← Back to search

Arkova Verification

carson-see Scanned 2d ago

Privacy-first document verification anchored to the public ledger.

? Not scanned yet

Versions

1.0.0latest
first seen May 19, 2026

Tools 0

No tools indexed yet.

Permissions 4

network medium
Server uses network capabilities via: fetch(), httpx, net, urllib
filesystem low
Server uses filesystem capabilities via: fs, fs sync ops, fs/promises, open(), os, path, pathlib, shutil
shell high
Server uses shell capabilities via: child_process, execSync(), spawnSync(), subprocess
env_vars low
Server uses env_vars capabilities via: os.environ, process.env

Scan Findings 317

high
Hardcoded OAuth client secret in carson-see-ArkovaCarson-72857c9/services/worker/src/config.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in carson-see-ArkovaCarson-72857c9/services/worker/src/jobs/docusign-envelope-completed.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in carson-see-ArkovaCarson-72857c9/services/worker/src/api/v1/identity.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in carson-see-ArkovaCarson-72857c9/services/worker/src/api/v1/integrations/docusign-oauth.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in carson-see-ArkovaCarson-72857c9/services/worker/src/api/v1/integrations/docusign-member-oauth.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in carson-see-ArkovaCarson-72857c9/services/worker/src/api/v1/integrations/drive-oauth.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in carson-see-ArkovaCarson-72857c9/services/worker/src/integrations/connectors/googleDrive.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in carson-see-ArkovaCarson-72857c9/services/worker/src/integrations/grc/grc.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in carson-see-ArkovaCarson-72857c9/services/worker/src/integrations/oauth/docusign.test.ts auth_checker · 95%
high
Hardcoded OAuth client ID in carson-see-ArkovaCarson-72857c9/services/worker/src/integrations/credential-sources/token-store.test.ts auth_checker · 85%
high
Hardcoded OAuth client secret in carson-see-ArkovaCarson-72857c9/services/worker/src/integrations/credential-sources/token-store.test.ts auth_checker · 95%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Excessive dependency count: 89 direct dependencies dependency_analyzer · 90%
medium
Suspicious package name: react-dom dependency_analyzer · 60%
medium
Vulnerable dependency: xlsx@0.18.5 (GHSA-4r6h-8v6p-xvw6) dependency_analyzer · 95%
medium
Vulnerable dependency: xlsx@0.18.5 (GHSA-5pgg-2g8v-p4x9) dependency_analyzer · 95%
medium
Vulnerable dependency: httpx@0.27,<1 (GHSA-h8pj-cxx2-jfg2) dependency_analyzer · 95%
medium
Vulnerable dependency: httpx@0.27,<1 (PYSEC-2022-183) dependency_analyzer · 95%
medium
Vulnerable dependency: pydantic@2.7,<3 (GHSA-5jqp-qgf6-3pvh) dependency_analyzer · 95%
medium
Vulnerable dependency: pydantic@2.7,<3 (GHSA-mr82-8j83-vxmv) dependency_analyzer · 95%
medium
Vulnerable dependency: pydantic@2.7,<3 (PYSEC-2021-47) dependency_analyzer · 95%
medium
Vulnerable dependency: pydantic@2.7,<3 (PYSEC-2026-1812) dependency_analyzer · 95%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/e2e/public-proof-gate.spec.ts:32 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/scripts/kpi3/fixtures.mjs:12 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/scripts/kpi3/fixtures.mjs:14 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/scripts/kpi3/fixtures.mjs:18 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/scripts/kpi3/fixtures.mjs:20 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/scripts/kpi3/fixtures.mjs:22 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/scripts/kpi3/fixtures.mjs:33 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/scripts/kpi3/fixtures.mjs:34 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/scripts/kpi3/fixtures.mjs:35 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/scripts/kpi3/fixtures.mjs:36 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/scripts/kpi3/fixtures.mjs:37 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/scripts/kpi3/fixtures.mjs:38 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/scripts/kpi3/fixtures.mjs:39 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/scripts/kpi3/fixtures.mjs:40 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/scripts/kpi3/fixtures.mjs:41 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/scripts/kpi3/fixtures.mjs:42 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/scripts/kpi3/fixtures.mjs:43 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/scripts/kpi3/fixtures.mjs:44 entropy_analyzer · 70%
medium
Buffer.from base64 in carson-see-ArkovaCarson-72857c9/scripts/staging/batch-drain-live-evidence.ts:577 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/scripts/staging/batch-drain-admission-adapter.test.ts:550 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/scripts/staging/batch-drain-admission-adapter.test.ts:551 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/scripts/staging/batch-drain-admission-adapter.test.ts:552 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/scripts/staging/batch-drain-admission-adapter.test.ts:578 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/scripts/staging/batch-drain-admission-adapter.test.ts:579 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/scripts/staging/provision-isolated-rig.test.ts:66 entropy_analyzer · 70%
medium
Buffer.from base64 in carson-see-ArkovaCarson-72857c9/scripts/ci/s33-wave1-github-evidence.test.ts:1697 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/scripts/ci/s33-wave1-github-evidence.test.ts:1558 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/scripts/ci/s33-wave1-github-evidence.test.ts:1561 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/scripts/ci/s33-wave1-github-evidence.test.ts:1567 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/tests/rls/rls.test.ts:468 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/src/lib/validators.test.ts:47 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/src/lib/validators.test.ts:61 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/src/lib/validators.test.ts:65 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/src/lib/validators.test.ts:343 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/src/lib/validators.test.ts:367 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/src/lib/validators.test.ts:370 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/src/lib/proofAvailability.test.ts:27 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/src/lib/proofPackage.test.ts:21 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/src/lib/proofPackage.test.ts:64 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/src/components/embed/VerificationWidget.test.tsx:29 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/utils/merkle.test.ts:241 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/src/components/verification/VerifierProofDownload.test.tsx:22 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/src/components/ui/ExplorerLink.test.tsx:17 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/src/components/ui/ExplorerLink.test.tsx:27 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/src/components/ui/ExplorerLink.test.tsx:37 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/src/components/attestation/VerificationResultDisplay.test.tsx:23 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/src/components/attestation/VerificationResultDisplay.test.tsx:89 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/packages/embed/src/report-block.test.ts:15 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/packages/embed/src/render.test.ts:19 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/packages/arkova-py/tests/test_client.py:591 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/packages/arkova-py/tests/test_client.py:1154 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/packages/arkova-py/tests/test_client.py:1161 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/packages/sdk/src/client.test.ts:39 entropy_analyzer · 70%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/integrations/zapier/src/triggers/anchorSecured.ts:95 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/integrations/zapier/src/actions/anchorDocument.ts:80 entropy_analyzer · 70%
medium
Buffer.from base64 in carson-see-ArkovaCarson-72857c9/services/worker/scripts/ops/ce-secret-manager-smoke.ts:128 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/tests/webhook-delivery-roundtrip.test.ts:193 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/tests/webhook-delivery-roundtrip.test.ts:303 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/api/verify-anchor.test.ts:35 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/api/verify-anchor.test.ts:47 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/api/verify-anchor.test.ts:182 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/lib/credential-evidence.test.ts:288 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/lib/credential-evidence.test.ts:291 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/lib/credential-evidence.test.ts:294 entropy_analyzer · 70%
medium
Buffer.from base64 in carson-see-ArkovaCarson-72857c9/services/worker/src/middleware/x402PaymentGate.ts:430 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/utils/proofReconstruction.test.ts:32 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/utils/proofReconstruction.test.ts:33 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/utils/proofReconstruction.test.ts:35 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/utils/proofReconstruction.test.ts:36 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/utils/proofReconstruction.test.ts:37 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/utils/proofReconstruction.test.ts:42 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/utils/proofReconstruction.test.ts:43 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/utils/proofReconstruction.test.ts:45 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/utils/proofReconstruction.test.ts:46 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/utils/proofReconstruction.test.ts:47 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/utils/proofReconstruction.test.ts:48 entropy_analyzer · 70%
medium
Permission: network access detected permission_analyzer · 90%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/utils/proofReconstruction.test.ts:49 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/utils/proofReconstruction.test.ts:50 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/utils/proofReconstruction.test.ts:56 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/utils/proofReconstruction.test.ts:57 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/utils/proofReconstruction.test.ts:59 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/utils/proofReconstruction.test.ts:60 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/utils/proofReconstruction.test.ts:61 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/utils/proofReconstruction.test.ts:62 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/utils/proofReconstruction.test.ts:63 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/utils/proofReconstruction.test.ts:64 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/utils/proofReconstruction.test.ts:65 entropy_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 90%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/utils/proofReconstruction.test.ts:66 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/utils/proofReconstruction.test.ts:67 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/utils/proofReconstruction.test.ts:68 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/utils/proofReconstruction.test.ts:69 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/utils/proofReconstruction.test.ts:70 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/utils/proofReconstruction.test.ts:71 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/utils/proofReconstruction.test.ts:72 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/utils/proofReconstruction.test.ts:254 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/utils/proofReconstruction.test.ts:255 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/utils/proofReconstruction.test.ts:257 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/utils/proofReconstruction.test.ts:258 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/utils/proofReconstruction.test.ts:259 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/utils/proofReconstruction.test.ts:260 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/utils/proofReconstruction.test.ts:261 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/utils/proofReconstruction.test.ts:262 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/utils/proofReconstruction.test.ts:263 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/utils/proofReconstruction.test.ts:264 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/utils/proofReconstruction.test.ts:265 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/utils/proofReconstruction.test.ts:266 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/utils/sentry-verification.test.ts:27 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/utils/sentry-extra-scrub.test.ts:29 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/utils/merkle.test.ts:235 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/utils/merkle.test.ts:247 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/utils/merkle.test.ts:253 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/chain/signet.integration.test.ts:69 entropy_analyzer · 70%
medium
Buffer.from base64 in carson-see-ArkovaCarson-72857c9/services/worker/src/chain/gcp-kms-signing-provider.ts:100 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/chain/fingerprint-mapping-regression.test.ts:64 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/chain/fingerprint-mapping-regression.test.ts:67 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/chain/fingerprint-mapping-regression.test.ts:70 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/chain/fingerprint-mapping-regression.test.ts:79 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/chain/fingerprint-mapping-regression.test.ts:83 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/jobs/proof-pg-roundtrip.local.test.ts:44 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/jobs/proof-pg-roundtrip.local.test.ts:45 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/jobs/anchor.test.ts:243 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/api/v1/anchor-evidence.test.ts:65 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/api/v1/anchor-evidence.test.ts:101 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/api/v1/anchor-evidence.test.ts:109 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/api/v1/verify.test.ts:37 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/api/v1/verify.test.ts:71 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/api/v1/verify.test.ts:116 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/api/v1/verify.test.ts:554 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/api/v1/verify.test.ts:557 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/api/v1/docs.ts:127 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/api/v1/verify-connector-fingerprint.test.ts:55 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/api/v1/verify-connector-fingerprint.test.ts:89 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/api/v1/verify-connector-fingerprint.test.ts:243 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/api/v1/verify-connector-fingerprint.test.ts:244 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/api/v1/verify-pii-projection.test.ts:395 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/api/v1/verify-pii-projection.test.ts:405 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/api/v1/verify-proof.bundle-producer.test.ts:22 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/api/v1/verify-proof.bundle-producer.test.ts:23 entropy_analyzer · 70%
medium
Buffer.from base64 in carson-see-ArkovaCarson-72857c9/services/worker/src/api/v1/attestations.ts:649 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/api/v1/anchor-lifecycle.test.ts:84 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/api/v1/anchor-lifecycle.test.ts:91 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/api/v1/verify/attestation.test.ts:53 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/api/v1/verify/attestation.test.ts:100 entropy_analyzer · 70%
medium
Buffer.from base64 in carson-see-ArkovaCarson-72857c9/services/worker/src/signatures/cades/cadesBuilder.test.ts:95 entropy_analyzer · 75%
medium
Buffer.from base64 in carson-see-ArkovaCarson-72857c9/services/worker/src/integrations/connectors/docusign-token-store.test.ts:45 entropy_analyzer · 75%
medium
Buffer.from base64 in carson-see-ArkovaCarson-72857c9/services/worker/src/integrations/connectors/docusign-token-store.ts:162 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/integrations/grc/grc.test.ts:37 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-wave2-coverage-audit.ts:78 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-wave2-coverage-audit.ts:79 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-wave2-coverage-audit.ts:80 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-wave3-deterministic-eval-gates.ts:31 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-wave3-deterministic-eval-gates.ts:32 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-wave3-deterministic-eval-gates.ts:34 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-wave3-deterministic-eval-gates.ts:68 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-wave3-deterministic-eval-gates.ts:69 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-wave3-deterministic-eval-gates.ts:79 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-wave3-deterministic-eval-gates.ts:80 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-wave3-deterministic-eval-gates.ts:81 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-wave3-deterministic-eval-gates.ts:82 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-wave3-deterministic-eval-gates.ts:83 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-wave1-dual-dag.ts:79 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-wave1-dual-dag.ts:417 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-wave1-dual-dag.ts:422 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-wave1-dual-dag.ts:424 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-wave1-dual-dag.ts:939 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:107 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:108 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:109 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:165 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:166 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:167 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:168 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:169 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:170 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:171 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:172 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:173 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:174 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:175 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:176 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:177 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:178 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:179 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:180 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:181 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:182 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:183 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:184 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:185 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:186 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:187 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:188 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:189 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:190 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:191 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:192 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:193 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:194 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:195 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:196 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:197 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:198 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:199 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:200 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:201 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:202 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:203 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:204 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:205 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:206 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:207 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:208 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:209 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:210 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:211 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:212 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:213 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:214 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:215 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:216 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:217 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:218 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:219 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:220 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:221 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:222 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:223 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:224 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:225 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:226 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:227 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:228 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:229 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:230 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:231 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:232 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:233 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:234 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:235 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:236 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:237 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:238 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:239 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:240 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:241 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:242 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:243 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:244 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:245 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.test.ts:1836 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-wave1-dual-dag.test.ts:379 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-wave1-dual-dag.test.ts:1068 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-wave1-dual-dag.test.ts:1073 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-wave1-dual-dag.test.ts:1075 entropy_analyzer · 70%
medium
Buffer.from base64 in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.ts:4445 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.ts:531 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.ts:532 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.ts:533 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.ts:541 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.ts:542 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.ts:543 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.ts:1661 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.ts:1688 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.ts:1689 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.ts:4489 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.ts:4492 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-batch-acceptance.ts:4498 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-wave2-corpus-registry.ts:50 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-wave2-corpus-registry.ts:51 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-wave2-corpus-registry.ts:61 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-wave2-corpus-registry.ts:62 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-wave2-corpus-registry.ts:63 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-wave2-corpus-registry.ts:64 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-wave2-corpus-registry.ts:65 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in carson-see-ArkovaCarson-72857c9/services/worker/src/ai/eval/s33-wave3-deterministic-eval-gates.test.ts:49 entropy_analyzer · 70%
info
package.json metadata manifest_parser · 100%
info
pyproject.toml metadata manifest_parser · 100%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (370) manifest_parser · 80%
medium
Hardcoded OAuth client ID in carson-see-ArkovaCarson-72857c9/services/worker/src/integrations/credential-sources/token-store.test.ts oauth_scope_analyzer · 80%
high
High-risk OAuth scope: https://www.googleapis.com/auth/cloud-platform oauth_scope_analyzer · 80%
high
High-risk OAuth scope: admin oauth_scope_analyzer · 80%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 2358 components sbom_generator · 100%
critical
Database URL with Password found in carson-see-ArkovaCarson-72857c9/docs/stories/01_p1_bedrock.md secret_scanner · 85%
critical
Database URL with Password found in carson-see-ArkovaCarson-72857c9/docs/stories/05_p4e2_credential_metadata.md secret_scanner · 85%
high
Generic API Key Assignment found in carson-see-ArkovaCarson-72857c9/docs/guides/API_GUIDE.md secret_scanner · 75%
critical
Database URL with Password found in carson-see-ArkovaCarson-72857c9/docs/runbooks/supabase/long-running-migrations.md secret_scanner · 85%
high
Generic API Key Assignment found in carson-see-ArkovaCarson-72857c9/sdks/langchain-ts/README.md secret_scanner · 75%
high
Generic API Key Assignment found in carson-see-ArkovaCarson-72857c9/.github/workflows/pe-eval.yml secret_scanner · 75%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%