6e45066e37
Some checks failed
Concelier Attestation Tests / attestation-tests (push) Has been cancelled
Policy Simulation / policy-simulate (push) Has been cancelled
AOC Guard CI / aoc-guard (push) Has been cancelled
AOC Guard CI / aoc-verify (push) Has been cancelled
Signals CI & Image / signals-ci (push) Has been cancelled
Signals Reachability Scoring & Events / reachability-smoke (push) Has been cancelled
Signals Reachability Scoring & Events / sign-and-upload (push) Has been cancelled
Docs CI / lint-and-preview (push) Has been cancelled
Policy Lint & Smoke / policy-lint (push) Has been cancelled
Scanner Analyzers / Discover Analyzers (push) Has been cancelled
Scanner Analyzers / Build Analyzers (push) Has been cancelled
Scanner Analyzers / Test Language Analyzers (push) Has been cancelled
Scanner Analyzers / Validate Test Fixtures (push) Has been cancelled
Scanner Analyzers / Verify Deterministic Output (push) Has been cancelled
118 lines
3.9 KiB
JSON
118 lines
3.9 KiB
JSON
{
|
|
"schema": "richgraph-v1",
|
|
"analyzer": {
|
|
"name": "scanner.java",
|
|
"version": "1.2.0",
|
|
"toolchain_digest": "sha256:7b9e8c6d5a4f3e2d1c0b9a8f7e6d5c4b3a2f1e0d"
|
|
},
|
|
"nodes": [
|
|
{
|
|
"id": "sym:java:bWFpbi0xMjM0NTY3ODkwYWJjZGVm",
|
|
"symbol_id": "sym:java:bWFpbi0xMjM0NTY3ODkwYWJjZGVm",
|
|
"code_id": "code:java:Y29kZS1tYWluLTEyMzQ1Njc4OTBhYmM",
|
|
"lang": "java",
|
|
"kind": "method",
|
|
"display": "com.example.app.Main.main(String[])",
|
|
"purl": "pkg:maven/com.example/app@1.0.0",
|
|
"build_id": null,
|
|
"symbol_digest": "sha256:a1b2c3d4e5f6a7b8c9d0e1f2a3b4c5d6e7f8a9b0c1d2e3f4a5b6c7d8e9f0a1b2",
|
|
"symbol": {
|
|
"mangled": null,
|
|
"demangled": "com.example.app.Main.main(String[])",
|
|
"source": "DWARF",
|
|
"confidence": 1.0
|
|
},
|
|
"evidence": ["bytecode"],
|
|
"attributes": {}
|
|
},
|
|
{
|
|
"id": "sym:java:cHJvY2Vzc1JlcXVlc3QtYWJjZGVm",
|
|
"symbol_id": "sym:java:cHJvY2Vzc1JlcXVlc3QtYWJjZGVm",
|
|
"code_id": "code:java:Y29kZS1wcm9jZXNzLWFiY2RlZjEy",
|
|
"lang": "java",
|
|
"kind": "method",
|
|
"display": "com.example.app.RequestHandler.processRequest(HttpRequest)",
|
|
"purl": "pkg:maven/com.example/app@1.0.0",
|
|
"build_id": null,
|
|
"symbol_digest": "sha256:b2c3d4e5f6a7b8c9d0e1f2a3b4c5d6e7f8a9b0c1d2e3f4a5b6c7d8e9f0a1b2c3",
|
|
"symbol": {
|
|
"mangled": null,
|
|
"demangled": "com.example.app.RequestHandler.processRequest(HttpRequest)",
|
|
"source": "DWARF",
|
|
"confidence": 0.98
|
|
},
|
|
"evidence": ["bytecode", "import"],
|
|
"attributes": {}
|
|
},
|
|
{
|
|
"id": "sym:java:bG9nRXJyb3ItMTIzNDU2Nzg5MGFiY2Q",
|
|
"symbol_id": "sym:java:bG9nRXJyb3ItMTIzNDU2Nzg5MGFiY2Q",
|
|
"code_id": "code:java:Y29kZS1sb2ctMTIzNDU2Nzg5MGFiY2Q",
|
|
"lang": "java",
|
|
"kind": "method",
|
|
"display": "org.apache.logging.log4j.Logger.error(String, Object...)",
|
|
"purl": "pkg:maven/org.apache.logging.log4j/log4j-core@2.14.1",
|
|
"build_id": null,
|
|
"symbol_digest": "sha256:c3d4e5f6a7b8c9d0e1f2a3b4c5d6e7f8a9b0c1d2e3f4a5b6c7d8e9f0a1b2c3d4",
|
|
"symbol": {
|
|
"mangled": null,
|
|
"demangled": "org.apache.logging.log4j.Logger.error(String, Object...)",
|
|
"source": "DWARF",
|
|
"confidence": 0.95
|
|
},
|
|
"evidence": ["bytecode", "import"],
|
|
"attributes": {
|
|
"vulnerable": "CVE-2021-44228"
|
|
}
|
|
},
|
|
{
|
|
"id": "sym:java:dW51c2VkTWV0aG9kLWFiY2RlZjEyMzQ",
|
|
"symbol_id": "sym:java:dW51c2VkTWV0aG9kLWFiY2RlZjEyMzQ",
|
|
"code_id": "code:java:Y29kZS11bnVzZWQtYWJjZGVmMTIzNA",
|
|
"lang": "java",
|
|
"kind": "method",
|
|
"display": "com.example.app.Unused.unusedMethod()",
|
|
"purl": "pkg:maven/com.example/app@1.0.0",
|
|
"build_id": null,
|
|
"symbol_digest": "sha256:d4e5f6a7b8c9d0e1f2a3b4c5d6e7f8a9b0c1d2e3f4a5b6c7d8e9f0a1b2c3d4e5",
|
|
"symbol": {
|
|
"mangled": null,
|
|
"demangled": "com.example.app.Unused.unusedMethod()",
|
|
"source": "DWARF",
|
|
"confidence": 0.92
|
|
},
|
|
"evidence": ["bytecode"],
|
|
"attributes": {}
|
|
}
|
|
],
|
|
"edges": [
|
|
{
|
|
"from": "sym:java:bWFpbi0xMjM0NTY3ODkwYWJjZGVm",
|
|
"to": "sym:java:cHJvY2Vzc1JlcXVlc3QtYWJjZGVm",
|
|
"kind": "call",
|
|
"purl": "pkg:maven/com.example/app@1.0.0",
|
|
"symbol_digest": "sha256:b2c3d4e5f6a7b8c9d0e1f2a3b4c5d6e7f8a9b0c1d2e3f4a5b6c7d8e9f0a1b2c3",
|
|
"confidence": 1.0,
|
|
"evidence": ["bytecode"],
|
|
"candidates": []
|
|
},
|
|
{
|
|
"from": "sym:java:cHJvY2Vzc1JlcXVlc3QtYWJjZGVm",
|
|
"to": "sym:java:bG9nRXJyb3ItMTIzNDU2Nzg5MGFiY2Q",
|
|
"kind": "virtual",
|
|
"purl": "pkg:maven/org.apache.logging.log4j/log4j-core@2.14.1",
|
|
"symbol_digest": "sha256:c3d4e5f6a7b8c9d0e1f2a3b4c5d6e7f8a9b0c1d2e3f4a5b6c7d8e9f0a1b2c3d4",
|
|
"confidence": 0.92,
|
|
"evidence": ["bytecode", "import"],
|
|
"candidates": []
|
|
}
|
|
],
|
|
"roots": [
|
|
{
|
|
"id": "sym:java:bWFpbi0xMjM0NTY3ODkwYWJjZGVm",
|
|
"phase": "runtime",
|
|
"source": "main"
|
|
}
|
|
]
|
|
}
|