cyber-dojo
flows
shas-archived-at-1705491385
artifacts
1397e6b171feac8c67089a2acaaeef6dc2cd931a233402f1c8e2bec558869d94
By signing up, you agree to the
Terms of Service.
For more information about Kosli’s privacy practices, see the Kosli’s
Privacy Policy.
We’ll occasionally send you account-related emails.
We’ll occasionally send you account-related emails.
shas-archived-at-1705491385
UX for git+image shas
cyberdojo/shas:ec41dd1
Compliant
Download Evidence Package
JSON
{
"created_at": 1695888916.7580926,
"fingerprint": "1397e6b171feac8c67089a2acaaeef6dc2cd931a233402f1c8e2bec558869d94",
"filename": "cyberdojo/shas:ec41dd1",
"git_commit": "ec41dd1e70d8ed0af0b78a5093049bea8fd18463",
"build_url": "https://github.com/cyber-dojo/shas/actions/runs/6336270346",
"commit_url": "https://github.com/cyber-dojo/shas/commit/ec41dd1e70d8ed0af0b78a5093049bea8fd18463",
"evidence": {
"branch-coverage": {
"evidence_type": "generic",
"is_compliant": true,
"build_url": "https://github.com/cyber-dojo/shas/actions/runs/6336270346",
"description": "server & client branch-coverage reports",
"user_data": {
"client": {
"command_name": "Minitest",
"groups": {
"app": {
"branches": {
"covered": 1,
"missed": 1,
"total": 2
},
"lines": {
"covered": 52,
"missed": 0,
"total": 52
}
},
"test": {
"branches": {
"covered": 0,
"missed": 0,
"total": 0
},
"lines": {
"covered": 0,
"missed": 0,
"total": 0
}
}
},
"timestamp": 1695888891
},
"server": {
"command_name": "Minitest",
"groups": {
"app": {
"branches": {
"covered": 0,
"missed": 0,
"total": 0
},
"lines": {
"covered": 69,
"missed": 0,
"total": 69
}
},
"test": {
"branches": {
"covered": 0,
"missed": 0,
"total": 0
},
"lines": {
"covered": 0,
"missed": 0,
"total": 0
}
}
},
"timestamp": 1695888883
}
},
"created_at": 1695888919.283969,
"has_audit_package": false
},
"snyk-scan": {
"evidence_type": "snyk",
"is_compliant": true,
"build_url": "https://github.com/cyber-dojo/shas/actions/runs/6336270346",
"evidence_archive_fingerprint": "40b6026df3fc5bbbc280ce128d439c1affa54da81a1ebe6319985ce84631dac8",
"user_data": {},
"snyk_results": {
"applications": [
{
"dependencyCount": 0,
"displayTargetFile": "/usr/local/bundle/gems/concurrent-ruby-1.2.2/lib/concurrent-ruby/concurrent",
"docker": {},
"filesystemPolicy": true,
"hasUnknownVersions": false,
"ignoreSettings": {
"adminOnly": false,
"disregardFilesystemIgnores": false,
"reasonRequired": false
},
"isPrivate": true,
"licensesPolicy": {
"orgLicenseRules": {
"AGPL-1.0": {
"instructions": "",
"licenseType": "AGPL-1.0",
"severity": "high"
},
"AGPL-3.0": {
"instructions": "",
"licenseType": "AGPL-3.0",
"severity": "high"
},
"Artistic-1.0": {
"instructions": "",
"licenseType": "Artistic-1.0",
"severity": "medium"
},
"Artistic-2.0": {
"instructions": "",
"licenseType": "Artistic-2.0",
"severity": "medium"
},
"CDDL-1.0": {
"instructions": "",
"licenseType": "CDDL-1.0",
"severity": "medium"
},
"CPOL-1.02": {
"instructions": "",
"licenseType": "CPOL-1.02",
"severity": "high"
},
"EPL-1.0": {
"instructions": "",
"licenseType": "EPL-1.0",
"severity": "medium"
},
"GPL-2.0": {
"instructions": "",
"licenseType": "GPL-2.0",
"severity": "high"
},
"GPL-3.0": {
"instructions": "",
"licenseType": "GPL-3.0",
"severity": "high"
},
"LGPL-2.0": {
"instructions": "",
"licenseType": "LGPL-2.0",
"severity": "medium"
},
"LGPL-2.1": {
"instructions": "",
"licenseType": "LGPL-2.1",
"severity": "medium"
},
"LGPL-3.0": {
"instructions": "",
"licenseType": "LGPL-3.0",
"severity": "medium"
},
"MPL-1.1": {
"instructions": "",
"licenseType": "MPL-1.1",
"severity": "medium"
},
"MPL-2.0": {
"instructions": "",
"licenseType": "MPL-2.0",
"severity": "medium"
},
"MS-RL": {
"instructions": "",
"licenseType": "MS-RL",
"severity": "medium"
},
"SimPL-2.0": {
"instructions": "",
"licenseType": "SimPL-2.0",
"severity": "high"
}
},
"severities": {}
},
"ok": true,
"org": "jonjagger",
"packageManager": "maven",
"path": "cyberdojo/shas:ec41dd1/shas:ec41dd1:/usr/local/bundle/gems/concurrent-ruby-1.2.2/lib/concurrent-ruby/concurrent",
"policy": "# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.\nversion: v1.25.1\n# ignores vulnerabilities until expiry date; change duration by modifying expiry date\nignore:\n SNYK-ALPINE318-PROCPSNG-5877704:\n - '*':\n reason: Wait for fix in base image\n expires: 2023-10-16T04:33:51.513Z\n created: 2023-09-16T04:33:51.517Z\n source: cli\npatch: {}\n",
"projectName": "cyberdojo/shas:ec41dd1:/usr/local/bundle/gems/concurrent-ruby-1.2.2/lib/concurrent-ruby/concurrent",
"summary": "No known vulnerabilities",
"targetFile": "/usr/local/bundle/gems/concurrent-ruby-1.2.2/lib/concurrent-ruby/concurrent",
"uniqueCount": 0,
"vulnerabilities": []
}
],
"dependencyCount": 80,
"docker": {
"baseImage": "ruby:3.2.2-alpine3.18",
"baseImageRemediation": {
"advice": [
{
"message": "Base Image Vulnerabilities Severity\nruby:3.2.2-alpine3.18 1 0 critical, 0 high, 1 medium, 0 low\n"
},
{
"bold": true,
"message": "Recommendations for base image upgrade:\n"
},
{
"bold": true,
"message": "Alternative image types"
},
{
"message": "Base Image Vulnerabilities Severity\nruby:3.3.0-preview2-slim-bullseye 58 0 critical, 0 high, 0 medium, 58 low\nruby:3.3.0-preview1-slim-bullseye 58 0 critical, 0 high, 0 medium, 58 low\nruby:3.2.2-slim-bullseye 58 0 critical, 0 high, 0 medium, 58 low\n"
}
],
"code": "REMEDIATION_AVAILABLE"
},
"binariesVulns": {
"affectedPkgs": {},
"issuesData": {}
}
},
"filesystemPolicy": true,
"hasUnknownVersions": false,
"ignoreSettings": {
"adminOnly": false,
"disregardFilesystemIgnores": false,
"reasonRequired": false
},
"isPrivate": true,
"licensesPolicy": {
"orgLicenseRules": {
"AGPL-1.0": {
"instructions": "",
"licenseType": "AGPL-1.0",
"severity": "high"
},
"AGPL-3.0": {
"instructions": "",
"licenseType": "AGPL-3.0",
"severity": "high"
},
"Artistic-1.0": {
"instructions": "",
"licenseType": "Artistic-1.0",
"severity": "medium"
},
"Artistic-2.0": {
"instructions": "",
"licenseType": "Artistic-2.0",
"severity": "medium"
},
"CDDL-1.0": {
"instructions": "",
"licenseType": "CDDL-1.0",
"severity": "medium"
},
"CPOL-1.02": {
"instructions": "",
"licenseType": "CPOL-1.02",
"severity": "high"
},
"EPL-1.0": {
"instructions": "",
"licenseType": "EPL-1.0",
"severity": "medium"
},
"GPL-2.0": {
"instructions": "",
"licenseType": "GPL-2.0",
"severity": "high"
},
"GPL-3.0": {
"instructions": "",
"licenseType": "GPL-3.0",
"severity": "high"
},
"LGPL-2.0": {
"instructions": "",
"licenseType": "LGPL-2.0",
"severity": "medium"
},
"LGPL-2.1": {
"instructions": "",
"licenseType": "LGPL-2.1",
"severity": "medium"
},
"LGPL-3.0": {
"instructions": "",
"licenseType": "LGPL-3.0",
"severity": "medium"
},
"MPL-1.1": {
"instructions": "",
"licenseType": "MPL-1.1",
"severity": "medium"
},
"MPL-2.0": {
"instructions": "",
"licenseType": "MPL-2.0",
"severity": "medium"
},
"MS-RL": {
"instructions": "",
"licenseType": "MS-RL",
"severity": "medium"
},
"SimPL-2.0": {
"instructions": "",
"licenseType": "SimPL-2.0",
"severity": "high"
}
},
"severities": {}
},
"ok": true,
"org": "jonjagger",
"packageManager": "apk",
"path": "cyberdojo/shas:ec41dd1/shas",
"platform": "linux/amd64",
"policy": "# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.\nversion: v1.25.1\n# ignores vulnerabilities until expiry date; change duration by modifying expiry date\nignore:\n SNYK-ALPINE318-PROCPSNG-5877704:\n - '*':\n reason: Wait for fix in base image\n expires: 2023-10-16T04:33:51.513Z\n created: 2023-09-16T04:33:51.517Z\n source: cli\npatch: {}\n",
"projectName": "docker-image|cyberdojo/shas",
"summary": "No known operating system vulnerabilities",
"uniqueCount": 0,
"vulnerabilities": []
},
"created_at": 1695888935.3856218,
"has_audit_package": true
}
},
"repo_url": "https://github.com/cyber-dojo/shas",
"template": [
"artifact",
"branch-coverage",
"snyk-scan"
],
"last_modified_at": 1695888935.3856218,
"deployments": [
56,
55
],
"state": "COMPLIANT",
"html_url": "https://app.kosli.com/cyber-dojo/flows/shas-archived-at-1705491385/artifacts/1397e6b171feac8c67089a2acaaeef6dc2cd931a233402f1c8e2bec558869d94",
"api_url": "https://app.kosli.com/api/v2/artifacts/cyber-dojo/shas-archived-at-1705491385/fingerprint/1397e6b171feac8c67089a2acaaeef6dc2cd931a233402f1c8e2bec558869d94"
}
Artifact Information |
|
| Name | cyberdojo/shas:ec41dd1 |
| Fingerprint | 1397e6b171feac8c67089a2acaaeef6dc2cd931a233402f1c8e2bec558869d94 |
| Git commit | ec41dd1 |
| CI Build | https://github.com/cyber-dojo/shas/actions/runs/6336270346 |
| Running | - |
| Exited | aws-beta#1808 aws-prod#1078 |
| Last modified | 1695888935.3856218 • 7 months ago |
Approvals
| None |
Evidence
Evidence for 'branch-coverage'
{ "evidence_type": "generic", "name": "branch-coverage", "is_compliant": true, "build_url": "https://github.com/cyber-dojo/shas/actions/runs/6336270346", "description": "server & client branch-coverage reports", "user_data": { "client": { "command_name": "Minitest", "groups": { "app": { "branches": { "covered": 1, "missed": 1, "total": 2 }, "lines": { "covered": 52, "missed": 0, "total": 52 } }, "test": { "branches": { "covered": 0, "missed": 0, "total": 0 }, "lines": { "covered": 0, "missed": 0, "total": 0 } } }, "timestamp": 1695888891 }, "server": { "command_name": "Minitest", "groups": { "app": { "branches": { "covered": 0, "missed": 0, "total": 0 }, "lines": { "covered": 69, "missed": 0, "total": 69 } }, "test": { "branches": { "covered": 0, "missed": 0, "total": 0 }, "lines": { "covered": 0, "missed": 0, "total": 0 } } }, "timestamp": 1695888883 } }, "created_at": 1695888919.283969, "has_audit_package": false }
Evidence for 'snyk-scan'
{ "evidence_type": "snyk", "name": "snyk-scan", "is_compliant": true, "build_url": "https://github.com/cyber-dojo/shas/actions/runs/6336270346", "evidence_archive_fingerprint": "40b6026df3fc5bbbc280ce128d439c1affa54da81a1ebe6319985ce84631dac8", "user_data": {}, "snyk_results": { "applications": [ { "dependencyCount": 0, "displayTargetFile": "/usr/local/bundle/gems/concurrent-ruby-1.2.2/lib/concurrent-ruby/concurrent", "docker": {}, "filesystemPolicy": true, "hasUnknownVersions": false, "ignoreSettings": { "adminOnly": false, "disregardFilesystemIgnores": false, "reasonRequired": false }, "isPrivate": true, "licensesPolicy": { "orgLicenseRules": { "AGPL-1.0": { "instructions": "", "licenseType": "AGPL-1.0", "severity": "high" }, "AGPL-3.0": { "instructions": "", "licenseType": "AGPL-3.0", "severity": "high" }, "Artistic-1.0": { "instructions": "", "licenseType": "Artistic-1.0", "severity": "medium" }, "Artistic-2.0": { "instructions": "", "licenseType": "Artistic-2.0", "severity": "medium" }, "CDDL-1.0": { "instructions": "", "licenseType": "CDDL-1.0", "severity": "medium" }, "CPOL-1.02": { "instructions": "", "licenseType": "CPOL-1.02", "severity": "high" }, "EPL-1.0": { "instructions": "", "licenseType": "EPL-1.0", "severity": "medium" }, "GPL-2.0": { "instructions": "", "licenseType": "GPL-2.0", "severity": "high" }, "GPL-3.0": { "instructions": "", "licenseType": "GPL-3.0", "severity": "high" }, "LGPL-2.0": { "instructions": "", "licenseType": "LGPL-2.0", "severity": "medium" }, "LGPL-2.1": { "instructions": "", "licenseType": "LGPL-2.1", "severity": "medium" }, "LGPL-3.0": { "instructions": "", "licenseType": "LGPL-3.0", "severity": "medium" }, "MPL-1.1": { "instructions": "", "licenseType": "MPL-1.1", "severity": "medium" }, "MPL-2.0": { "instructions": "", "licenseType": "MPL-2.0", "severity": "medium" }, "MS-RL": { "instructions": "", "licenseType": "MS-RL", "severity": "medium" }, "SimPL-2.0": { "instructions": "", "licenseType": "SimPL-2.0", "severity": "high" } }, "severities": {} }, "ok": true, "org": "jonjagger", "packageManager": "maven", "path": "cyberdojo/shas:ec41dd1/shas:ec41dd1:/usr/local/bundle/gems/concurrent-ruby-1.2.2/lib/concurrent-ruby/concurrent", "policy": "# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.\nversion: v1.25.1\n# ignores vulnerabilities until expiry date; change duration by modifying expiry date\nignore:\n SNYK-ALPINE318-PROCPSNG-5877704:\n - '*':\n reason: Wait for fix in base image\n expires: 2023-10-16T04:33:51.513Z\n created: 2023-09-16T04:33:51.517Z\n source: cli\npatch: {}\n", "projectName": "cyberdojo/shas:ec41dd1:/usr/local/bundle/gems/concurrent-ruby-1.2.2/lib/concurrent-ruby/concurrent", "summary": "No known vulnerabilities", "targetFile": "/usr/local/bundle/gems/concurrent-ruby-1.2.2/lib/concurrent-ruby/concurrent", "uniqueCount": 0, "vulnerabilities": [] } ], "dependencyCount": 80, "docker": { "baseImage": "ruby:3.2.2-alpine3.18", "baseImageRemediation": { "advice": [ { "message": "Base Image Vulnerabilities Severity\nruby:3.2.2-alpine3.18 1 0 critical, 0 high, 1 medium, 0 low\n" }, { "bold": true, "message": "Recommendations for base image upgrade:\n" }, { "bold": true, "message": "Alternative image types" }, { "message": "Base Image Vulnerabilities Severity\nruby:3.3.0-preview2-slim-bullseye 58 0 critical, 0 high, 0 medium, 58 low\nruby:3.3.0-preview1-slim-bullseye 58 0 critical, 0 high, 0 medium, 58 low\nruby:3.2.2-slim-bullseye 58 0 critical, 0 high, 0 medium, 58 low\n" } ], "code": "REMEDIATION_AVAILABLE" }, "binariesVulns": { "affectedPkgs": {}, "issuesData": {} } }, "filesystemPolicy": true, "hasUnknownVersions": false, "ignoreSettings": { "adminOnly": false, "disregardFilesystemIgnores": false, "reasonRequired": false }, "isPrivate": true, "licensesPolicy": { "orgLicenseRules": { "AGPL-1.0": { "instructions": "", "licenseType": "AGPL-1.0", "severity": "high" }, "AGPL-3.0": { "instructions": "", "licenseType": "AGPL-3.0", "severity": "high" }, "Artistic-1.0": { "instructions": "", "licenseType": "Artistic-1.0", "severity": "medium" }, "Artistic-2.0": { "instructions": "", "licenseType": "Artistic-2.0", "severity": "medium" }, "CDDL-1.0": { "instructions": "", "licenseType": "CDDL-1.0", "severity": "medium" }, "CPOL-1.02": { "instructions": "", "licenseType": "CPOL-1.02", "severity": "high" }, "EPL-1.0": { "instructions": "", "licenseType": "EPL-1.0", "severity": "medium" }, "GPL-2.0": { "instructions": "", "licenseType": "GPL-2.0", "severity": "high" }, "GPL-3.0": { "instructions": "", "licenseType": "GPL-3.0", "severity": "high" }, "LGPL-2.0": { "instructions": "", "licenseType": "LGPL-2.0", "severity": "medium" }, "LGPL-2.1": { "instructions": "", "licenseType": "LGPL-2.1", "severity": "medium" }, "LGPL-3.0": { "instructions": "", "licenseType": "LGPL-3.0", "severity": "medium" }, "MPL-1.1": { "instructions": "", "licenseType": "MPL-1.1", "severity": "medium" }, "MPL-2.0": { "instructions": "", "licenseType": "MPL-2.0", "severity": "medium" }, "MS-RL": { "instructions": "", "licenseType": "MS-RL", "severity": "medium" }, "SimPL-2.0": { "instructions": "", "licenseType": "SimPL-2.0", "severity": "high" } }, "severities": {} }, "ok": true, "org": "jonjagger", "packageManager": "apk", "path": "cyberdojo/shas:ec41dd1/shas", "platform": "linux/amd64", "policy": "# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.\nversion: v1.25.1\n# ignores vulnerabilities until expiry date; change duration by modifying expiry date\nignore:\n SNYK-ALPINE318-PROCPSNG-5877704:\n - '*':\n reason: Wait for fix in base image\n expires: 2023-10-16T04:33:51.513Z\n created: 2023-09-16T04:33:51.517Z\n source: cli\npatch: {}\n", "projectName": "docker-image|cyberdojo/shas", "summary": "No known operating system vulnerabilities", "uniqueCount": 0, "vulnerabilities": [] }, "created_at": 1695888935.3856218, "has_audit_package": true }