up

bench/reachability-benchmark/cases/java/spring-reflection/outputs/attestation.json

@@ -0,0 +1,22 @@
+{
+  "_type": "https://in-toto.io/Statement/v0.1",
+  "predicate": {
+    "buildType": "stub",
+    "builder": {
+      "id": "stub"
+    },
+    "metadata": {
+      "buildFinishedOn": "1970-01-01T00:00:00Z",
+      "buildStartedOn": "1970-01-01T00:00:00Z"
+    }
+  },
+  "predicateType": "https://slsa.dev/provenance/v0.2",
+  "subject": [
+    {
+      "digest": {
+        "sha256": "stub"
+      },
+      "name": "java-spring-reflection:205"
+    }
+  ]
+}

bench/reachability-benchmark/cases/java/spring-reflection/outputs/classes/outputs/SINK_REACHED

@@ -0,0 +1 @@
+true

bench/reachability-benchmark/cases/java/spring-reflection/outputs/coverage.json

@@ -0,0 +1,13 @@
+{
+  "files": {
+    "src/ReflectController.java": {
+      "lines_covered": [
+        7,
+        13,
+        14,
+        15
+      ],
+      "lines_total": 29
+    }
+  }
+}

bench/reachability-benchmark/cases/java/spring-reflection/outputs/sbom.cdx.json

@@ -0,0 +1,14 @@
+{
+  "bomFormat": "CycloneDX",
+  "components": [],
+  "metadata": {
+    "component": {
+      "name": "spring-reflection",
+      "type": "application",
+      "version": "1.0.0"
+    },
+    "timestamp": "1970-01-01T00:00:00Z"
+  },
+  "specVersion": "1.5",
+  "version": 1
+}

bench/reachability-benchmark/cases/java/spring-reflection/outputs/traces/trace.json

@@ -0,0 +1,9 @@
+{
+  "entry": "POST /api/reflect",
+  "notes": "User controls class name flowing into Class.forName/newInstance",
+  "path": [
+    "ReflectController.run",
+    "Class.forName"
+  ],
+  "sink": "SpringReflection::run"
+}