id: "py-fastapi-guarded:104"
language: py
project: fastapi-guarded
version: "1.0.0"
description: "FastAPI-like exec guarded by ALLOW_EXEC flag (unreachable by default)"
entrypoints:
  - "POST /exec"
sinks:
  - id: "FastApiGuarded::handle_request"
    path: "src/app.py::handle_request"
    kind: "process"
    location:
      file: src/app.py
      line: 7
    notes: "eval guarded by ALLOW_EXEC"
environment:
  os_image: "python:3.12-alpine"
  runtime:
    python: "3.12"
  source_date_epoch: 1730000000
build:
  command: "./build/build.sh"
  source_date_epoch: 1730000000
  outputs:
    artifact_path: outputs/binary.tar.gz
    sbom_path: outputs/sbom.cdx.json
    coverage_path: outputs/coverage.json
    traces_dir: outputs/traces
test:
  command: "./tests/run-tests.sh"
  expected_coverage:
    - outputs/coverage.json
  expected_traces:
    - outputs/traces/traces.json
ground_truth:
  summary: "Guard blocks eval unless ALLOW_EXEC=true"
  evidence_files:
    - "../benchmark/truth/py-fastapi-guarded.json"