up
Some checks failed
Concelier Attestation Tests / attestation-tests (push) Has been cancelled
Policy Simulation / policy-simulate (push) Has been cancelled
AOC Guard CI / aoc-guard (push) Has been cancelled
AOC Guard CI / aoc-verify (push) Has been cancelled
Signals CI & Image / signals-ci (push) Has been cancelled
Signals Reachability Scoring & Events / reachability-smoke (push) Has been cancelled
Signals Reachability Scoring & Events / sign-and-upload (push) Has been cancelled
Docs CI / lint-and-preview (push) Has been cancelled
Policy Lint & Smoke / policy-lint (push) Has been cancelled
Scanner Analyzers / Discover Analyzers (push) Has been cancelled
Scanner Analyzers / Build Analyzers (push) Has been cancelled
Scanner Analyzers / Test Language Analyzers (push) Has been cancelled
Scanner Analyzers / Validate Test Fixtures (push) Has been cancelled
Scanner Analyzers / Verify Deterministic Output (push) Has been cancelled
Some checks failed
Concelier Attestation Tests / attestation-tests (push) Has been cancelled
Policy Simulation / policy-simulate (push) Has been cancelled
AOC Guard CI / aoc-guard (push) Has been cancelled
AOC Guard CI / aoc-verify (push) Has been cancelled
Signals CI & Image / signals-ci (push) Has been cancelled
Signals Reachability Scoring & Events / reachability-smoke (push) Has been cancelled
Signals Reachability Scoring & Events / sign-and-upload (push) Has been cancelled
Docs CI / lint-and-preview (push) Has been cancelled
Policy Lint & Smoke / policy-lint (push) Has been cancelled
Scanner Analyzers / Discover Analyzers (push) Has been cancelled
Scanner Analyzers / Build Analyzers (push) Has been cancelled
Scanner Analyzers / Test Language Analyzers (push) Has been cancelled
Scanner Analyzers / Validate Test Fixtures (push) Has been cancelled
Scanner Analyzers / Verify Deterministic Output (push) Has been cancelled
This commit is contained in:
117
samples/reachability/richgraph-v1-sample.json
Normal file
117
samples/reachability/richgraph-v1-sample.json
Normal file
@@ -0,0 +1,117 @@
|
||||
{
|
||||
"schema": "richgraph-v1",
|
||||
"analyzer": {
|
||||
"name": "scanner.java",
|
||||
"version": "1.2.0",
|
||||
"toolchain_digest": "sha256:7b9e8c6d5a4f3e2d1c0b9a8f7e6d5c4b3a2f1e0d"
|
||||
},
|
||||
"nodes": [
|
||||
{
|
||||
"id": "sym:java:bWFpbi0xMjM0NTY3ODkwYWJjZGVm",
|
||||
"symbol_id": "sym:java:bWFpbi0xMjM0NTY3ODkwYWJjZGVm",
|
||||
"code_id": "code:java:Y29kZS1tYWluLTEyMzQ1Njc4OTBhYmM",
|
||||
"lang": "java",
|
||||
"kind": "method",
|
||||
"display": "com.example.app.Main.main(String[])",
|
||||
"purl": "pkg:maven/com.example/app@1.0.0",
|
||||
"build_id": null,
|
||||
"symbol_digest": "sha256:a1b2c3d4e5f6a7b8c9d0e1f2a3b4c5d6e7f8a9b0c1d2e3f4a5b6c7d8e9f0a1b2",
|
||||
"symbol": {
|
||||
"mangled": null,
|
||||
"demangled": "com.example.app.Main.main(String[])",
|
||||
"source": "DWARF",
|
||||
"confidence": 1.0
|
||||
},
|
||||
"evidence": ["bytecode"],
|
||||
"attributes": {}
|
||||
},
|
||||
{
|
||||
"id": "sym:java:cHJvY2Vzc1JlcXVlc3QtYWJjZGVm",
|
||||
"symbol_id": "sym:java:cHJvY2Vzc1JlcXVlc3QtYWJjZGVm",
|
||||
"code_id": "code:java:Y29kZS1wcm9jZXNzLWFiY2RlZjEy",
|
||||
"lang": "java",
|
||||
"kind": "method",
|
||||
"display": "com.example.app.RequestHandler.processRequest(HttpRequest)",
|
||||
"purl": "pkg:maven/com.example/app@1.0.0",
|
||||
"build_id": null,
|
||||
"symbol_digest": "sha256:b2c3d4e5f6a7b8c9d0e1f2a3b4c5d6e7f8a9b0c1d2e3f4a5b6c7d8e9f0a1b2c3",
|
||||
"symbol": {
|
||||
"mangled": null,
|
||||
"demangled": "com.example.app.RequestHandler.processRequest(HttpRequest)",
|
||||
"source": "DWARF",
|
||||
"confidence": 0.98
|
||||
},
|
||||
"evidence": ["bytecode", "import"],
|
||||
"attributes": {}
|
||||
},
|
||||
{
|
||||
"id": "sym:java:bG9nRXJyb3ItMTIzNDU2Nzg5MGFiY2Q",
|
||||
"symbol_id": "sym:java:bG9nRXJyb3ItMTIzNDU2Nzg5MGFiY2Q",
|
||||
"code_id": "code:java:Y29kZS1sb2ctMTIzNDU2Nzg5MGFiY2Q",
|
||||
"lang": "java",
|
||||
"kind": "method",
|
||||
"display": "org.apache.logging.log4j.Logger.error(String, Object...)",
|
||||
"purl": "pkg:maven/org.apache.logging.log4j/log4j-core@2.14.1",
|
||||
"build_id": null,
|
||||
"symbol_digest": "sha256:c3d4e5f6a7b8c9d0e1f2a3b4c5d6e7f8a9b0c1d2e3f4a5b6c7d8e9f0a1b2c3d4",
|
||||
"symbol": {
|
||||
"mangled": null,
|
||||
"demangled": "org.apache.logging.log4j.Logger.error(String, Object...)",
|
||||
"source": "DWARF",
|
||||
"confidence": 0.95
|
||||
},
|
||||
"evidence": ["bytecode", "import"],
|
||||
"attributes": {
|
||||
"vulnerable": "CVE-2021-44228"
|
||||
}
|
||||
},
|
||||
{
|
||||
"id": "sym:java:dW51c2VkTWV0aG9kLWFiY2RlZjEyMzQ",
|
||||
"symbol_id": "sym:java:dW51c2VkTWV0aG9kLWFiY2RlZjEyMzQ",
|
||||
"code_id": "code:java:Y29kZS11bnVzZWQtYWJjZGVmMTIzNA",
|
||||
"lang": "java",
|
||||
"kind": "method",
|
||||
"display": "com.example.app.Unused.unusedMethod()",
|
||||
"purl": "pkg:maven/com.example/app@1.0.0",
|
||||
"build_id": null,
|
||||
"symbol_digest": "sha256:d4e5f6a7b8c9d0e1f2a3b4c5d6e7f8a9b0c1d2e3f4a5b6c7d8e9f0a1b2c3d4e5",
|
||||
"symbol": {
|
||||
"mangled": null,
|
||||
"demangled": "com.example.app.Unused.unusedMethod()",
|
||||
"source": "DWARF",
|
||||
"confidence": 0.92
|
||||
},
|
||||
"evidence": ["bytecode"],
|
||||
"attributes": {}
|
||||
}
|
||||
],
|
||||
"edges": [
|
||||
{
|
||||
"from": "sym:java:bWFpbi0xMjM0NTY3ODkwYWJjZGVm",
|
||||
"to": "sym:java:cHJvY2Vzc1JlcXVlc3QtYWJjZGVm",
|
||||
"kind": "call",
|
||||
"purl": "pkg:maven/com.example/app@1.0.0",
|
||||
"symbol_digest": "sha256:b2c3d4e5f6a7b8c9d0e1f2a3b4c5d6e7f8a9b0c1d2e3f4a5b6c7d8e9f0a1b2c3",
|
||||
"confidence": 1.0,
|
||||
"evidence": ["bytecode"],
|
||||
"candidates": []
|
||||
},
|
||||
{
|
||||
"from": "sym:java:cHJvY2Vzc1JlcXVlc3QtYWJjZGVm",
|
||||
"to": "sym:java:bG9nRXJyb3ItMTIzNDU2Nzg5MGFiY2Q",
|
||||
"kind": "virtual",
|
||||
"purl": "pkg:maven/org.apache.logging.log4j/log4j-core@2.14.1",
|
||||
"symbol_digest": "sha256:c3d4e5f6a7b8c9d0e1f2a3b4c5d6e7f8a9b0c1d2e3f4a5b6c7d8e9f0a1b2c3d4",
|
||||
"confidence": 0.92,
|
||||
"evidence": ["bytecode", "import"],
|
||||
"candidates": []
|
||||
}
|
||||
],
|
||||
"roots": [
|
||||
{
|
||||
"id": "sym:java:bWFpbi0xMjM0NTY3ODkwYWJjZGVm",
|
||||
"phase": "runtime",
|
||||
"source": "main"
|
||||
}
|
||||
]
|
||||
}
|
||||
Reference in New Issue
Block a user