⚠️ This snapshot is over 30 days old — treat the grade as stale until the next refresh. Re-scan locally to verify.
Trust Card · Static snapshot
cloudflare__mcp-server-cloudflare U
Ungraded — insufficient static coverage · 15 findings (3 critical) · scope excessive · Not ranked: insufficient static coverage.
Scanned 2026-10-19 · engine v0.1.3 (8 regex rules, OWASP-mapped) · upstream cloudflare/mcp-server-cloudflare @ e4cf085 (2026-10-08)
Score breakdown
No numeric score or breakdown: insufficient static coverage. Findings remain actionable; absence of findings is not evidence of safety.
Insufficient static coverage: Unsupported source present. Findings remain actionable; absence of findings is not evidence of safety.
Coverage: limited
Static-heuristic scope: 293 analyzed / 484 discovered files; 42 unsupported source files; 192 excluded; 0 read errors; 0 truncations. This is not a semantic coverage percentage or proof of safety.
- Unsupported source present
- Coverage describes the files read and regex rules applied, not semantic, runtime, or dependency coverage.
- Supported code is JavaScript, TypeScript, and Python; JSON/YAML receive only the credential rule.
- Skill instructions and other prose are not code-analyzed; declared controls are not verified enforcement.
- Ignored directories, declarations, and non-implementation assets are outside rule scope.
File coverage, applied rules and scan limits
{
"mode": "static-heuristic",
"status": "limited",
"reasons": [
"Unsupported source present"
],
"limitations": [
"Coverage describes the files read and regex rules applied, not semantic, runtime, or dependency coverage.",
"Supported code is JavaScript, TypeScript, and Python; JSON/YAML receive only the credential rule.",
"Skill instructions and other prose are not code-analyzed; declared controls are not verified enforcement.",
"Ignored directories, declarations, and non-implementation assets are outside rule scope."
],
"discoveredFiles": 484,
"analyzedFiles": [
{
"path": ".changeset/config.json",
"scope": "data",
"bytes": 325,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": ".eslintrc.cjs",
"scope": "code",
"bytes": 223,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": ".github/actions/setup/action.yml",
"scope": "data",
"bytes": 636,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": ".github/workflows/branches.yml",
"scope": "data",
"bytes": 809,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": ".github/workflows/main.yml",
"scope": "data",
"bytes": 885,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": ".github/workflows/release.yml",
"scope": "data",
"bytes": 2056,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": ".github/workflows/semgrep.yml",
"scope": "data",
"bytes": 828,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": ".prettierrc.cjs",
"scope": "code",
"bytes": 1069,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": ".syncpackrc.cjs",
"scope": "code",
"bytes": 2141,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": ".vscode/extensions.json",
"scope": "data",
"bytes": 471,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": ".vscode/launch.json",
"scope": "data",
"bytes": 953,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": ".vscode/settings.json",
"scope": "data",
"bytes": 717,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": ".vscode/tasks.json",
"scope": "data",
"bytes": 350,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": "apps/ai-gateway/.eslintrc.cjs",
"scope": "code",
"bytes": 127,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/ai-gateway/package.json",
"scope": "data",
"bytes": 679,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": "apps/ai-gateway/src/ai-gateway.app.ts",
"scope": "code",
"bytes": 1129,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/ai-gateway/src/ai-gateway.context.ts",
"scope": "code",
"bytes": 383,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/ai-gateway/src/ai-gateway.spec.ts",
"scope": "code",
"bytes": 2268,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/ai-gateway/src/auth-integration.spec.ts",
"scope": "code",
"bytes": 7049,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/ai-gateway/src/tools/ai-gateway.tools.ts",
"scope": "code",
"bytes": 4660,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/ai-gateway/src/types.ts",
"scope": "code",
"bytes": 1023,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/ai-gateway/tsconfig.json",
"scope": "data",
"bytes": 118,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": "apps/ai-gateway/vitest.config.ts",
"scope": "code",
"bytes": 623,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/auditlogs/.eslintrc.cjs",
"scope": "code",
"bytes": 127,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/auditlogs/package.json",
"scope": "data",
"bytes": 598,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": "apps/auditlogs/src/auditlogs.app.ts",
"scope": "code",
"bytes": 1422,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/auditlogs/src/auditlogs.context.ts",
"scope": "code",
"bytes": 416,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/auditlogs/src/auditlogs.spec.ts",
"scope": "code",
"bytes": 4094,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/auditlogs/src/tools/auditlogs.tools.ts",
"scope": "code",
"bytes": 10481,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/auditlogs/tsconfig.json",
"scope": "data",
"bytes": 147,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": "apps/auditlogs/vitest.config.ts",
"scope": "code",
"bytes": 682,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/autorag/.eslintrc.cjs",
"scope": "code",
"bytes": 127,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/autorag/package.json",
"scope": "data",
"bytes": 599,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": "apps/autorag/src/autorag.app.ts",
"scope": "code",
"bytes": 1828,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/autorag/src/autorag.context.ts",
"scope": "code",
"bytes": 383,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/autorag/src/autorag.spec.ts",
"scope": "code",
"bytes": 465,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/autorag/src/tools/autorag.tools.ts",
"scope": "code",
"bytes": 3972,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/autorag/src/types.ts",
"scope": "code",
"bytes": 179,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/autorag/tsconfig.json",
"scope": "data",
"bytes": 118,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": "apps/autorag/vitest.config.ts",
"scope": "code",
"bytes": 620,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/browser-rendering/.eslintrc.cjs",
"scope": "code",
"bytes": 127,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/browser-rendering/package.json",
"scope": "data",
"bytes": 643,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": "apps/browser-rendering/src/browser.app.ts",
"scope": "code",
"bytes": 752,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/browser-rendering/src/browser.context.ts",
"scope": "code",
"bytes": 383,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/browser-rendering/src/browser.spec.ts",
"scope": "code",
"bytes": 726,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/browser-rendering/src/browser.tools.spec.ts",
"scope": "code",
"bytes": 6211,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/browser-rendering/src/tools/browser.tools.ts",
"scope": "code",
"bytes": 15501,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/browser-rendering/tsconfig.json",
"scope": "data",
"bytes": 118,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": "apps/browser-rendering/vitest.config.ts",
"scope": "code",
"bytes": 680,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/cloudflare-blog/.eslintrc.cjs",
"scope": "code",
"bytes": 127,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/cloudflare-blog/package.json",
"scope": "data",
"bytes": 608,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": "apps/cloudflare-blog/src/cloudflare-blog.app.ts",
"scope": "code",
"bytes": 430,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/cloudflare-blog/src/cloudflare-blog.context.ts",
"scope": "code",
"bytes": 385,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/cloudflare-blog/src/cloudflare-blog.spec.ts",
"scope": "code",
"bytes": 445,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/cloudflare-blog/src/tools/blog.tools.ts",
"scope": "code",
"bytes": 7178,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/cloudflare-blog/src/types/blog.types.ts",
"scope": "code",
"bytes": 1076,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/cloudflare-blog/tsconfig.json",
"scope": "data",
"bytes": 102,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": "apps/cloudflare-blog/vitest.config.ts",
"scope": "code",
"bytes": 368,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/cloudflare-one-casb/.eslintrc.cjs",
"scope": "code",
"bytes": 127,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/cloudflare-one-casb/package.json",
"scope": "data",
"bytes": 630,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": "apps/cloudflare-one-casb/src/api/cf1-integration.api.ts",
"scope": "code",
"bytes": 5509,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/cloudflare-one-casb/src/cf1-casb.app.ts",
"scope": "code",
"bytes": 768,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/cloudflare-one-casb/src/cf1-casb.context.ts",
"scope": "code",
"bytes": 391,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/cloudflare-one-casb/src/cf1-casb.spec.ts",
"scope": "code",
"bytes": 730,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/cloudflare-one-casb/src/tools/integrations.tools.ts",
"scope": "code",
"bytes": 6595,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/cloudflare-one-casb/src/types/cf1-integrations.types.ts",
"scope": "code",
"bytes": 3056,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/cloudflare-one-casb/tsconfig.json",
"scope": "data",
"bytes": 118,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": "apps/cloudflare-one-casb/vitest.config.ts",
"scope": "code",
"bytes": 621,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/demo-day/.eslintrc.cjs",
"scope": "code",
"bytes": 190,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/demo-day/frontend/script.js",
"scope": "code",
"bytes": 19232,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/demo-day/package.json",
"scope": "data",
"bytes": 561,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": "apps/demo-day/src/demo-day.app.ts",
"scope": "code",
"bytes": 1470,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/demo-day/src/demo-day.spec.ts",
"scope": "code",
"bytes": 428,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/demo-day/tsconfig.json",
"scope": "data",
"bytes": 247,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": "apps/demo-day/vitest.config.ts",
"scope": "code",
"bytes": 281,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/demo-day/wrangler.json",
"scope": "data",
"bytes": 994,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": "apps/dex-analysis/.eslintrc.cjs",
"scope": "code",
"bytes": 127,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/dex-analysis/package.json",
"scope": "data",
"bytes": 671,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": "apps/dex-analysis/src/dex-analysis.app.ts",
"scope": "code",
"bytes": 832,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/dex-analysis/src/dex-analysis.context.ts",
"scope": "code",
"bytes": 499,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/dex-analysis/src/dex-analysis.spec.ts",
"scope": "code",
"bytes": 761,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/dex-analysis/src/tools/dex-analysis.tools.ts",
"scope": "code",
"bytes": 21193,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/dex-analysis/src/warp_diag_reader.ts",
"scope": "code",
"bytes": 3242,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/dex-analysis/tsconfig.json",
"scope": "data",
"bytes": 118,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": "apps/dex-analysis/vitest.config.ts",
"scope": "code",
"bytes": 625,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/dns-analytics/.eslintrc.cjs",
"scope": "code",
"bytes": 127,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/dns-analytics/package.json",
"scope": "data",
"bytes": 608,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": "apps/dns-analytics/src/dns-analytics.app.ts",
"scope": "code",
"bytes": 1510,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/dns-analytics/src/dns-analytics.context.ts",
"scope": "code",
"bytes": 491,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/dns-analytics/src/dns-analytics.spec.ts",
"scope": "code",
"bytes": 2258,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/dns-analytics/src/tools/dex-analytics.tools.ts",
"scope": "code",
"bytes": 3459,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/dns-analytics/tsconfig.json",
"scope": "data",
"bytes": 149,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": "apps/dns-analytics/vitest.config.ts",
"scope": "code",
"bytes": 570,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/docs-ai-search/.eslintrc.cjs",
"scope": "code",
"bytes": 127,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/docs-ai-search/package.json",
"scope": "data",
"bytes": 566,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": "apps/docs-ai-search/src/docs-ai-search.app.ts",
"scope": "code",
"bytes": 755,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/docs-ai-search/src/docs-ai-search.context.ts",
"scope": "code",
"bytes": 312,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/docs-ai-search/src/docs-ai-search.spec.ts",
"scope": "code",
"bytes": 508,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/docs-ai-search/tsconfig.json",
"scope": "data",
"bytes": 102,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": "apps/docs-ai-search/vitest.config.ts",
"scope": "code",
"bytes": 627,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/graphql/.eslintrc.cjs",
"scope": "code",
"bytes": 127,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/graphql/package.json",
"scope": "data",
"bytes": 631,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": "apps/graphql/src/graphql.app.ts",
"scope": "code",
"bytes": 1359,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/graphql/src/graphql.context.ts",
"scope": "code",
"bytes": 491,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/graphql/src/graphql.spec.ts",
"scope": "code",
"bytes": 9632,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/graphql/src/tools/graphql.tools.ts",
"scope": "code",
"bytes": 34819,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/graphql/tsconfig.json",
"scope": "data",
"bytes": 118,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": "apps/graphql/vitest.config.ts",
"scope": "code",
"bytes": 679,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/logpush/.eslintrc.cjs",
"scope": "code",
"bytes": 127,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/logpush/package.json",
"scope": "data",
"bytes": 577,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": "apps/logpush/src/logpush.app.ts",
"scope": "code",
"bytes": 1261,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/logpush/src/logpush.context.ts",
"scope": "code",
"bytes": 383,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/logpush/src/logpush.spec.ts",
"scope": "code",
"bytes": 2109,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/logpush/src/tools/logpush.tools.ts",
"scope": "code",
"bytes": 3901,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/logpush/tsconfig.json",
"scope": "data",
"bytes": 118,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": "apps/logpush/vitest.config.ts",
"scope": "code",
"bytes": 620,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/radar/.eslintrc.cjs",
"scope": "code",
"bytes": 127,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/radar/package.json",
"scope": "data",
"bytes": 622,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": "apps/radar/src/radar.app.ts",
"scope": "code",
"bytes": 1952,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/radar/src/radar.context.ts",
"scope": "code",
"bytes": 5024,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/radar/src/radar.spec.ts",
"scope": "code",
"bytes": 468,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/radar/src/tools/radar.tools.ts",
"scope": "code",
"bytes": 79453,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/radar/src/tools/url-scanner.tools.ts",
"scope": "code",
"bytes": 7855,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/radar/src/types/radar.ts",
"scope": "code",
"bytes": 34299,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/radar/src/types/url-scanner.ts",
"scope": "code",
"bytes": 1169,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/radar/src/utils.ts",
"scope": "code",
"bytes": 873,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/radar/tsconfig.json",
"scope": "data",
"bytes": 118,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": "apps/radar/vitest.config.ts",
"scope": "code",
"bytes": 618,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/sandbox-container/.eslintrc.cjs",
"scope": "code",
"bytes": 127,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/sandbox-container/evals/exec.eval.ts",
"scope": "code",
"bytes": 1516,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/sandbox-container/evals/files.eval.ts",
"scope": "code",
"bytes": 2681,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/sandbox-container/evals/initialize.eval.ts",
"scope": "code",
"bytes": 775,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/sandbox-container/evals/utils.ts",
"scope": "code",
"bytes": 512,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/sandbox-container/package.json",
"scope": "data",
"bytes": 1355,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": "apps/sandbox-container/server/container-tools.ts",
"scope": "code",
"bytes": 4508,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/sandbox-container/server/containerManager.ts",
"scope": "code",
"bytes": 1947,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/sandbox-container/server/metrics.ts",
"scope": "code",
"bytes": 400,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/sandbox-container/server/prompts.ts",
"scope": "code",
"bytes": 2902,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/sandbox-container/server/sandbox.server.app.ts",
"scope": "code",
"bytes": 951,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/sandbox-container/server/sandbox.server.context.ts",
"scope": "code",
"bytes": 748,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/sandbox-container/server/sandbox.server.spec.ts",
"scope": "code",
"bytes": 851,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/sandbox-container/server/sandboxTemplate.ts",
"scope": "code",
"bytes": 1597,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/sandbox-container/server/userContainer.ts",
"scope": "code",
"bytes": 15537,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/sandbox-container/server/utils.spec.ts",
"scope": "code",
"bytes": 971,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/sandbox-container/server/utils.ts",
"scope": "code",
"bytes": 690,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/sandbox-container/shared/schema.ts",
"scope": "code",
"bytes": 553,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/sandbox-container/tsconfig.json",
"scope": "data",
"bytes": 146,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": "apps/sandbox-container/vitest.config.evals.ts",
"scope": "code",
"bytes": 361,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/sandbox-container/vitest.config.ts",
"scope": "code",
"bytes": 1325,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/stack-mcp/.eslintrc.cjs",
"scope": "code",
"bytes": 127,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/stack-mcp/package.json",
"scope": "data",
"bytes": 602,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": "apps/stack-mcp/src/stack-mcp.app.ts",
"scope": "code",
"bytes": 949,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/stack-mcp/src/stack-mcp.context.ts",
"scope": "code",
"bytes": 1762,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/stack-mcp/src/stack-mcp.spec.ts",
"scope": "code",
"bytes": 482,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/stack-mcp/src/tools/stack.tools.ts",
"scope": "code",
"bytes": 5171,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/stack-mcp/src/types/stack.types.ts",
"scope": "code",
"bytes": 3503,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/stack-mcp/tsconfig.json",
"scope": "data",
"bytes": 102,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": "apps/stack-mcp/vitest.config.ts",
"scope": "code",
"bytes": 362,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/workers-bindings/.eslintrc.cjs",
"scope": "code",
"bytes": 127,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/workers-bindings/evals/hyperdrive.eval.ts",
"scope": "code",
"bytes": 1715,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/workers-bindings/evals/kv_namespaces.eval.ts",
"scope": "code",
"bytes": 4305,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/workers-bindings/evals/utils.ts",
"scope": "code",
"bytes": 512,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/workers-bindings/package.json",
"scope": "data",
"bytes": 1435,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": "apps/workers-bindings/src/bindings.app.ts",
"scope": "code",
"bytes": 1908,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/workers-bindings/src/bindings.context.ts",
"scope": "code",
"bytes": 587,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/workers-bindings/src/bindings.spec.ts",
"scope": "code",
"bytes": 2337,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/workers-bindings/src/tools/d1.tools.ts",
"scope": "code",
"bytes": 5553,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/workers-bindings/src/tools/hyperdrive.tools.ts",
"scope": "code",
"bytes": 7581,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/workers-bindings/src/tools/kv_namespace.tools.ts",
"scope": "code",
"bytes": 6483,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/workers-bindings/src/tools/r2_bucket.tools.ts",
"scope": "code",
"bytes": 4411,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/workers-bindings/src/types/d1.types.ts",
"scope": "code",
"bytes": 549,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/workers-bindings/src/types/hyperdrive.types.ts",
"scope": "code",
"bytes": 3550,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/workers-bindings/src/types/kv_namespace.types.ts",
"scope": "code",
"bytes": 2379,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/workers-bindings/src/types/r2_bucket.types.ts",
"scope": "code",
"bytes": 14774,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/workers-bindings/tsconfig.json",
"scope": "data",
"bytes": 108,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": "apps/workers-bindings/vitest.config.evals.ts",
"scope": "code",
"bytes": 361,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/workers-bindings/vitest.config.ts",
"scope": "code",
"bytes": 621,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/workers-builds/.eslintrc.cjs",
"scope": "code",
"bytes": 127,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/workers-builds/package.json",
"scope": "data",
"bytes": 633,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": "apps/workers-builds/src/api/workers-builds.api.ts",
"scope": "code",
"bytes": 1740,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/workers-builds/src/tools/workers-builds.tools.ts",
"scope": "code",
"bytes": 5099,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/workers-builds/src/types/workers-builds.types.ts",
"scope": "code",
"bytes": 2906,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/workers-builds/src/workers-builds.app.ts",
"scope": "code",
"bytes": 2349,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/workers-builds/src/workers-builds.context.ts",
"scope": "code",
"bytes": 491,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/workers-builds/src/workers-builds.spec.ts",
"scope": "code",
"bytes": 5073,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/workers-builds/tsconfig.json",
"scope": "data",
"bytes": 118,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": "apps/workers-builds/vite.config.mts",
"scope": "code",
"bytes": 178,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/workers-builds/vitest.config.ts",
"scope": "code",
"bytes": 627,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/workers-observability/.eslintrc.cjs",
"scope": "code",
"bytes": 127,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/workers-observability/package.json",
"scope": "data",
"bytes": 659,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": "apps/workers-observability/src/api/workers-observability.api.ts",
"scope": "code",
"bytes": 2500,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/workers-observability/src/tools/workers-observability.tools.ts",
"scope": "code",
"bytes": 8488,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/workers-observability/src/types/workers-logs.types.ts",
"scope": "code",
"bytes": 14909,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/workers-observability/src/workers-logs.types.spec.ts",
"scope": "code",
"bytes": 1816,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/workers-observability/src/workers-observability.app.ts",
"scope": "code",
"bytes": 2231,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/workers-observability/src/workers-observability.context.ts",
"scope": "code",
"bytes": 552,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/workers-observability/src/workers-observability.spec.ts",
"scope": "code",
"bytes": 2425,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "apps/workers-observability/tsconfig.json",
"scope": "data",
"bytes": 118,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": "apps/workers-observability/vitest.config.ts",
"scope": "code",
"bytes": 634,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "package.json",
"scope": "data",
"bytes": 1575,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": "packages/eslint-config/default.cjs",
"scope": "code",
"bytes": 1733,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/eslint-config/package.json",
"scope": "data",
"bytes": 622,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": "packages/eval-tools/package.json",
"scope": "data",
"bytes": 601,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": "packages/eval-tools/src/runTask.ts",
"scope": "code",
"bytes": 2391,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/eval-tools/src/scorers.ts",
"scope": "code",
"bytes": 2529,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/eval-tools/src/test-models.ts",
"scope": "code",
"bytes": 1770,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/eval-tools/tsconfig.json",
"scope": "data",
"bytes": 158,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": "packages/eval-tools/wrangler.json",
"scope": "data",
"bytes": 229,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": "packages/mcp-common/.eslintrc.cjs",
"scope": "code",
"bytes": 127,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/mcp-common/package.json",
"scope": "data",
"bytes": 966,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": "packages/mcp-common/src/__mocks__/cloudflare.ts",
"scope": "code",
"bytes": 492,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/mcp-common/src/account-manager.spec.ts",
"scope": "code",
"bytes": 4290,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/mcp-common/src/account-manager.ts",
"scope": "code",
"bytes": 4967,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/mcp-common/src/account-tool.spec.ts",
"scope": "code",
"bytes": 3255,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/mcp-common/src/account-tool.ts",
"scope": "code",
"bytes": 1992,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/mcp-common/src/api-token-mode.spec.ts",
"scope": "code",
"bytes": 10943,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/mcp-common/src/api-token-mode.ts",
"scope": "code",
"bytes": 6172,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/mcp-common/src/auth-props.ts",
"scope": "code",
"bytes": 953,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/mcp-common/src/cloudflare-api.spec.ts",
"scope": "code",
"bytes": 4349,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/mcp-common/src/cloudflare-api.ts",
"scope": "code",
"bytes": 2038,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/mcp-common/src/cloudflare-auth.spec.ts",
"scope": "code",
"bytes": 9091,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/mcp-common/src/cloudflare-auth.ts",
"scope": "code",
"bytes": 6406,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/mcp-common/src/cloudflare-oauth-handler.spec.ts",
"scope": "code",
"bytes": 20439,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/mcp-common/src/cloudflare-oauth-handler.ts",
"scope": "code",
"bytes": 21991,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/mcp-common/src/config.ts",
"scope": "code",
"bytes": 273,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/mcp-common/src/durable-kv-store.ts",
"scope": "code",
"bytes": 3338,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/mcp-common/src/format.spec.ts",
"scope": "code",
"bytes": 3584,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/mcp-common/src/format.ts",
"scope": "code",
"bytes": 908,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/mcp-common/src/index.ts",
"scope": "code",
"bytes": 360,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/mcp-common/src/mcp-app.ts",
"scope": "code",
"bytes": 3775,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/mcp-common/src/mcp-error.ts",
"scope": "code",
"bytes": 1944,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/mcp-common/src/oauth-router.spec.ts",
"scope": "code",
"bytes": 5815,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/mcp-common/src/oauth-router.ts",
"scope": "code",
"bytes": 3845,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/mcp-common/src/pagination.ts",
"scope": "code",
"bytes": 282,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/mcp-common/src/poll.ts",
"scope": "code",
"bytes": 834,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/mcp-common/src/registration-context.ts",
"scope": "code",
"bytes": 5365,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/mcp-common/src/request-context.ts",
"scope": "code",
"bytes": 1056,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/mcp-common/src/scopes.ts",
"scope": "code",
"bytes": 247,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/mcp-common/src/sentry.spec.ts",
"scope": "code",
"bytes": 3883,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/mcp-common/src/sentry.ts",
"scope": "code",
"bytes": 4228,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/mcp-common/src/server.spec.ts",
"scope": "code",
"bytes": 18515,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/mcp-common/src/server.ts",
"scope": "code",
"bytes": 9261,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/mcp-common/src/shared-prompts/docs-ai-search.prompts.ts",
"scope": "code",
"bytes": 832,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/mcp-common/src/shared-tools/docs-ai-search.tools.spec.ts",
"scope": "code",
"bytes": 4261,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/mcp-common/src/shared-tools/docs-ai-search.tools.ts",
"scope": "code",
"bytes": 6024,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/mcp-common/src/shared-tools/worker.tools.ts",
"scope": "code",
"bytes": 4617,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/mcp-common/src/shared-tools/workers.api.ts",
"scope": "code",
"bytes": 1634,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/mcp-common/src/shared-tools/workers.types.ts",
"scope": "code",
"bytes": 442,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/mcp-common/src/shared-tools/zone.api.ts",
"scope": "code",
"bytes": 1182,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/mcp-common/src/shared-tools/zone.tools.ts",
"scope": "code",
"bytes": 3044,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/mcp-common/src/test/msw-server.ts",
"scope": "code",
"bytes": 340,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/mcp-common/src/test/msw-setup.ts",
"scope": "code",
"bytes": 376,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/mcp-common/src/test/stateless-app.ts",
"scope": "code",
"bytes": 8884,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/mcp-common/src/transport-migration.ts",
"scope": "code",
"bytes": 1401,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/mcp-common/src/user-agent.spec.ts",
"scope": "code",
"bytes": 2356,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/mcp-common/src/user-agent.ts",
"scope": "code",
"bytes": 1625,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/mcp-common/src/utils.spec.ts",
"scope": "code",
"bytes": 1108,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/mcp-common/src/utils.ts",
"scope": "code",
"bytes": 1042,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/mcp-common/src/v4-api.ts",
"scope": "code",
"bytes": 1579,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/mcp-common/src/workers-oauth-utils.spec.ts",
"scope": "code",
"bytes": 10893,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/mcp-common/src/workers-oauth-utils.ts",
"scope": "code",
"bytes": 24538,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/mcp-common/tests/utils/cloudflare-mock.ts",
"scope": "code",
"bytes": 463,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/mcp-common/tsconfig.json",
"scope": "data",
"bytes": 210,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": "packages/mcp-common/vitest.config.ts",
"scope": "code",
"bytes": 910,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/mcp-observability/package.json",
"scope": "data",
"bytes": 428,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": "packages/mcp-observability/src/analytics-engine.ts",
"scope": "code",
"bytes": 4369,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/mcp-observability/src/index.ts",
"scope": "code",
"bytes": 61,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/mcp-observability/src/metrics.ts",
"scope": "code",
"bytes": 1964,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/mcp-observability/tsconfig.json",
"scope": "data",
"bytes": 131,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": "packages/tools/.eslintrc.cjs",
"scope": "code",
"bytes": 127,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/tools/package.json",
"scope": "data",
"bytes": 453,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": "packages/tools/src/bin/runx.ts",
"scope": "code",
"bytes": 583,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/tools/src/changesets.spec.ts",
"scope": "code",
"bytes": 2411,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/tools/src/changesets.ts",
"scope": "code",
"bytes": 1561,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/tools/src/cmd/deploy-published-packages.ts",
"scope": "code",
"bytes": 935,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/tools/src/proc.ts",
"scope": "code",
"bytes": 177,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/tools/src/test/fixtures/changesets/invalid-json/published-packages.json",
"scope": "data",
"bytes": 23,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": "packages/tools/src/test/fixtures/changesets/invalid-schema/published-packages.json",
"scope": "data",
"bytes": 50,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": "packages/tools/src/test/fixtures/changesets/valid/published-packages.json",
"scope": "data",
"bytes": 105,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": "packages/tools/src/test/setup.ts",
"scope": "code",
"bytes": 260,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/tools/src/tsconfig.ts",
"scope": "code",
"bytes": 1893,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/tools/tsconfig.json",
"scope": "data",
"bytes": 125,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": "packages/tools/vitest.config.ts",
"scope": "code",
"bytes": 165,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/typescript-config/package.json",
"scope": "data",
"bytes": 155,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": "packages/typescript-config/tools.json",
"scope": "data",
"bytes": 586,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": "packages/typescript-config/workers-lib.json",
"scope": "data",
"bytes": 316,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": "packages/typescript-config/workers.json",
"scope": "data",
"bytes": 756,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": "pnpm-lock.yaml",
"scope": "data",
"bytes": 329482,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": "pnpm-workspace.yaml",
"scope": "data",
"bytes": 435,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": "server.json",
"scope": "data",
"bytes": 1907,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": "tsconfig.json",
"scope": "data",
"bytes": 53,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": "turbo.json",
"scope": "data",
"bytes": 891,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": "vitest.config.ts",
"scope": "code",
"bytes": 333,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
}
],
"unsupportedSourceFiles": [
"apps/ai-gateway/.dev.vars.example",
"apps/ai-gateway/wrangler.jsonc",
"apps/auditlogs/.dev.vars.example",
"apps/auditlogs/wrangler.jsonc",
"apps/autorag/.dev.vars.example",
"apps/autorag/wrangler.jsonc",
"apps/browser-rendering/.dev.vars.example",
"apps/browser-rendering/wrangler.jsonc",
"apps/cloudflare-blog/wrangler.jsonc",
"apps/cloudflare-one-casb/.dev.vars.example",
"apps/cloudflare-one-casb/wrangler.jsonc",
"apps/demo-day/frontend/index.html",
"apps/dex-analysis/.dev.vars.example",
"apps/dex-analysis/wrangler.jsonc",
"apps/dns-analytics/.dev.vars.example",
"apps/dns-analytics/wrangler.jsonc",
"apps/docs-ai-search/wrangler.jsonc",
"apps/graphql/wrangler.jsonc",
"apps/logpush/.dev.vars.example",
"apps/logpush/wrangler.jsonc",
"apps/radar/.dev.vars.example",
"apps/radar/wrangler.jsonc",
"apps/sandbox-container/.dev.vars.example",
"apps/sandbox-container/wrangler.jsonc",
"apps/stack-mcp/wrangler.jsonc",
"apps/workers-bindings/.dev.vars.example",
"apps/workers-bindings/wrangler.jsonc",
"apps/workers-builds/.dev.vars.example",
"apps/workers-builds/wrangler.jsonc",
"apps/workers-observability/.dev.vars.example",
"apps/workers-observability/wrangler.jsonc",
"packages/tools/bin/run-changeset-new",
"packages/tools/bin/run-eslint-workers",
"packages/tools/bin/run-fix-deps",
"packages/tools/bin/run-tsc",
"packages/tools/bin/run-turbo",
"packages/tools/bin/run-vitest",
"packages/tools/bin/run-vitest-ci",
"packages/tools/bin/run-wrangler-deploy",
"packages/tools/bin/run-wrangler-types",
"packages/tools/bin/runx",
"packages/tools/src/test/fixtures/changesets/empty/.gitkeep"
],
"excludedFiles": [
{
"path": ".git",
"reason": "ignored-directory"
},
{
"path": ".changeset/README.md",
"reason": "outside-rule-scope"
},
{
"path": ".changeset/browser-run-kitesurf.md",
"reason": "outside-rule-scope"
},
{
"path": ".changeset/calm-actors-audit.md",
"reason": "outside-rule-scope"
},
{
"path": ".changeset/deprecate-ai-gateway-mcp.md",
"reason": "outside-rule-scope"
},
{
"path": ".changeset/deprecate-auditlogs-mcp.md",
"reason": "outside-rule-scope"
},
{
"path": ".changeset/deprecate-dns-analytics-mcp.md",
"reason": "outside-rule-scope"
},
{
"path": ".changeset/deprecate-logpush-mcp.md",
"reason": "outside-rule-scope"
},
{
"path": ".changeset/deprecate-workers-bindings-mcp.md",
"reason": "outside-rule-scope"
},
{
"path": ".changeset/deprecate-workers-builds-mcp.md",
"reason": "outside-rule-scope"
},
{
"path": ".changeset/deprecate-workers-observability-mcp.md",
"reason": "outside-rule-scope"
},
{
"path": ".changeset/direct-docs-ai-search.md",
"reason": "outside-rule-scope"
},
{
"path": ".changeset/observability-optional-outcome.md",
"reason": "outside-rule-scope"
},
{
"path": ".changeset/outbound-user-agent.md",
"reason": "outside-rule-scope"
},
{
"path": ".changeset/rename-code-mode-server.md",
"reason": "outside-rule-scope"
},
{
"path": ".changeset/sandbox-container-registry.md",
"reason": "outside-rule-scope"
},
{
"path": ".changeset/sandbox-durable-object-scheduling.md",
"reason": "outside-rule-scope"
},
{
"path": ".changeset/sandbox-exec-timeout.md",
"reason": "outside-rule-scope"
},
{
"path": ".changeset/sandbox-managed-image.md",
"reason": "outside-rule-scope"
},
{
"path": ".dockerignore",
"reason": "outside-rule-scope"
},
{
"path": ".editorconfig",
"reason": "outside-rule-scope"
},
{
"path": ".github/ISSUE_TEMPLATE/bug_report.md",
"reason": "outside-rule-scope"
},
{
"path": ".gitignore",
"reason": "outside-rule-scope"
},
{
"path": ".npmrc",
"reason": "outside-rule-scope"
},
{
"path": ".prettierignore",
"reason": "outside-rule-scope"
},
{
"path": "CONTRIBUTING.md",
"reason": "outside-rule-scope"
},
{
"path": "LICENSE",
"reason": "outside-rule-scope"
},
{
"path": "README.md",
"reason": "outside-rule-scope"
},
{
"path": "apps/ai-gateway/.dev.vars.example",
"reason": "unsupported-implementation"
},
{
"path": "apps/ai-gateway/CHANGELOG.md",
"reason": "outside-rule-scope"
},
{
"path": "apps/ai-gateway/CONTRIBUTING.md",
"reason": "outside-rule-scope"
},
{
"path": "apps/ai-gateway/README.md",
"reason": "outside-rule-scope"
},
{
"path": "apps/ai-gateway/types.d.ts",
"reason": "type-declaration"
},
{
"path": "apps/ai-gateway/worker-configuration.d.ts",
"reason": "type-declaration"
},
{
"path": "apps/ai-gateway/wrangler.jsonc",
"reason": "unsupported-implementation"
},
{
"path": "apps/auditlogs/.dev.vars.example",
"reason": "unsupported-implementation"
},
{
"path": "apps/auditlogs/CHANGELOG.md",
"reason": "outside-rule-scope"
},
{
"path": "apps/auditlogs/CONTRIBUTING.md",
"reason": "outside-rule-scope"
},
{
"path": "apps/auditlogs/README.md",
"reason": "outside-rule-scope"
},
{
"path": "apps/auditlogs/types.d.ts",
"reason": "type-declaration"
},
{
"path": "apps/auditlogs/worker-configuration.d.ts",
"reason": "type-declaration"
},
{
"path": "apps/auditlogs/wrangler.jsonc",
"reason": "unsupported-implementation"
},
{
"path": "apps/autorag/.dev.vars.example",
"reason": "unsupported-implementation"
},
{
"path": "apps/autorag/CHANGELOG.md",
"reason": "outside-rule-scope"
},
{
"path": "apps/autorag/CONTRIBUTING.md",
"reason": "outside-rule-scope"
},
{
"path": "apps/autorag/README.md",
"reason": "outside-rule-scope"
},
{
"path": "apps/autorag/types.d.ts",
"reason": "type-declaration"
},
{
"path": "apps/autorag/worker-configuration.d.ts",
"reason": "type-declaration"
},
{
"path": "apps/autorag/wrangler.jsonc",
"reason": "unsupported-implementation"
},
{
"path": "apps/browser-rendering/.dev.vars.example",
"reason": "unsupported-implementation"
},
{
"path": "apps/browser-rendering/CHANGELOG.md",
"reason": "outside-rule-scope"
},
{
"path": "apps/browser-rendering/CONTRIBUTING.md",
"reason": "outside-rule-scope"
},
{
"path": "apps/browser-rendering/README.md",
"reason": "outside-rule-scope"
},
{
"path": "apps/browser-rendering/types.d.ts",
"reason": "type-declaration"
},
{
"path": "apps/browser-rendering/worker-configuration.d.ts",
"reason": "type-declaration"
},
{
"path": "apps/browser-rendering/wrangler.jsonc",
"reason": "unsupported-implementation"
},
{
"path": "apps/cloudflare-blog/CHANGELOG.md",
"reason": "outside-rule-scope"
},
{
"path": "apps/cloudflare-blog/README.md",
"reason": "outside-rule-scope"
},
{
"path": "apps/cloudflare-blog/worker-configuration.d.ts",
"reason": "type-declaration"
},
{
"path": "apps/cloudflare-blog/wrangler.jsonc",
"reason": "unsupported-implementation"
},
{
"path": "apps/cloudflare-one-casb/.dev.vars.example",
"reason": "unsupported-implementation"
},
{
"path": "apps/cloudflare-one-casb/CHANGELOG.md",
"reason": "outside-rule-scope"
},
{
"path": "apps/cloudflare-one-casb/README.md",
"reason": "outside-rule-scope"
},
{
"path": "apps/cloudflare-one-casb/types.d.ts",
"reason": "type-declaration"
},
{
"path": "apps/cloudflare-one-casb/worker-configuration.d.ts",
"reason": "type-declaration"
},
{
"path": "apps/cloudflare-one-casb/wrangler.jsonc",
"reason": "unsupported-implementation"
},
{
"path": "apps/demo-day/CHANGELOG.md",
"reason": "outside-rule-scope"
},
{
"path": "apps/demo-day/frontend/index.html",
"reason": "unsupported-implementation"
},
{
"path": "apps/demo-day/frontend/public/anthropic.svg",
"reason": "outside-rule-scope"
},
{
"path": "apps/demo-day/frontend/public/asana.svg",
"reason": "outside-rule-scope"
},
{
"path": "apps/demo-day/frontend/public/atlassian.svg",
"reason": "outside-rule-scope"
},
{
"path": "apps/demo-day/frontend/public/canva.svg",
"reason": "outside-rule-scope"
},
{
"path": "apps/demo-day/frontend/public/cloudflare.svg",
"reason": "outside-rule-scope"
},
{
"path": "apps/demo-day/frontend/public/cloudflare_logo.svg",
"reason": "outside-rule-scope"
},
{
"path": "apps/demo-day/frontend/public/dina.jpg",
"reason": "outside-rule-scope"
},
{
"path": "apps/demo-day/frontend/public/favicon-16x16.png",
"reason": "outside-rule-scope"
},
{
"path": "apps/demo-day/frontend/public/favicon-32x32.png",
"reason": "outside-rule-scope"
},
{
"path": "apps/demo-day/frontend/public/favicon.ico",
"reason": "outside-rule-scope"
},
{
"path": "apps/demo-day/frontend/public/favicon.png",
"reason": "outside-rule-scope"
},
{
"path": "apps/demo-day/frontend/public/intercom.svg",
"reason": "outside-rule-scope"
},
{
"path": "apps/demo-day/frontend/public/linear.svg",
"reason": "outside-rule-scope"
},
{
"path": "apps/demo-day/frontend/public/matt.jpg",
"reason": "outside-rule-scope"
},
{
"path": "apps/demo-day/frontend/public/mcp_demo_day.svg",
"reason": "outside-rule-scope"
},
{
"path": "apps/demo-day/frontend/public/mcpog.png",
"reason": "outside-rule-scope"
},
{
"path": "apps/demo-day/frontend/public/more.svg",
"reason": "outside-rule-scope"
},
{
"path": "apps/demo-day/frontend/public/paypal.svg",
"reason": "outside-rule-scope"
},
{
"path": "apps/demo-day/frontend/public/pete.jpeg",
"reason": "outside-rule-scope"
},
{
"path": "apps/demo-day/frontend/public/sentry.svg",
"reason": "outside-rule-scope"
},
{
"path": "apps/demo-day/frontend/public/special_guest.png",
"reason": "outside-rule-scope"
},
{
"path": "apps/demo-day/frontend/public/square.svg",
"reason": "outside-rule-scope"
},
{
"path": "apps/demo-day/frontend/public/stripe.svg",
"reason": "outside-rule-scope"
},
{
"path": "apps/demo-day/frontend/public/sunil.jpg",
"reason": "outside-rule-scope"
},
{
"path": "apps/demo-day/frontend/public/webflow.svg",
"reason": "outside-rule-scope"
},
{
"path": "apps/demo-day/frontend/styles.css",
"reason": "outside-rule-scope"
},
{
"path": "apps/demo-day/types.d.ts",
"reason": "type-declaration"
},
{
"path": "apps/demo-day/worker-configuration.d.ts",
"reason": "type-declaration"
},
{
"path": "apps/dex-analysis/.dev.vars.example",
"reason": "unsupported-implementation"
},
{
"path": "apps/dex-analysis/CHANGELOG.md",
"reason": "outside-rule-scope"
},
{
"path": "apps/dex-analysis/README.md",
"reason": "outside-rule-scope"
},
{
"path": "apps/dex-analysis/types.d.ts",
"reason": "type-declaration"
},
{
"path": "apps/dex-analysis/worker-configuration.d.ts",
"reason": "type-declaration"
},
{
"path": "apps/dex-analysis/wrangler.jsonc",
"reason": "unsupported-implementation"
},
{
"path": "apps/dns-analytics/.dev.vars.example",
"reason": "unsupported-implementation"
},
{
"path": "apps/dns-analytics/CHANGELOG.md",
"reason": "outside-rule-scope"
},
{
"path": "apps/dns-analytics/CONTRIBUTING.md",
"reason": "outside-rule-scope"
},
{
"path": "apps/dns-analytics/README.md",
"reason": "outside-rule-scope"
},
{
"path": "apps/dns-analytics/types.d.ts",
"reason": "type-declaration"
},
{
"path": "apps/dns-analytics/worker-configuration.d.ts",
"reason": "type-declaration"
},
{
"path": "apps/dns-analytics/wrangler.jsonc",
"reason": "unsupported-implementation"
},
{
"path": "apps/docs-ai-search/CHANGELOG.md",
"reason": "outside-rule-scope"
},
{
"path": "apps/docs-ai-search/README.md",
"reason": "outside-rule-scope"
},
{
"path": "apps/docs-ai-search/worker-configuration.d.ts",
"reason": "type-declaration"
},
{
"path": "apps/docs-ai-search/wrangler.jsonc",
"reason": "unsupported-implementation"
},
{
"path": "apps/graphql/CHANGELOG.md",
"reason": "outside-rule-scope"
},
{
"path": "apps/graphql/CONTRIBUTING.md",
"reason": "outside-rule-scope"
},
{
"path": "apps/graphql/README.md",
"reason": "outside-rule-scope"
},
{
"path": "apps/graphql/types.d.ts",
"reason": "type-declaration"
},
{
"path": "apps/graphql/worker-configuration.d.ts",
"reason": "type-declaration"
},
{
"path": "apps/graphql/wrangler.jsonc",
"reason": "unsupported-implementation"
},
{
"path": "apps/logpush/.dev.vars.example",
"reason": "unsupported-implementation"
},
{
"path": "apps/logpush/CHANGELOG.md",
"reason": "outside-rule-scope"
},
{
"path": "apps/logpush/README.md",
"reason": "outside-rule-scope"
},
{
"path": "apps/logpush/types.d.ts",
"reason": "type-declaration"
},
{
"path": "apps/logpush/worker-configuration.d.ts",
"reason": "type-declaration"
},
{
"path": "apps/logpush/wrangler.jsonc",
"reason": "unsupported-implementation"
},
{
"path": "apps/radar/.dev.vars.example",
"reason": "unsupported-implementation"
},
{
"path": "apps/radar/CHANGELOG.md",
"reason": "outside-rule-scope"
},
{
"path": "apps/radar/CONTRIBUTING.md",
"reason": "outside-rule-scope"
},
{
"path": "apps/radar/README.md",
"reason": "outside-rule-scope"
},
{
"path": "apps/radar/types.d.ts",
"reason": "type-declaration"
},
{
"path": "apps/radar/worker-configuration.d.ts",
"reason": "type-declaration"
},
{
"path": "apps/radar/wrangler.jsonc",
"reason": "unsupported-implementation"
},
{
"path": "apps/sandbox-container/.dev.vars.example",
"reason": "unsupported-implementation"
},
{
"path": "apps/sandbox-container/CHANGELOG.md",
"reason": "outside-rule-scope"
},
{
"path": "apps/sandbox-container/CONTRIBUTING.md",
"reason": "outside-rule-scope"
},
{
"path": "apps/sandbox-container/README.md",
"reason": "outside-rule-scope"
},
{
"path": "apps/sandbox-container/types.d.ts",
"reason": "type-declaration"
},
{
"path": "apps/sandbox-container/worker-configuration.d.ts",
"reason": "type-declaration"
},
{
"path": "apps/sandbox-container/wrangler.jsonc",
"reason": "unsupported-implementation"
},
{
"path": "apps/stack-mcp/CHANGELOG.md",
"reason": "outside-rule-scope"
},
{
"path": "apps/stack-mcp/README.md",
"reason": "outside-rule-scope"
},
{
"path": "apps/stack-mcp/worker-configuration.d.ts",
"reason": "type-declaration"
},
{
"path": "apps/stack-mcp/wrangler.jsonc",
"reason": "unsupported-implementation"
},
{
"path": "apps/workers-bindings/.dev.vars.example",
"reason": "unsupported-implementation"
},
{
"path": "apps/workers-bindings/.gitignore",
"reason": "outside-rule-scope"
},
{
"path": "apps/workers-bindings/CHANGELOG.md",
"reason": "outside-rule-scope"
},
{
"path": "apps/workers-bindings/CONTRIBUTING.md",
"reason": "outside-rule-scope"
},
{
"path": "apps/workers-bindings/README.md",
"reason": "outside-rule-scope"
},
{
"path": "apps/workers-bindings/evals/types.d.ts",
"reason": "type-declaration"
},
{
"path": "apps/workers-bindings/worker-configuration.d.ts",
"reason": "type-declaration"
},
{
"path": "apps/workers-bindings/wrangler.jsonc",
"reason": "unsupported-implementation"
},
{
"path": "apps/workers-builds/.dev.vars.example",
"reason": "unsupported-implementation"
},
{
"path": "apps/workers-builds/CHANGELOG.md",
"reason": "outside-rule-scope"
},
{
"path": "apps/workers-builds/CONTRIBUTING.md",
"reason": "outside-rule-scope"
},
{
"path": "apps/workers-builds/README.md",
"reason": "outside-rule-scope"
},
{
"path": "apps/workers-builds/types.d.ts",
"reason": "type-declaration"
},
{
"path": "apps/workers-builds/worker-configuration.d.ts",
"reason": "type-declaration"
},
{
"path": "apps/workers-builds/wrangler.jsonc",
"reason": "unsupported-implementation"
},
{
"path": "apps/workers-observability/.dev.vars.example",
"reason": "unsupported-implementation"
},
{
"path": "apps/workers-observability/CHANGELOG.md",
"reason": "outside-rule-scope"
},
{
"path": "apps/workers-observability/CONTRIBUTING.md",
"reason": "outside-rule-scope"
},
{
"path": "apps/workers-observability/README.md",
"reason": "outside-rule-scope"
},
{
"path": "apps/workers-observability/types.d.ts",
"reason": "type-declaration"
},
{
"path": "apps/workers-observability/worker-configuration.d.ts",
"reason": "type-declaration"
},
{
"path": "apps/workers-observability/wrangler.jsonc",
"reason": "unsupported-implementation"
},
{
"path": "implementation-guides/evals.md",
"reason": "outside-rule-scope"
},
{
"path": "implementation-guides/tools.md",
"reason": "outside-rule-scope"
},
{
"path": "implementation-guides/type-validators.md",
"reason": "outside-rule-scope"
},
{
"path": "packages/eslint-config/CHANGELOG.md",
"reason": "outside-rule-scope"
},
{
"path": "packages/eslint-config/README.md",
"reason": "outside-rule-scope"
},
{
"path": "packages/eval-tools/CHANGELOG.md",
"reason": "outside-rule-scope"
},
{
"path": "packages/eval-tools/worker-configuration.d.ts",
"reason": "type-declaration"
},
{
"path": "packages/mcp-common/CHANGELOG.md",
"reason": "outside-rule-scope"
},
{
"path": "packages/mcp-common/README.md",
"reason": "outside-rule-scope"
},
{
"path": "packages/mcp-common/types.d.ts",
"reason": "type-declaration"
},
{
"path": "packages/mcp-common/worker-configuration.d.ts",
"reason": "type-declaration"
},
{
"path": "packages/mcp-observability/CHANGELOG.md",
"reason": "outside-rule-scope"
},
{
"path": "packages/mcp-observability/worker-configuration.d.ts",
"reason": "type-declaration"
},
{
"path": "packages/tools/CHANGELOG.md",
"reason": "outside-rule-scope"
},
{
"path": "packages/tools/README.md",
"reason": "outside-rule-scope"
},
{
"path": "packages/tools/bin/run-changeset-new",
"reason": "unsupported-implementation"
},
{
"path": "packages/tools/bin/run-eslint-workers",
"reason": "unsupported-implementation"
},
{
"path": "packages/tools/bin/run-fix-deps",
"reason": "unsupported-implementation"
},
{
"path": "packages/tools/bin/run-tsc",
"reason": "unsupported-implementation"
},
{
"path": "packages/tools/bin/run-turbo",
"reason": "unsupported-implementation"
},
{
"path": "packages/tools/bin/run-vitest",
"reason": "unsupported-implementation"
},
{
"path": "packages/tools/bin/run-vitest-ci",
"reason": "unsupported-implementation"
},
{
"path": "packages/tools/bin/run-wrangler-deploy",
"reason": "unsupported-implementation"
},
{
"path": "packages/tools/bin/run-wrangler-types",
"reason": "unsupported-implementation"
},
{
"path": "packages/tools/bin/runx",
"reason": "unsupported-implementation"
},
{
"path": "packages/tools/src/test/fixtures/changesets/empty/.gitkeep",
"reason": "unsupported-implementation"
},
{
"path": "packages/typescript-config/CHANGELOG.md",
"reason": "outside-rule-scope"
}
],
"readErrors": [],
"truncation": [],
"limits": {
"maxFiles": 4000,
"maxDepth": 12,
"maxFileBytes": 1048576
}
}Fix first (15 critical/high)
| Severity | Rule | Finding | Remediation |
|---|---|---|---|
| CRITICAL | AT-SEC-003 (ASI02) | Unbounded Dynamic Shell Executionapps/sandbox-container/server/container-tools.ts:68Evidence: content: [{ type: 'text', text: await getUserContainer(context).container_exec(args) }], | Strictly restrict shell execution to an immutable allowlist of binary commands with explicit argument arrays, or execute inside microVM sandboxes. |
| CRITICAL | AT-SEC-003 (ASI02) | Unbounded Dynamic Shell Executionapps/sandbox-container/server/userContainer.ts:224Evidence: async container_exec(params: ExecParams): Promise<string> { | Strictly restrict shell execution to an immutable allowlist of binary commands with explicit argument arrays, or execute inside microVM sandboxes. |
| CRITICAL | AT-SEC-003 (ASI02) | Unbounded Dynamic Shell Executionapps/sandbox-container/server/userContainer.ts:406Evidence: const proc = await container.exec(cmd, { | Strictly restrict shell execution to an immutable allowlist of binary commands with explicit argument arrays, or execute inside microVM sandboxes. |
| HIGH | AT-SEC-006 (LLM06) | Unfiltered SSRF / Arbitrary Network Egressapps/browser-rendering/src/browser.tools.spec.ts:19Evidence: new Cloudflare({ apiToken, fetch: (url, init) => globalThis.fetch(url, init) }), | Define an explicit egress domain allowlist and block private IP ranges (127.0.0.1, 10.0.0.0/8, 169.254.169.254). |
| HIGH | AT-SEC-006 (LLM06) | Unfiltered SSRF / Arbitrary Network Egressapps/cloudflare-blog/src/tools/blog.tools.ts:27Evidence: const res = await cloudflareFetch(url) | Define an explicit egress domain allowlist and block private IP ranges (127.0.0.1, 10.0.0.0/8, 169.254.169.254). |
| HIGH | AT-SEC-006 (LLM06) | Unfiltered SSRF / Arbitrary Network Egressapps/demo-day/frontend/script.js:141Evidence: async function retryFetch(url, options, maxRetries = 3) { | Define an explicit egress domain allowlist and block private IP ranges (127.0.0.1, 10.0.0.0/8, 169.254.169.254). |
| HIGH | AT-SEC-006 (LLM06) | Unfiltered SSRF / Arbitrary Network Egressapps/demo-day/frontend/script.js:144Evidence: const response = await fetch(url, options) | Define an explicit egress domain allowlist and block private IP ranges (127.0.0.1, 10.0.0.0/8, 169.254.169.254). |
| HIGH | AT-SEC-006 (LLM06) | Unfiltered SSRF / Arbitrary Network Egressapps/dex-analysis/src/warp_diag_reader.ts:81Evidence: const res = await cloudflareFetch(url, { headers }) | Define an explicit egress domain allowlist and block private IP ranges (127.0.0.1, 10.0.0.0/8, 169.254.169.254). |
| HIGH | AT-SEC-006 (LLM06) | Unfiltered SSRF / Arbitrary Network Egressapps/radar/src/tools/radar.tools.ts:164Evidence: const response = await cloudflareFetch(url.toString(), { | Define an explicit egress domain allowlist and block private IP ranges (127.0.0.1, 10.0.0.0/8, 169.254.169.254). |
| HIGH | AT-SEC-006 (LLM06) | Unfiltered SSRF / Arbitrary Network Egressapps/radar/src/tools/url-scanner.tools.ts:40Evidence: const res = await cloudflareFetch(url.toString(), { | Define an explicit egress domain allowlist and block private IP ranges (127.0.0.1, 10.0.0.0/8, 169.254.169.254). |
| HIGH | AT-SEC-006 (LLM06) | Unfiltered SSRF / Arbitrary Network Egresspackages/mcp-common/src/cloudflare-api.ts:53Evidence: const response = await cloudflareFetch(url, { | Define an explicit egress domain allowlist and block private IP ranges (127.0.0.1, 10.0.0.0/8, 169.254.169.254). |
| HIGH | AT-SEC-006 (LLM06) | Unfiltered SSRF / Arbitrary Network Egresspackages/mcp-common/src/user-agent.spec.ts:31Evidence: await cloudflareFetch(URL, { headers: { Authorization: 'Bearer token' } }) | Define an explicit egress domain allowlist and block private IP ranges (127.0.0.1, 10.0.0.0/8, 169.254.169.254). |
| HIGH | AT-SEC-006 (LLM06) | Unfiltered SSRF / Arbitrary Network Egresspackages/mcp-common/src/user-agent.spec.ts:40Evidence: await cloudflareFetch(URL, { headers: new Headers({ 'User-Agent': 'something-else' }) }) | Define an explicit egress domain allowlist and block private IP ranges (127.0.0.1, 10.0.0.0/8, 169.254.169.254). |
| HIGH | AT-SEC-006 (LLM06) | Unfiltered SSRF / Arbitrary Network Egresspackages/mcp-common/src/user-agent.spec.ts:60Evidence: await cloudflareFetch(URL) | Define an explicit egress domain allowlist and block private IP ranges (127.0.0.1, 10.0.0.0/8, 169.254.169.254). |
| HIGH | AT-SEC-006 (LLM06) | Unfiltered SSRF / Arbitrary Network Egresspackages/mcp-common/src/user-agent.ts:38Evidence: return fetch(input, { ...init, headers }) | Define an explicit egress domain allowlist and block private IP ranges (127.0.0.1, 10.0.0.0/8, 169.254.169.254). |
Permissions
Scope: excessive · Shell: enabled · Network egress: yes · File deletion: none · Human approval: none
Provenance
License: Apache-2.0 · Lockfile: yes · Security policy: no · Signals: unverified origin
Independently scanned by the OpenTrustBench registry (not self-reported by the project). Static analysis only — no code executed, findings need human triage, counts may include test/example code. Static snapshot; re-scan before relying on it: npx @opentrustbench/cli scan https://github.com/cloudflare/mcp-server-cloudflare. Scores move with every upstream commit; pages refresh weekly. How scoring works.