cyber-dojo
flows
differ-archived-at-1707630536
artifacts
5dab57d8f33e7133570164c0be15ca47de36f5aa3b9eb783dc236d1ca1c55c14
By signing up, you agree to the
Terms of Service.
For more information about Kosli’s privacy practices, see the Kosli’s
Privacy Policy.
We’ll occasionally send you account-related emails.
We’ll occasionally send you account-related emails.
differ-archived-at-1707630536
Diff files from two traffic-lights
cyberdojo/differ:559f02e
Compliant
Download Evidence Package
JSON
{
"created_at": 1705145767.2535586,
"fingerprint": "5dab57d8f33e7133570164c0be15ca47de36f5aa3b9eb783dc236d1ca1c55c14",
"filename": "cyberdojo/differ:559f02e",
"git_commit": "559f02e7a28c6f19a5fedf7676faee3d6cb37149",
"build_url": "https://github.com/cyber-dojo/differ/actions/runs/7512181579",
"commit_url": "https://github.com/cyber-dojo/differ/commit/559f02e7a28c6f19a5fedf7676faee3d6cb37149",
"evidence": {
"snyk-scan": {
"evidence_type": "snyk",
"is_compliant": true,
"build_url": "https://github.com/cyber-dojo/differ/actions/runs/7512181579",
"evidence_archive_fingerprint": "156015f8bcc9a2f14a8265aacec75c998a7c2da4a77398ad65194cb0d74e7c6c",
"user_data": {},
"snyk_results": {
"applications": [
{
"dependencyCount": 0,
"displayTargetFile": "/usr/local/bundle/gems/concurrent-ruby-1.2.2/lib/concurrent-ruby/concurrent",
"docker": {},
"filesystemPolicy": true,
"hasUnknownVersions": false,
"ignoreSettings": {
"adminOnly": false,
"disregardFilesystemIgnores": false,
"reasonRequired": false
},
"isPrivate": true,
"licensesPolicy": {
"orgLicenseRules": {
"AGPL-1.0": {
"instructions": "",
"licenseType": "AGPL-1.0",
"severity": "high"
},
"AGPL-3.0": {
"instructions": "",
"licenseType": "AGPL-3.0",
"severity": "high"
},
"Artistic-1.0": {
"instructions": "",
"licenseType": "Artistic-1.0",
"severity": "medium"
},
"Artistic-2.0": {
"instructions": "",
"licenseType": "Artistic-2.0",
"severity": "medium"
},
"CDDL-1.0": {
"instructions": "",
"licenseType": "CDDL-1.0",
"severity": "medium"
},
"CPOL-1.02": {
"instructions": "",
"licenseType": "CPOL-1.02",
"severity": "high"
},
"EPL-1.0": {
"instructions": "",
"licenseType": "EPL-1.0",
"severity": "medium"
},
"GPL-2.0": {
"instructions": "",
"licenseType": "GPL-2.0",
"severity": "high"
},
"GPL-3.0": {
"instructions": "",
"licenseType": "GPL-3.0",
"severity": "high"
},
"LGPL-2.0": {
"instructions": "",
"licenseType": "LGPL-2.0",
"severity": "medium"
},
"LGPL-2.1": {
"instructions": "",
"licenseType": "LGPL-2.1",
"severity": "medium"
},
"LGPL-3.0": {
"instructions": "",
"licenseType": "LGPL-3.0",
"severity": "medium"
},
"MPL-1.1": {
"instructions": "",
"licenseType": "MPL-1.1",
"severity": "medium"
},
"MPL-2.0": {
"instructions": "",
"licenseType": "MPL-2.0",
"severity": "medium"
},
"MS-RL": {
"instructions": "",
"licenseType": "MS-RL",
"severity": "medium"
},
"SimPL-2.0": {
"instructions": "",
"licenseType": "SimPL-2.0",
"severity": "high"
}
},
"severities": {}
},
"ok": true,
"org": "jonjagger",
"packageManager": "maven",
"path": "cyberdojo/differ:559f02e/differ:559f02e:/usr/local/bundle/gems/concurrent-ruby-1.2.2/lib/concurrent-ruby/concurrent",
"policy": "# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.\nversion: v1.25.1\nignore: {}\npatch: {}\n",
"projectName": "cyberdojo/differ:559f02e:/usr/local/bundle/gems/concurrent-ruby-1.2.2/lib/concurrent-ruby/concurrent",
"summary": "No known vulnerabilities",
"targetFile": "/usr/local/bundle/gems/concurrent-ruby-1.2.2/lib/concurrent-ruby/concurrent",
"uniqueCount": 0,
"vulnerabilities": []
}
],
"dependencyCount": 83,
"displayTargetFile": "Dockerfile",
"docker": {
"baseImage": "cyberdojo/sinatra-base:6afffdb",
"baseImageRemediation": {
"advice": [
{
"bold": true,
"message": "Recommendations for your base image (cyberdojo/sinatra-base:6afffdb) are not available.\nSee above for details and fixes on individual vulnerabilities"
}
],
"code": "UNTRACKED_BASE_IMAGE"
},
"binariesVulns": {
"affectedPkgs": {},
"issuesData": {}
}
},
"filesystemPolicy": true,
"hasUnknownVersions": false,
"ignoreSettings": {
"adminOnly": false,
"disregardFilesystemIgnores": false,
"reasonRequired": false
},
"isPrivate": true,
"licensesPolicy": {
"orgLicenseRules": {
"AGPL-1.0": {
"instructions": "",
"licenseType": "AGPL-1.0",
"severity": "high"
},
"AGPL-3.0": {
"instructions": "",
"licenseType": "AGPL-3.0",
"severity": "high"
},
"Artistic-1.0": {
"instructions": "",
"licenseType": "Artistic-1.0",
"severity": "medium"
},
"Artistic-2.0": {
"instructions": "",
"licenseType": "Artistic-2.0",
"severity": "medium"
},
"CDDL-1.0": {
"instructions": "",
"licenseType": "CDDL-1.0",
"severity": "medium"
},
"CPOL-1.02": {
"instructions": "",
"licenseType": "CPOL-1.02",
"severity": "high"
},
"EPL-1.0": {
"instructions": "",
"licenseType": "EPL-1.0",
"severity": "medium"
},
"GPL-2.0": {
"instructions": "",
"licenseType": "GPL-2.0",
"severity": "high"
},
"GPL-3.0": {
"instructions": "",
"licenseType": "GPL-3.0",
"severity": "high"
},
"LGPL-2.0": {
"instructions": "",
"licenseType": "LGPL-2.0",
"severity": "medium"
},
"LGPL-2.1": {
"instructions": "",
"licenseType": "LGPL-2.1",
"severity": "medium"
},
"LGPL-3.0": {
"instructions": "",
"licenseType": "LGPL-3.0",
"severity": "medium"
},
"MPL-1.1": {
"instructions": "",
"licenseType": "MPL-1.1",
"severity": "medium"
},
"MPL-2.0": {
"instructions": "",
"licenseType": "MPL-2.0",
"severity": "medium"
},
"MS-RL": {
"instructions": "",
"licenseType": "MS-RL",
"severity": "medium"
},
"SimPL-2.0": {
"instructions": "",
"licenseType": "SimPL-2.0",
"severity": "high"
}
},
"severities": {}
},
"ok": true,
"org": "jonjagger",
"packageManager": "apk",
"path": "cyberdojo/differ:559f02e/differ",
"platform": "linux/amd64",
"policy": "# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.\nversion: v1.25.1\nignore: {}\npatch: {}\n",
"projectName": "docker-image|cyberdojo/differ",
"summary": "No known operating system vulnerabilities",
"targetFile": "Dockerfile",
"uniqueCount": 0,
"vulnerabilities": []
},
"created_at": 1705145793.7315536,
"has_audit_package": true
},
"unit-test": {
"evidence_type": "junit",
"is_compliant": true,
"build_url": "https://github.com/cyber-dojo/differ/actions/runs/7512181579",
"evidence_archive_fingerprint": "5b770f4c883c1095a9913beeadc07f06c91d3c8e24313f26948972998258774d",
"user_data": {},
"junit_results": [
{
"name": "DiffSummaryTest",
"failures": 0,
"errors": 0,
"skipped": 0,
"total": 9,
"duration": 0.312498,
"timestamp": 1705145791
},
{
"name": "DifferTest",
"failures": 0,
"errors": 0,
"skipped": 0,
"total": 16,
"duration": 1.295656,
"timestamp": 1705145791
},
{
"name": "ExternalDiskWriterTest",
"failures": 0,
"errors": 0,
"skipped": 0,
"total": 1,
"duration": 0.000204,
"timestamp": 1705145791
},
{
"name": "ExternalGitterTest",
"failures": 0,
"errors": 0,
"skipped": 0,
"total": 4,
"duration": 0.000143,
"timestamp": 1705145791
},
{
"name": "ExternalShellerTest",
"failures": 0,
"errors": 0,
"skipped": 0,
"total": 5,
"duration": 0.006623,
"timestamp": 1705145791
},
{
"name": "ExternalsTest",
"failures": 0,
"errors": 0,
"skipped": 0,
"total": 3,
"duration": 0.000158,
"timestamp": 1705145791
},
{
"name": "GitDiffParseFilenamesTest",
"failures": 0,
"errors": 0,
"skipped": 0,
"total": 12,
"duration": 0.001192,
"timestamp": 1705145791
},
{
"name": "GitDiffParserTest",
"failures": 0,
"errors": 0,
"skipped": 0,
"total": 13,
"duration": 0.001684,
"timestamp": 1705145791
},
{
"name": "HttpProxyResponseTest",
"failures": 0,
"errors": 0,
"skipped": 0,
"total": 5,
"duration": 0.000895,
"timestamp": 1705145791
},
{
"name": "ProberTest",
"failures": 0,
"errors": 0,
"skipped": 0,
"total": 4,
"duration": 0.002145,
"timestamp": 1705145791
},
{
"name": "Utf8CleanTest",
"failures": 0,
"errors": 0,
"skipped": 0,
"total": 1,
"duration": 0.000131,
"timestamp": 1705145791
}
],
"created_at": 1705145799.6782627,
"has_audit_package": true
},
"branch-coverage": {
"evidence_type": "generic",
"is_compliant": true,
"build_url": "https://github.com/cyber-dojo/differ/actions/runs/7512181579",
"description": "server & client branch-coverage reports",
"user_data": {
"client": {
"command_name": "Minitest",
"groups": {
"app": {
"branches": {
"covered": 8,
"missed": 0,
"total": 8
},
"lines": {
"covered": 101,
"missed": 0,
"total": 101
}
},
"test": {
"branches": {
"covered": 0,
"missed": 0,
"total": 0
},
"lines": {
"covered": 230,
"missed": 0,
"total": 230
}
}
},
"timestamp": 1705145797
},
"server": {
"command_name": "Minitest",
"groups": {
"app": {
"branches": {
"covered": 59,
"missed": 1,
"total": 60
},
"lines": {
"covered": 352,
"missed": 0,
"total": 352
}
},
"test": {
"branches": {
"covered": 0,
"missed": 0,
"total": 0
},
"lines": {
"covered": 516,
"missed": 0,
"total": 516
}
}
},
"timestamp": 1705145791
}
},
"created_at": 1705145800.1500206,
"has_audit_package": false
},
"pull-request": {
"evidence_type": "pull_request",
"is_compliant": true,
"build_url": "https://github.com/cyber-dojo/differ/actions/runs/7512181579",
"commit_sha": "559f02e7a28c6f19a5fedf7676faee3d6cb37149",
"evidence_url": "https://github.com/cyber-dojo/differ/pull/57",
"user_data": {},
"git_provider": "github",
"pull_requests": [
{
"merge_commit": "559f02e7a28c6f19a5fedf7676faee3d6cb37149",
"url": "https://github.com/cyber-dojo/differ/pull/57",
"state": "closed",
"approvers": []
}
],
"created_at": 1705145755.6089008,
"has_audit_package": false
},
"lint": {
"evidence_type": "generic",
"is_compliant": true,
"build_url": "https://github.com/cyber-dojo/differ/actions/runs/7512181579",
"commit_sha": "559f02e7a28c6f19a5fedf7676faee3d6cb37149",
"evidence_archive_fingerprint": "d901bc4898ff6127c0c382ea940a450fce4b8008c5048754abf455dfa26e9760",
"user_data": {},
"created_at": 1705145761.7153385,
"has_audit_package": true
}
},
"reported_by": "ci-pipelines",
"git_commit_info": {
"sha1": "559f02e7a28c6f19a5fedf7676faee3d6cb37149",
"message": "CI: fix artifact name in kosli attest artifact command (#57)",
"author": "Jon Jagger <jon@kosli.com>",
"timestamp": 1705145732,
"branch": "main"
},
"repo_url": "https://github.com/cyber-dojo/differ",
"template": [
"artifact",
"lint",
"pull-request",
"unit-test",
"branch-coverage",
"snyk-scan"
],
"last_modified_at": 1705145800.1500206,
"releases": [
74,
73
],
"deployments": [
377,
376
],
"state": "COMPLIANT",
"html_url": "https://app.kosli.com/cyber-dojo/flows/differ-archived-at-1707630536/artifacts/5dab57d8f33e7133570164c0be15ca47de36f5aa3b9eb783dc236d1ca1c55c14",
"api_url": "https://app.kosli.com/api/v2/artifacts/cyber-dojo/differ-archived-at-1707630536/fingerprint/5dab57d8f33e7133570164c0be15ca47de36f5aa3b9eb783dc236d1ca1c55c14"
}
Artifact Information |
|
| Name | cyberdojo/differ:559f02e |
| Fingerprint | 5dab57d8f33e7133570164c0be15ca47de36f5aa3b9eb783dc236d1ca1c55c14 |
| Git commit |
559f02e
Jon Jagger <jon@kosli.com> (main)
1705145732.0 • 4 months ago
CI: fix artifact name in kosli attest artifact command (#57)
|
| CI Build | https://github.com/cyber-dojo/differ/actions/runs/7512181579 |
| Running | - |
| Exited | aws-beta#2781 aws-prod#1916 |
| Last modified | 1705145800.1500206 • 4 months ago |
Evidence
Evidence for 'lint'
{ "evidence_type": "generic", "is_compliant": true, "build_url": "https://github.com/cyber-dojo/differ/actions/runs/7512181579", "commit_sha": "559f02e7a28c6f19a5fedf7676faee3d6cb37149", "evidence_archive_fingerprint": "d901bc4898ff6127c0c382ea940a450fce4b8008c5048754abf455dfa26e9760", "user_data": {}, "created_at": 1705145761.7153385, "has_audit_package": true }
Evidence for 'pull-request'
{ "evidence_type": "pull_request", "is_compliant": true, "build_url": "https://github.com/cyber-dojo/differ/actions/runs/7512181579", "commit_sha": "559f02e7a28c6f19a5fedf7676faee3d6cb37149", "evidence_url": "https://github.com/cyber-dojo/differ/pull/57", "user_data": {}, "git_provider": "github", "pull_requests": [ { "merge_commit": "559f02e7a28c6f19a5fedf7676faee3d6cb37149", "url": "https://github.com/cyber-dojo/differ/pull/57", "state": "closed", "approvers": [] } ], "created_at": 1705145755.6089008, "has_audit_package": false }
Evidence for 'unit-test'
{ "evidence_type": "junit", "name": "unit-test", "is_compliant": true, "build_url": "https://github.com/cyber-dojo/differ/actions/runs/7512181579", "evidence_archive_fingerprint": "5b770f4c883c1095a9913beeadc07f06c91d3c8e24313f26948972998258774d", "user_data": {}, "junit_results": [ { "name": "DiffSummaryTest", "failures": 0, "errors": 0, "skipped": 0, "total": 9, "duration": 0.312498, "timestamp": 1705145791 }, { "name": "DifferTest", "failures": 0, "errors": 0, "skipped": 0, "total": 16, "duration": 1.295656, "timestamp": 1705145791 }, { "name": "ExternalDiskWriterTest", "failures": 0, "errors": 0, "skipped": 0, "total": 1, "duration": 0.000204, "timestamp": 1705145791 }, { "name": "ExternalGitterTest", "failures": 0, "errors": 0, "skipped": 0, "total": 4, "duration": 0.000143, "timestamp": 1705145791 }, { "name": "ExternalShellerTest", "failures": 0, "errors": 0, "skipped": 0, "total": 5, "duration": 0.006623, "timestamp": 1705145791 }, { "name": "ExternalsTest", "failures": 0, "errors": 0, "skipped": 0, "total": 3, "duration": 0.000158, "timestamp": 1705145791 }, { "name": "GitDiffParseFilenamesTest", "failures": 0, "errors": 0, "skipped": 0, "total": 12, "duration": 0.001192, "timestamp": 1705145791 }, { "name": "GitDiffParserTest", "failures": 0, "errors": 0, "skipped": 0, "total": 13, "duration": 0.001684, "timestamp": 1705145791 }, { "name": "HttpProxyResponseTest", "failures": 0, "errors": 0, "skipped": 0, "total": 5, "duration": 0.000895, "timestamp": 1705145791 }, { "name": "ProberTest", "failures": 0, "errors": 0, "skipped": 0, "total": 4, "duration": 0.002145, "timestamp": 1705145791 }, { "name": "Utf8CleanTest", "failures": 0, "errors": 0, "skipped": 0, "total": 1, "duration": 0.000131, "timestamp": 1705145791 } ], "created_at": 1705145799.6782627, "has_audit_package": true }
Evidence for 'branch-coverage'
{ "evidence_type": "generic", "name": "branch-coverage", "is_compliant": true, "build_url": "https://github.com/cyber-dojo/differ/actions/runs/7512181579", "description": "server & client branch-coverage reports", "user_data": { "client": { "command_name": "Minitest", "groups": { "app": { "branches": { "covered": 8, "missed": 0, "total": 8 }, "lines": { "covered": 101, "missed": 0, "total": 101 } }, "test": { "branches": { "covered": 0, "missed": 0, "total": 0 }, "lines": { "covered": 230, "missed": 0, "total": 230 } } }, "timestamp": 1705145797 }, "server": { "command_name": "Minitest", "groups": { "app": { "branches": { "covered": 59, "missed": 1, "total": 60 }, "lines": { "covered": 352, "missed": 0, "total": 352 } }, "test": { "branches": { "covered": 0, "missed": 0, "total": 0 }, "lines": { "covered": 516, "missed": 0, "total": 516 } } }, "timestamp": 1705145791 } }, "created_at": 1705145800.1500206, "has_audit_package": false }
Evidence for 'snyk-scan'
{ "evidence_type": "snyk", "name": "snyk-scan", "is_compliant": true, "build_url": "https://github.com/cyber-dojo/differ/actions/runs/7512181579", "evidence_archive_fingerprint": "156015f8bcc9a2f14a8265aacec75c998a7c2da4a77398ad65194cb0d74e7c6c", "user_data": {}, "snyk_results": { "applications": [ { "dependencyCount": 0, "displayTargetFile": "/usr/local/bundle/gems/concurrent-ruby-1.2.2/lib/concurrent-ruby/concurrent", "docker": {}, "filesystemPolicy": true, "hasUnknownVersions": false, "ignoreSettings": { "adminOnly": false, "disregardFilesystemIgnores": false, "reasonRequired": false }, "isPrivate": true, "licensesPolicy": { "orgLicenseRules": { "AGPL-1.0": { "instructions": "", "licenseType": "AGPL-1.0", "severity": "high" }, "AGPL-3.0": { "instructions": "", "licenseType": "AGPL-3.0", "severity": "high" }, "Artistic-1.0": { "instructions": "", "licenseType": "Artistic-1.0", "severity": "medium" }, "Artistic-2.0": { "instructions": "", "licenseType": "Artistic-2.0", "severity": "medium" }, "CDDL-1.0": { "instructions": "", "licenseType": "CDDL-1.0", "severity": "medium" }, "CPOL-1.02": { "instructions": "", "licenseType": "CPOL-1.02", "severity": "high" }, "EPL-1.0": { "instructions": "", "licenseType": "EPL-1.0", "severity": "medium" }, "GPL-2.0": { "instructions": "", "licenseType": "GPL-2.0", "severity": "high" }, "GPL-3.0": { "instructions": "", "licenseType": "GPL-3.0", "severity": "high" }, "LGPL-2.0": { "instructions": "", "licenseType": "LGPL-2.0", "severity": "medium" }, "LGPL-2.1": { "instructions": "", "licenseType": "LGPL-2.1", "severity": "medium" }, "LGPL-3.0": { "instructions": "", "licenseType": "LGPL-3.0", "severity": "medium" }, "MPL-1.1": { "instructions": "", "licenseType": "MPL-1.1", "severity": "medium" }, "MPL-2.0": { "instructions": "", "licenseType": "MPL-2.0", "severity": "medium" }, "MS-RL": { "instructions": "", "licenseType": "MS-RL", "severity": "medium" }, "SimPL-2.0": { "instructions": "", "licenseType": "SimPL-2.0", "severity": "high" } }, "severities": {} }, "ok": true, "org": "jonjagger", "packageManager": "maven", "path": "cyberdojo/differ:559f02e/differ:559f02e:/usr/local/bundle/gems/concurrent-ruby-1.2.2/lib/concurrent-ruby/concurrent", "policy": "# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.\nversion: v1.25.1\nignore: {}\npatch: {}\n", "projectName": "cyberdojo/differ:559f02e:/usr/local/bundle/gems/concurrent-ruby-1.2.2/lib/concurrent-ruby/concurrent", "summary": "No known vulnerabilities", "targetFile": "/usr/local/bundle/gems/concurrent-ruby-1.2.2/lib/concurrent-ruby/concurrent", "uniqueCount": 0, "vulnerabilities": [] } ], "dependencyCount": 83, "displayTargetFile": "Dockerfile", "docker": { "baseImage": "cyberdojo/sinatra-base:6afffdb", "baseImageRemediation": { "advice": [ { "bold": true, "message": "Recommendations for your base image (cyberdojo/sinatra-base:6afffdb) are not available.\nSee above for details and fixes on individual vulnerabilities" } ], "code": "UNTRACKED_BASE_IMAGE" }, "binariesVulns": { "affectedPkgs": {}, "issuesData": {} } }, "filesystemPolicy": true, "hasUnknownVersions": false, "ignoreSettings": { "adminOnly": false, "disregardFilesystemIgnores": false, "reasonRequired": false }, "isPrivate": true, "licensesPolicy": { "orgLicenseRules": { "AGPL-1.0": { "instructions": "", "licenseType": "AGPL-1.0", "severity": "high" }, "AGPL-3.0": { "instructions": "", "licenseType": "AGPL-3.0", "severity": "high" }, "Artistic-1.0": { "instructions": "", "licenseType": "Artistic-1.0", "severity": "medium" }, "Artistic-2.0": { "instructions": "", "licenseType": "Artistic-2.0", "severity": "medium" }, "CDDL-1.0": { "instructions": "", "licenseType": "CDDL-1.0", "severity": "medium" }, "CPOL-1.02": { "instructions": "", "licenseType": "CPOL-1.02", "severity": "high" }, "EPL-1.0": { "instructions": "", "licenseType": "EPL-1.0", "severity": "medium" }, "GPL-2.0": { "instructions": "", "licenseType": "GPL-2.0", "severity": "high" }, "GPL-3.0": { "instructions": "", "licenseType": "GPL-3.0", "severity": "high" }, "LGPL-2.0": { "instructions": "", "licenseType": "LGPL-2.0", "severity": "medium" }, "LGPL-2.1": { "instructions": "", "licenseType": "LGPL-2.1", "severity": "medium" }, "LGPL-3.0": { "instructions": "", "licenseType": "LGPL-3.0", "severity": "medium" }, "MPL-1.1": { "instructions": "", "licenseType": "MPL-1.1", "severity": "medium" }, "MPL-2.0": { "instructions": "", "licenseType": "MPL-2.0", "severity": "medium" }, "MS-RL": { "instructions": "", "licenseType": "MS-RL", "severity": "medium" }, "SimPL-2.0": { "instructions": "", "licenseType": "SimPL-2.0", "severity": "high" } }, "severities": {} }, "ok": true, "org": "jonjagger", "packageManager": "apk", "path": "cyberdojo/differ:559f02e/differ", "platform": "linux/amd64", "policy": "# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.\nversion: v1.25.1\nignore: {}\npatch: {}\n", "projectName": "docker-image|cyberdojo/differ", "summary": "No known operating system vulnerabilities", "targetFile": "Dockerfile", "uniqueCount": 0, "vulnerabilities": [] }, "created_at": 1705145793.7315536, "has_audit_package": true }