Secret Gate	failure	HIGH env-secret in workers/src/security/reportCalibration.ts: Potential env-secret secret material
ShipShadow / Security Gate	failure	64 blocking findings from an earlier commit on this repository have not been resolved: HIGH BLAZOR04-004 in data/qa_runner_baseline_16a3412_dedicated_blazor_rule_bench_01.json (introduced in 13772c5) HIGH CWE-532-ALL-001 in data/qa_runner_baseline_16a3412_fp_regression.json (introduced in 13772c5) HIGH CLOUD01-003 in data/qa_runner_baseline_16a3412_iac_config_bench_01.json (introduced in 13772c5) HIGH CLOUD01-004 in data/qa_runner_baseline_16a3412_iac_config_bench_01.json (introduced in 13772c5) HIGH CWE-382-ALL-004 in data/qa_runner_baseline_16a3412_js_real_bench_01_combined.json (introduced in 13772c5) CRITICAL I01-015 in data/qa_runner_baseline_16a3412_js_real_bench_01_combined.json (introduced in 13772c5) HIGH CWE-83-ALL-002 in data/qa_runner_baseline_16a3412_ossf_cve_js_bench_01.json (introduced in 13772c5) HIGH CWE-114-ALL-001 in data/qa_runner_baseline_16a3412_py_real_bench_01_combined.json (introduced in 13772c5) HIGH CWE-676-ALL-006 in data/qa_runner_baseline_16a3412_py_real_bench_01_combined.json (introduced in 13772c5) HIGH BLAZOR04-004 in data/qa_runner_baseline_latest_dedicated_blazor_rule_bench_01.json (introduced in 13772c5) HIGH CLOUD01-003 in data/qa_runner_baseline_latest_iac_config_bench_01.json (introduced in 13772c5) HIGH CLOUD01-004 in data/qa_runner_baseline_latest_iac_config_bench_01.json (introduced in 13772c5) HIGH CWE-382-ALL-004 in data/qa_runner_baseline_latest_js_real_bench_01_combined.json (introduced in 13772c5) HIGH CWE-83-ALL-002 in data/qa_runner_baseline_latest_ossf_cve_js_bench_01.json (introduced in 13772c5) HIGH CWE-114-ALL-001 in data/qa_runner_baseline_latest_py_real_bench_01_combined.json (introduced in 13772c5) HIGH CWE-676-ALL-006 in data/qa_runner_baseline_latest_py_real_bench_01_combined.json (introduced in 13772c5) HIGH CWE-129-ALL-004 in data/qa_runner_baseline_595e72f_fp_regression.json (introduced in 2fbae5e) HIGH CWE-261-ALL-004 in data/qa_runner_baseline_595e72f_fp_regression.json (introduced in 2fbae5e) HIGH CWE-287-ALL-003 in data/qa_runner_baseline_595e72f_fp_regression.json (introduced in 2fbae5e) HIGH CWE-394-ALL-001 in data/qa_runner_baseline_595e72f_fp_regression.json (introduced in 2fbae5e) HIGH CWE-494-ALL-001 in data/qa_runner_baseline_595e72f_fp_regression.json (introduced in 2fbae5e) HIGH CWE-506-ALL-003 in data/qa_runner_baseline_595e72f_fp_regression.json (introduced in 2fbae5e) HIGH CWE-676-ALL-006 in data/qa_runner_baseline_595e72f_fp_regression.json (introduced in 2fbae5e) HIGH CWE-80-ALL-003 in data/qa_runner_baseline_595e72f_fp_regression.json (introduced in 2fbae5e) CRITICAL CWE-89-001 in data/qa_runner_baseline_595e72f_fp_regression.json (introduced in 2fbae5e) HIGH CWE-89-ALL-005 in data/qa_runner_baseline_595e72f_fp_regression.json (introduced in 2fbae5e) HIGH DOCKER01-003 in data/qa_runner_baseline_595e72f_fp_regression.json (introduced in 2fbae5e) CRITICAL I01-003 in data/qa_runner_baseline_595e72f_fp_regression.json (introduced in 2fbae5e) HIGH CWE-129-ALL-004 in data/qa_runner_baseline_latest_fp_regression.json (introduced in 2fbae5e) HIGH CWE-261-ALL-004 in data/qa_runner_baseline_latest_fp_regression.json (introduced in 2fbae5e) HIGH CWE-287-ALL-003 in data/qa_runner_baseline_latest_fp_regression.json (introduced in 2fbae5e) HIGH CWE-394-ALL-001 in data/qa_runner_baseline_latest_fp_regression.json (introduced in 2fbae5e) HIGH CWE-494-ALL-001 in data/qa_runner_baseline_latest_fp_regression.json (introduced in 2fbae5e) HIGH CWE-506-ALL-003 in data/qa_runner_baseline_latest_fp_regression.json (introduced in 2fbae5e) HIGH CWE-676-ALL-006 in data/qa_runner_baseline_latest_fp_regression.json (introduced in 2fbae5e) HIGH CWE-80-ALL-003 in data/qa_runner_baseline_latest_fp_regression.json (introduced in 2fbae5e) HIGH DOCKER01-003 in data/qa_runner_baseline_latest_fp_regression.json (introduced in 2fbae5e) HIGH H23 in data/qa_runner_baseline_595e72f_fp_regression.json (introduced in 2fbae5e) HIGH CWE-129-ALL-004 in data/qa_runner_baseline_987ddaf_fp_regression.json (introduced in a7d7d45) HIGH CWE-261-ALL-004 in data/qa_runner_baseline_987ddaf_fp_regression.json (introduced in a7d7d45) HIGH CWE-287-ALL-003 in data/qa_runner_baseline_987ddaf_fp_regression.json (introduced in a7d7d45) HIGH CWE-394-ALL-001 in data/qa_runner_baseline_987ddaf_fp_regression.json (introduced in a7d7d45) HIGH CWE-494-ALL-001 in data/qa_runner_baseline_987ddaf_fp_regression.json (introduced in a7d7d45) HIGH CWE-506-ALL-003 in data/qa_runner_baseline_987ddaf_fp_regression.json (introduced in a7d7d45) HIGH CWE-676-ALL-006 in data/qa_runner_baseline_987ddaf_fp_regression.json (introduced in a7d7d45) HIGH CWE-80-ALL-003 in data/qa_runner_baseline_987ddaf_fp_regression.json (introduced in a7d7d45) CRITICAL CWE-89-001 in data/qa_runner_baseline_987ddaf_fp_regression.json (introduced in a7d7d45) HIGH CWE-89-ALL-005 in data/qa_runner_baseline_987ddaf_fp_regression.json (introduced in a7d7d45) HIGH DOCKER01-003 in data/qa_runner_baseline_987ddaf_fp_regression.json (introduced in a7d7d45) CRITICAL I01-003 in data/qa_runner_baseline_987ddaf_fp_regression.json (introduced in a7d7d45) HIGH H23 in data/qa_runner_baseline_987ddaf_fp_regression.json (introduced in a7d7d45) HIGH CWE-129-ALL-004 in data/qa_runner_baseline_6c73343_fp_regression.json (introduced in 36901d4) HIGH CWE-261-ALL-004 in data/qa_runner_baseline_6c73343_fp_regression.json (introduced in 36901d4) HIGH CWE-287-ALL-003 in data/qa_runner_baseline_6c73343_fp_regression.json (introduced in 36901d4) HIGH CWE-394-ALL-001 in data/qa_runner_baseline_6c73343_fp_regression.json (introduced in 36901d4) HIGH CWE-494-ALL-001 in data/qa_runner_baseline_6c73343_fp_regression.json (introduced in 36901d4) HIGH CWE-506-ALL-003 in data/qa_runner_baseline_6c73343_fp_regression.json (introduced in 36901d4) HIGH CWE-676-ALL-006 in data/qa_runner_baseline_6c73343_fp_regression.json (introduced in 36901d4) HIGH CWE-80-ALL-003 in data/qa_runner_baseline_6c73343_fp_regression.json (introduced in 36901d4) CRITICAL CWE-89-001 in data/qa_runner_baseline_6c73343_fp_regression.json (introduced in 36901d4) HIGH CWE-89-ALL-005 in data/qa_runner_baseline_6c73343_fp_regression.json (introduced in 36901d4) HIGH DOCKER01-003 in data/qa_runner_baseline_6c73343_fp_regression.json (introduced in 36901d4) CRITICAL I01-003 in data/qa_runner_baseline_6c73343_fp_regression.json (introduced in 36901d4) HIGH H23 in data/qa_runner_baseline_6c73343_fp_regression.json (introduced in 36901d4) This commit did not change the file, so ShipShadow did not re-scan it and the finding still stands. Resolve it by fixing the file - the next run that changes it will re-scan and clear the finding - or, if it is a confirmed false positive, adjudicate it in the installation FP registry or reproduce a reviewed content-bound override with a fresh scan.