{ "ml": { "v": "7", "eng": "2.8.0", "lvl": -1, "conf": 0, "mods": [ { "cls": 0, "raw": 0.48084384, "rte": "az", "prob": 0.48084384 }, { "cls": 0, "raw": 0.07842267, "rte": "az/zip", "prob": 0.07842267 } ], "prob": 0.48084384, "files": [ { "id": 0, "lvl": -1, "conf": 0, "prob": 0.48084384202957153, "type": "zip" }, { "id": 13, "lvl": -1, "conf": 0, "prob": 0.000010907649993896484, "type": "perl" }, { "id": 14, "lvl": -1, "conf": 0, "prob": 0.00000998377799987793, "type": "perl" }, { "id": 15, "lvl": -1, "conf": 0, "prob": 0.000022411346435546875, "type": "shell" }, { "id": 17, "lvl": -1, "conf": 0, "prob": 0.000008722146048967261, "type": "shell" }, { "id": 19, "lvl": -1, "conf": 0, "prob": 0.000010987122550432105, "type": "github_actions" }, { "id": 23, "lvl": -1, "conf": 0, "prob": 0.00000904997159523191, "type": "lua" }, { "id": 24, "lvl": -1, "conf": 0, "prob": 0.00000959634780883789, "type": "lua" }, { "id": 29, "lvl": -1, "conf": 0, "prob": 0.000008195638656616211, "type": "lua" }, { "id": 32, "lvl": -1, "conf": 0, "prob": 0.000007361173629760742, "type": "lua" }, { "id": 33, "lvl": -1, "conf": 0, "prob": 0.000008185704245988745, "type": "lua" }, { "id": 34, "lvl": -1, "conf": 0, "prob": 0.000009079773917619605, "type": "registry" } ], "version": "v18.18", "analyzed_at": "2026-08-30T08:10:00Z" }, "path": "lua-resty-acme-0.9.0-1.src.rock", "raw": { "files": [ { "id": 0, "ctx": [ { "b": "p!H([6Awak2ML(PtudF(}]H]3007jE0018v8#%!$vj=IhB98WVvpKd=eIF!qe?!\u003eie]\u003e(uyJBDav]VFm00sbBt4nDRt4qY13JHhg]-k3)1qy?o0f@*zKjb=]Hvs{MQG^^JnM)x)Si!7u^+w!JXVEu-(R5i8:bYHTq9:lLv([xNKDgY=ddomz/Fv3nx8BevaLYpm8\u003cRtF", "ln": 0 } ], "mol": "H₅(Cm₁₁Cr₄F₄Os₄Po₂)Md₂(BkPa)", "sha": "391ba3f1479afdbece336fbfdd807c004bc581b4ec479083519315e52e23313a", "path": "/tmp/cyclotron-7af1572c/samples/391ba3f1479a/lua-resty-acme-0.9.0-1.src.rock", "risk": 15, "size": 65902, "type": "zip", "facts": { "metrics": { "file": { "size": 65902, "entropy": 7.84 }, "binary": { "peak_region_bytes": 56320, "peak_region_entropy": 7.83 }, "archive": { "file_count": 42, "member_count": 56, "script_count": 15, "zip_bomb_ratio": 6.12, "compressed_size": 54780, "directory_count": 14, "executable_count": 3, "extra_field_size": 1344, "noise_file_count": 0, "compression.ratio": 0.3, "hidden_file_count": 8, "uncompressed_size": 185605, "crc_collision_count": 1, "entry_comment_count": 0, "max_filename_length": 55, "rtlo_filename_count": 0, "format.regular_count": 42, "nested_archive_count": 0, "path_traversal_count": 0, "symlink_escape_count": 0, "security.setgid_count": 0, "security.setuid_count": 0, "security.sticky_count": 0, "double_extension_count": 0, "duplicate_member_count": 0, "format.directory_count": 14, "security.symlink_count": 0, "unicode_filename_count": 0, "homoglyph_filename_count": 0, "security.encrypted_count": 0, "timing.mtime_unique_count": 1, "timing.mtime_unique_ratio": 0.02, "misplaced_executable_count": 0, "timing.mtime_dominant_count": 56, "timing.mtime_spread_seconds": 0, "timing.sentinel_mtime_count": 0, "security.world_writable_count": 0, "timing.mtime_dominant_fraction": 1, "compression.method_counts.stored": 14, "compression.method_counts.deflate": 42 }, "consistency": { "extension_content_mismatch": 1, "extension_content_mismatch.archive_as_unknown": 1 } } }, "traits": [ { "id": "micro-behaviors/os/package-manager/apt::apt-package-install-command", "conf": 0.98, "crit": 3, "desc": "Runs an APT package install command", "from": [ { "file": 19 } ] }, { "id": "micro-behaviors/fs/chmod/modify::chmod-command", "atk": "T1222", "mbc": "E1222", "conf": 0.6, "crit": 3, "desc": "chmod shell command", "from": [ { "file": 15 } ] }, { "id": "micro-behaviors/crypto/hash/hmac::hmac-api-reference", "mbc": "C0029", "conf": 0.9, "crit": 3, "desc": "References an HMAC API", "from": [ { "file": 33 } ] }, { "id": "micro-behaviors/communications/http/header/content-type::json-header", "conf": 0.9, "crit": 3, "desc": "References HTTP Content-Type application/json", "from": [ { "file": 15 } ] }, { "id": "micro-behaviors/os/container/runtime::secrets-path", "conf": 0.7, "crit": 3, "desc": "Kubernetes secrets path", "from": [ { "file": 24 } ] }, { "id": "micro-behaviors/os/container/runtime::serviceaccount-token", "conf": 0.8, "crit": 3, "desc": "Kubernetes service-account token path", "from": [ { "file": 24 } ] }, { "id": "micro-behaviors/crypto/certificate/usage::x509-string", "conf": 0.6, "crit": 2, "desc": "References X.509 certificate terminology", "from": [ { "file": 13 } ] }, { "id": "micro-behaviors/communications/http/download/shell::shell-curl-url-call", "atk": "T1105", "conf": 0.8, "crit": 3, "desc": "curl call names an HTTP URL", "from": [ { "file": 15 } ] }, { "id": "metadata/file/extension/identity::shell-a", "conf": 1.0, "crit": 2, "desc": "POSIX shell script extension", "from": [ { "file": 15 } ] }, { "id": "metadata/package/testing/presence/harness::perl-test-file", "conf": 0.85, "crit": 2, "desc": "Perl test file (.t) or t/ dir", "from": [ { "file": 4 } ] }, { "id": "metadata/build/ci/trigger::scheduled-workflow-trigger", "conf": 0.9, "crit": 3, "desc": "GitHub scheduled workflow trigger" }, { "id": "micro-behaviors/crypto/asymmetric/rsa::embedded-pem-pubkey", "mbc": "C0027", "conf": 0.85, "crit": 3, "desc": "Embedded PEM public key in shell script", "from": [ { "file": 15 } ] }, { "id": "micro-behaviors/communications/http/tls::curl-insecure", "mbc": "C0005", "conf": 0.95, "crit": 3, "desc": "curl disables TLS certificate verification", "from": [ { "file": 15 } ] }, { "id": "micro-behaviors/communications/http/endpoints::loopback-http-url-reference", "conf": 0.9, "crit": 3, "desc": "References a loopback HTTP URL", "from": [ { "file": 15 } ] }, { "id": "micro-behaviors/communications/http/url/scheme::cleartext-http-url", "atk": "T1071.001", "mbc": "C0002", "conf": 0.9, "crit": 3, "desc": "Cleartext http:// URL", "from": [ { "file": 15 } ] }, { "id": "micro-behaviors/crypto/certificate/usage::acme-directory-endpoint", "conf": 0.95, "crit": 3, "desc": "References an ACME directory endpoint", "from": [ { "file": 33 } ] }, { "id": "micro-behaviors/crypto/certificate/usage::pem-begin", "conf": 0.7, "crit": 2, "desc": "References PEM certificate header", "from": [ { "file": 29 } ] }, { "id": "micro-behaviors/crypto/certificate/usage::ca-certificates", "conf": 0.8, "crit": 2, "desc": "References a CA certificate bundle", "from": [ { "file": 15 } ] }, { "id": "micro-behaviors/fs/shell-ops::cp-command", "conf": 0.9, "crit": 3, "desc": "Shell text contains a cp file-copy command", "from": [ { "file": 17 } ] }, { "id": "micro-behaviors/os/container/runtime::docker-cli-run-create", "conf": 0.82, "crit": 3, "desc": "Docker CLI run or create command", "from": [ { "file": 15 } ] }, { "id": "metadata/package/testing/presence/harness::test-directory", "conf": 1.0, "crit": 2, "desc": "File identified as a test by path or name", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/fs/path/temp::unix-temp", "conf": 0.7, "crit": 2, "desc": "Unix /tmp/ path reference", "from": [ { "file": 8 } ] }, { "id": "micro-behaviors/crypto/certificate/usage::ssl-certs-path", "conf": 0.8, "crit": 2, "desc": "References the system TLS certificate directory", "from": [ { "file": 15 } ] }, { "id": "micro-behaviors/communications/http/login::http-login-path", "atk": "T1071.001", "conf": 0.88, "crit": 3, "desc": "HTTP login path", "from": [ { "file": 24 } ] }, { "id": "micro-behaviors/communications/http/curl::curl-post-flag", "atk": "T1071.001", "mbc": "C0002", "conf": 0.8, "crit": 3, "desc": "curl explicitly sends an HTTP POST request", "from": [ { "file": 15 } ] }, { "id": "micro-behaviors/process/create/vcs/git::shell-git-commit", "atk": "T1059.004", "conf": 0.92, "crit": 3, "desc": "Commits changes to a Git repository", "from": [ { "file": 17 } ] }, { "id": "micro-behaviors/communications/http/curl::curl-post-custom-header", "atk": "T1071.001", "mbc": "C0002", "conf": 0.82, "crit": 3, "desc": "curl POST request with custom header", "from": [ { "file": 15 } ] }, { "id": "micro-behaviors/crypto/asymmetric/key::pem-public-key-header", "conf": 0.9, "crit": 3, "desc": "References PEM public-key header", "from": [ { "file": 15 } ] }, { "id": "micro-behaviors/os/env/modify::perl-environment-assignment", "conf": 0.88, "crit": 3, "desc": "Perl assigns process environment variables", "from": [ { "file": 13 } ] }, { "id": "micro-behaviors/fs/chmod/executable/mode::chmod-exec-absolute-path", "atk": "T1222", "mbc": "E1222", "conf": 0.92, "crit": 3, "desc": "chmod makes an absolute path executable", "from": [ { "file": 15 } ] }, { "id": "micro-behaviors/communications/http/curl::curl-data-option", "atk": "T1071.001", "mbc": "C0002", "conf": 0.88, "crit": 3, "desc": "curl sends an HTTP request body", "from": [ { "file": 15 } ] }, { "id": "metadata/file/profile/language::lang-english--atom-1", "conf": 0.8, "crit": 2, "desc": "English function-word token \"the\"", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/crypto/certificate/usage::openssl-self-signed-cert", "atk": "T1587.003", "conf": 0.85, "crit": 3, "desc": "Generates self-signed TLS certificate", "from": [ { "file": 15 } ] }, { "id": "micro-behaviors/communications/http/url/forge::public-code-forge-url", "conf": 0.9, "crit": 3, "desc": "References a public code-forge URL", "from": [ { "file": 13 } ] }, { "id": "micro-behaviors/communications/http/token-auth::jwt-rsa-algorithm-field", "conf": 0.9, "crit": 3, "desc": "RSA algorithm field", "from": [ { "file": 33 } ] }, { "id": "micro-behaviors/communications/http/download/cli::curl-command-call", "atk": "T1105", "conf": 0.96, "crit": 3, "desc": "Shell invokes the curl command", "from": [ { "file": 15 } ] }, { "id": "micro-behaviors/communications/http/download/cli::fetch-output-flag-structured-file", "conf": 0.84, "crit": 3, "desc": "Structured file has curl/wget output path", "from": [ { "file": 19 } ] }, { "id": "micro-behaviors/os/container/runtime::projected-serviceaccount-token", "conf": 0.82, "crit": 3, "desc": "Kubernetes projected service-account path", "from": [ { "file": 24 } ] }, { "id": "micro-behaviors/crypto/certificate/usage::pem-end", "conf": 0.7, "crit": 2, "desc": "References PEM certificate footer", "from": [ { "file": 29 } ] }, { "id": "micro-behaviors/fs/path/temp::tmp-path-content", "conf": 1.0, "crit": 2, "desc": "Contains a /tmp/ or /var/tmp/ path", "from": [ { "file": 8 } ] }, { "id": "micro-behaviors/process/debug/symbol::lua-debug-module-access", "conf": 0.9, "crit": 3, "desc": "Accesses Lua debug module", "from": [ { "file": 29 } ] }, { "id": "micro-behaviors/communications/socket/bind/address::bind-all-interfaces", "conf": 0.8, "crit": 3, "desc": "Binds or listens on all interfaces (0.0.0.0)", "from": [ { "file": 15 } ] }, { "id": "micro-behaviors/os/container/runtime::container-runtime-secrets-path", "conf": 0.82, "crit": 3, "desc": "Container runtime secrets path", "from": [ { "file": 24 } ] }, { "id": "micro-behaviors/fs/chmod/executable/dangerous::shell-777", "atk": "T1222", "mbc": "E1222", "conf": 0.8, "crit": 3, "desc": "chmod 777 (world-writable+executable)", "from": [ { "file": 15 } ] }, { "id": "micro-behaviors/os/env/access::lua-os-getenv", "conf": 0.85, "crit": 3, "desc": "Lua environment variable access", "from": [ { "file": 23 } ] }, { "id": "metadata/file/profile/language::lang-english--atom-2", "conf": 0.8, "crit": 2, "desc": "English function-word token \"and\"", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/fs/path/temp::win-temp-env-source-read", "conf": 0.85, "crit": 3, "desc": "Reads the Windows TEMP environment variable", "from": [ { "file": 23 } ] }, { "id": "micro-behaviors/crypto/certificate/usage::certificate-ref", "conf": 0.5, "crit": 2, "desc": "References certificate terminology", "from": [ { "file": 8 } ] }, { "id": "micro-behaviors/fs/chmod/executable/dangerous::shell-777-decimal", "atk": "T1222", "mbc": "E1222", "conf": 0.8, "crit": 3, "desc": "Shell calls chmod with mode 777", "from": [ { "file": 15 } ] }, { "id": "micro-behaviors/fs/chmod/executable/mode::chmod-exec-tmp-file", "atk": "T1222", "mbc": "E1222", "conf": 0.9, "crit": 3, "desc": "chmod marks /tmp file executable", "from": [ { "file": 15 } ] }, { "id": "metadata/package/files/credentials::package-fixture-key-or-certificate-member", "conf": 0.92, "crit": 3, "desc": "Package fixture key or certificate member" } ] }, { "ctx": [ { "b": "boRezz8#-HBrCgqjS[\u0026/jV1p5CrE=9wPP5bwnKFDvrcc{AYKKmB-RapraQb)iYZ2Gx(neRi-x%byH}PGi.TW8asz5BuVo*\u0026zymHMB-RaplW95-AD-*vCvSc:3jmbSC{1wKCvR*Vay/Rac[dj+3t19#uVZi[zF9W3CQK+nmn)e)r8M\u003eapesRLmpeRYmOcuDr7fF-jUXcfi%(rumnu)gcV\u003chMEipV}BzkP6i%(soBZ=EOi=eqvwNxa)Bz$O%z/ff3xl%$darR!zC{1HXyH}=#BA}?pB1wBVyH}=#Aa9\u003c4efDiFxKLZ[wO#c(B1wBVB7/z$zEEx[efDiVBz(hdxjSImjS)0%i%)8MarR}JxL?9]vqPM#E0!71b4j$#wG\u003chyao", "ln": 0, "col": 1, "line": 1 }, { "b": "arR^HarR!vzFsi1vThr%BZXS^y\u0026r*0aBsCrarR^HarR^HarR^UeG/1vByO#by\u0026r/(y?N:dBrCWzaAz4mz!%PdaARJAf!$WufFk4if^5I?vpJ\u003e/vqG^w3lQDlarR^HarR^Hat2e/Cw8mAA+frgy\u003c6xgazCZoxk8E3BZ=F4v@#B6zGu}hz!j0ccV*FPz/PRT3i", "ln": 615, "col": 2, "line": 23 }, { "b": "z!0i(aA87buVY^%uT[1(zE)s13jm)#arR^HarR^HarSl/az$+4wft#jay]ykBzbkdwQ5rqvix5[wN/G#xK#i}iV@9TBz#pZfe3%LBzb/ae[n*pfk\u003e/vzGorfBA]JQBZV\u003etxk8mdeP2ApB.\u003eRxx(!urwPGH:hztEXarR^HarR^HarR!yz!0i(azb+lv@#B6zxK1xA+PG1zFr{dc$WglB95@QB7F\u003c1zE+g6arR^HarR^HarR^HarR^Hx\u003ewGewN/T@wft#cwO}?$arR^HarR^HarQ", "ln": 824, "col": 14, "line": 27 }, { "b": "wmoC0wPw[Rar\u00267LBz(hdxjSnr3lQDlarR^HarR^HarR^Hat2e/vS=KbaA.SCBzbxfaAIvkxj#y6C{3*saARgoBp6ckarR^HarR^HarR^HarUfcvqG:\u003ezF9J/B97\u0026hByeM\u0026y*?PijS(Ki3lQDlarR^HarR^HaBL^-DKp(rarR^HarR^HarR^HarU9i", "ln": 2361, "col": 26, "line": 71 }, { "b": "arR^Hy\u0026%e[B8#e8BAhIBBy!#\u0026v}xX5x\u003ez6?vru66e?O!fe?Z*JCYX7GwPGIzwNYa+wId?lzFrP?e]Uxsi%)8MarV7tEld=yB9g}miY.a^yH{\u003c\u0026vqfQ^v@Dl%x\u003eI=1arR^HzfWlLbX{$puVZNjwPGyBbX{$puVoB}", "ln": 2679, "col": 5, "line": 82 }, { "b": "wO@RFgb7B9B8#dV3lQDlarR^HarR^HarR^HarR^HaAIQuuT)U/Bzku3v{%E\u003catm?NA4+:kw)]*#Bs}Jzz957EarR^HarR^HarR^HarR^HarR!FB8kh[wPz)bw[+:-By!/{wQbyKBzU$IwmYvYB.(dLyH}=M3jm)#arR^HarR^HarR^HarR^HarU-Dy*QW-A==2cx\u003e7N[wNw[(uU\u003c\u003c[uT^?\u0026v@0il3lQDlarR^HarR^", "ln": 3344, "col": 25, "line": 105 }, { "b": "arR^HarR^HarR^HEf}8tarR^HarR^HarUGsv{%f@z/{dearR^HarR^HarR^Hw]zYjx*1d3f/pHpay]x$arR^HarR^HarR^HarR^Hy\u0026r/(y-)Xqz^%[Maz$?puVoZ#wIe4yvrVPqDNAohB7={Lasw:JcOcw:wN/y(aAnJKz/xo9B8#duB6\u0026A[x\u003eqe", "ln": 4495, "col": 1, "line": 150 }, { "b": "zEEx[ar\u0026A\u003caz$?pe{pVze[w)qvqfQ4e?Om\u003cat4LJA=-AYfFCkez/xo9B8#duCR}fnat4FHz/{dAeP+MGBrz[SaAIvgwPe+Ce?[L#efF\u003eIBAn(rarR^HarR^HarR^HarR^Hy\u0026r/(y-)m%ByuZywPz/xaAg+fBzkf1auZ\u0026^A=kCGB97@hB-Z#hwNPaR", "ln": 4667, "col": 109, "line": 153 }, { "b": "aAz4kB.bSoaz2.8yZIvRmn$x.Bt4hXwI51nB96b*bT\u003eEeDNA]LcW^fCeIeK%A+frhz/fScuT^}:D0+x4yH[S1C42g]b2z\u0026WvR/P#nP5SYA=2w#x\u003c(9{e?op:tWht1jZqlkdRgwDeP+MBBtkx#A=UUTzEWZjAcb/jzxYAteIe8.z^N6@A=k#9y\u0026r}[tx:H@zE0PNwPz*fA:o1VjV$}Jr7f.+atL#2xMOuneIF[4v}Yp!y?mG%wGVhhBz8^{q:zJRavOT+ay]R6y-)k0A==vfeIeK%xMOunuT[1(w[+)2wP?G#iV{EAzddi\u003euUBL6A9)9[zF0P}c)y3VB73BEasy-gv\u003c-DKar\u0026EXze.dpv}fC1zGEHDwQa", "ln": 5183, "col": 4, "line": 167 }, { "b": "eOG6zBrAp[h.D^pfFk75ePUGzC4CYivqPM#a$+F\u003czFahDC42zzwn=r[x(k4Ce*8tXePtSGBrAB{fFKX4v}/)}wPw[ZlQTEleMbIkeKq*7f!$Zum)*05q+fhfh8Y\u00262AaJ{dB8h$zh843kePbGBB-X-TBy/YsasnATB8kA0A3c?!f^q2%aA8jvB14CsarR^HarR^HarR^HarR!yz!0i(ay[]5vjSKjA=JYNAa9^ex\u003c\u003e*2jS[Y:z^$?HByU", "ln": 6329, "col": 86, "line": 205 } ], "depth": 1, "facts": { "imp": [ [ "", "Cwd" ], [ "", "Test::Nginx::Socket::Lua" ] ], "metrics": { "ast": { "max_depth": 8, "call_count": 4, "node_count": 256, "max_array_len": 1 }, "file": { "size": 9386, "entropy": 4.48 }, "text": { "lines": 282, "top_char": 101, "max_ws_run": 1, "digit_ratio": 0.05, "space_count": 3013, "char_entropy": 4.48, "unique_chars": 83, "top_char_null": 0, "lines_over_200": 2, "string_density": 0.03, "top_char_ratio": 0.05, "avg_line_length": 32.29, "max_line_length": 238, "empty_line_ratio": 0.13, "last_line_length": 7, "whitespace_ratio": 0.35, "identifier_density": 0.01, "line_length_stddev": 32.29, "normalized_string_count": 0.54, "repeated_char_sequences": 134, "suspicious_string_ratio": 0.22, "normalized_unique_identifiers": 0.25 }, "binary": { "peak_region_bytes": 4266, "peak_region_entropy": 4.97 }, "source": { "function_count": 2 }, "imports": { "count": 2, "third_party_count": 2, "third_party_ratio": 1 }, "strings": { "bytes": 3283, "count": 9, "very_long": 1, "avg_length": 364.78, "max_length": 2411, "path_count": 1, "avg_entropy": 2.58, "email_count": 1, "entropy_stddev": 0.97, "embedded_code_candidates": 2 }, "comments": { "chars": 37, "count": 1, "lines": 1, "to_code_ratio": 0 }, "functions": { "count": 2 }, "identifiers": { "count": 2, "unique": 2, "avg_length": 18, "max_length": 18, "min_length": 18, "avg_entropy": 3.67, "reuse_ratio": 1, "high_entropy_count": 2, "high_entropy_ratio": 1 } } }, "id": 13, "mol": "H₂(CmOs)", "path": "/tmp/cyclotron-7af1572c/samples/391ba3f1479a/lua-resty-acme-0.9.0-1.src.rock!!lua-resty-acme/t/e2e.t", "pid": 0, "risk": 3, "sha": "e9499b7bce5d89697cf31866a849b035ba87985aefa4dc82cc550991672b7b7f", "size": 9386, "traits": [ { "id": "metadata/file/profile/language::lang-english--atom-1", "conf": 0.8, "crit": 2, "desc": "English function-word token \"the\"", "spans": [ [ 872, 0 ] ] }, { "id": "micro-behaviors/communications/http/url/forge::public-code-forge-url", "conf": 0.9, "crit": 3, "desc": "References a public code-forge URL", "spans": [ [ 894, 19 ] ] }, { "id": "micro-behaviors/os/env/modify::perl-environment-assignment", "conf": 0.88, "crit": 3, "desc": "Perl assigns process environment variables", "spans": [ [ 163, 14 ] ] }, { "id": "micro-behaviors/fs/path/temp::unix-temp", "conf": 0.7, "crit": 2, "desc": "Unix /tmp/ path reference", "spans": [ [ 3393, 0 ] ] }, { "id": "micro-behaviors/fs/path/temp::tmp-path-content", "conf": 1.0, "crit": 2, "desc": "Contains a /tmp/ or /var/tmp/ path", "spans": [ [ 3392, 0 ] ] }, { "id": "metadata/package/testing/presence/harness::perl-test-file", "conf": 0.85, "crit": 2, "desc": "Perl test file (.t) or t/ dir", "spans": [ [ 0, 0 ] ] }, { "id": "micro-behaviors/crypto/certificate/usage::x509-string", "conf": 0.6, "crit": 2, "desc": "References X.509 certificate terminology", "spans": [ [ 4715, 0 ] ] }, { "id": "metadata/package/testing/presence/harness::test-directory", "conf": 1.0, "crit": 2, "desc": "File identified as a test by path or name", "spans": [ [ 0, 0 ] ] } ], "type": "perl" }, { "id": 14, "mol": "H(Cm)", "sha": "0eacad75275a505d7f02c56d51e53974778d13bcde93f12a1c6bd014d576f23d", "path": "/tmp/cyclotron-7af1572c/samples/391ba3f1479a/lua-resty-acme-0.9.0-1.src.rock!!lua-resty-acme/t/util.t", "risk": 2, "size": 4254, "type": "perl", "depth": 1 }, { "ctx": [ { "b": "boXZHx(kOkvrl8?3t0ZXzY*l2A+fh#A+cw6z/fV9x(mH5B0p%4z!0M]AV/yBzxHJwat4dElR*DQrzl:!oI4VFr9@i(r7fXOk%[77cUmykfEE${wGTuope+d^uQvsVl%\u0026IXr7fXOk%[77cUmykfEE${A3c\u003e\u003ch.D^pfFk7vi5JxziYF#JfD:\u003ezzGx@payO[]zGE0MB7GxnwPw[BvScgbB98ChA4LTCAaJK3jUWpZAaJ{dB8h$twPn?ACR}fnat4FxCwy=naAzKiiY5JJhxTO!wQeipBrAkUze.dzwQb[EwO\u0026Lwz/{dAflz5IfjONlBs}Jzz6gAvvr(]pf^55=z!9B2at4USvRN2kfgeF$B8L]be{pVCy\u0026?3iv}YZ$wfr/\u0026hY%+}ze.dzwQb[EwO\u0026LyBzU$Iv}xX5e]Uxs3s[6+yH}JeA=(mxeO2$QeP(bCAV/yvz/^9NeN@jdeN-g2jXnEquRBl.oct/$axy^doJkv!moi+[pFT}%r8ldQpg3NXj-UEVBrAd!zEEx[j:7mRy\u0026*^KwGSv3k#*PTuRBl.k$\u003eSMpFKwJm)hhyy?W%jwO#71b075{ByPnli^S5)y\u0026-%0wQdS{x(4u8iWck0ze.dzwQb[EwD", "ln": 0, "col": 1, "line": 1 }, { "b": "B{.+#v@2T@az+$eB0bTmB.(dbwn+%[wPw]lB-5rNwfrEEatm\u003eUAXzGEvrb{jv{{%0wPz)bw[+:-By/IDiXL5^v\u003eR[Ay+GpfA==vBePq*?fFCjxg+ZQrat4KPgby)ziX\u0026GJfD.@^atL-iixw]Kh-S06eIg\u003cGzdK\u00263ByO\u00267ADLYne[]kSv@Dy0z/WNyByO\u0026xB$$Wae\u0026T%@ePb0lwGUMav}mnoat41", "ln": 679, "col": 347, "line": 7 }, { "b": "A==2pwI4zdx\u003eqg7eP(8IB0bdrBz%n]fc\u003e)nz/Z1(p\u003c\u003ewWgDdrBxMOuniXJciDQ@6@Bv/qSiY5JAf^4O\u003cy?W%jwO%8fy?WD#Bs?SQy\u0026Z.jBAzE.fe21ifFk4ifGH%Bh-SB5BAzE.fe21ifFk4ifGI3AfFKW)eOP9pBzkf1eN-gkwPz)bB7D}xwO2)lB-Iqtazt\u003esA5]T9bZS72B96#IEl6bti4#D$eO]cxBy/twAaJQ3eP(8IB0bdrBz%n]feb1je?![iiX\u0026GJfD.F\u0026x(mTbx\u003c\u003e*fv@cpeBy/FABz\u003e@azxJIjv}mf3y\u0026%/vwPxvSarSmIzFsibvqEJ9y\u0026%/vwPw]8ByO\u0026nj.O}VA5]T9bZS72B96#IEl6bti4#D$eD", "ln": 857, "col": 159, "line": 9 }, { "b": "AXhuOvru66zE[20wn+%[wPw]fz!BblwPRA)3jpuOxM21qp\u0026Zb^vrb{4C42JfBrCglAV^$Qr3kQ(Bz8\u003c9v%8*dasy\u0026ABz#pZfe4cWv{%g!z/Z1Yi5iixflP66B9R*WvrDW9fkCYtwPzW1By/ICBy/JncM\u003e0Rat3Xrp!$1?at3bbcS?%3vrDydeMuU7wO%KKA=k(rcM\u003e0iasxJ{zGGDcBs*EqAaI6Mvq{g4x\u003e7N[x(v(xyiarhj0n3DvrcB2BuK+*w?t$\u0026at2fQvrt{fA::emcWN4RvrufbiWeuZvR6N$wPRH8e{7VCBrSmWBA}?pb03].Cxt2Wb4CLew[+)4i^Vp6cKKvaA+(\u003cCxMOunB2\u003e%cy\u0026r/(y?N:dBuhxpf!+n7f!V%TBz9syBZ!{5zE){3B1RMCB966Bz/ff3xd1/NyALihaw=6qat3bbcS?%3vrDydeMuU7wO%KKA=k(rcM\u003e0iasyVqzGGDcBs?PWAaI6Mvq{g4x\u003e7N[x(v(xyiarhj0n3DvrcB2BuK+*w?t$\u0026at2fQvrt{fA::emcWN4LCxvhnvqGT*vruj4zEmv9vRYL2B0rUHa$Uw#eIfpTm[DC#p/P?QnKBQ[moIh]eIeLVzCrX]lp\u003e]Tpc@PeACfc4m(+=Elp1EqmNosolQsNek$%{xlpkxUlQsNrl3b**vR{dby\u0026\u0026ctAz{%Pz*l7Tr:oJnhcK*pnLJUNwgH.tgi)!us209owm)A5p!(0:C1j}Xg?g=DizKs7qHidTqzg^Ct5=C$gC\u0026O@y?)G\u003ezCUKZzE$W(s.qIWqfu?Noh[IRxHllEiDEUSlT\u003caJxk6npqfBSWvo29Wvk}%\u003ew(-zBp?aPkByX\u003c8zb9-8whl5Rs6PSWC5zj\u003cs.J7(Cw7bfybo^DoK@3TxF?USt2^Obf\u0026?77p*)pmgi#C?z9}rmnNVJ@h!(A7zFIWHBXsF/A-)M\u003czGdKVln\u003c3Bg/lg^d@oeWyfCs/iB$3sn(dfxABR{4lV^frxk7Bvz^4o+pd!RRs7bI%oK.HAqd:(]B.2wCsx]-+xgMDlzB4/pn(5\u003e.B3@}WvpB4Czb\u003cw9nOH:Lr6\u003cqqwntgYlrc-MizToNB9f0Sls:gQgbi/xgJ+iypf7F4zzMGdl{TWolr[yWeIeLamnuk[p/P?QnKBQ[moIh]eIeK#t}vggwObv[y\u0026\u003c38z!@#eiWeP.z/^fOb5Q?awPI*0v}x1YzEmEbvru68i+z/pB7D)DAb](ux\u003eg^}uT[1(w[+)4i^Vp6cKKvaA+(\u0026", "ln": 1172, "col": 474, "line": 9 }, { "b": "DM)uozdK[Lb4j$#wG\u0026VHAbPMbv%GmVb5*$jxDQL7B7F\u003c4wPPNPtP$qqtY7Vbv{%s+vRGT)BzkrcauZ\u0026KtQ0V#wNPW(tP$ZwtQ1i1vpSQ!efFgwB-p(1By!Y3efFgwwmU", "ln": 2651, "col": 154, "line": 16 }, { "b": "at4ah3l{WizxJ!8v]32CB-RapxM4%le[w)gyH}Jsx(n37A=br43tB8{tu-i]bU}ursX}Khau.\u003egcUcUaCwg}xdJ\u002625j0nSUwO}?$arR!uz/Z2cx(DiXc$EmayH}JeA=(mxeOPqHeIh0WayP89x(mG8Aa%i5aztXmBs}9xv@2T@e[]iBwPzV%y-\u003ertf))ROwPe+zz:+=)tX2u\u0026e)I{qtRon(d{KYiwgF\u003cKxK$Q.at4E=dgdguarR)KB-p(1By=OpxK@q%wObv[y\u0026*!lA3e\u003ejaAz4mz!%PdATA{iarUfpA+(\u003cIePLAxB.bSoaw+\u003cjr3i+AwmoN*aszHWx(CmSa$1THz/Z2cx(CBzEj3dJBAzE.fe4cWv{%g!z/Z1Yi50iEflpYDeO5B8vrDydeOPfEgZW\u0026e3uf{5wc@VPv}Y^6b1DiZwPzj3wGUF]A==vD3u6({zGx(nazkn6Abf3gat42rxk.*8", "ln": 2824, "col": 18, "line": 20 } ], "depth": 1, "facts": { "imp": [ [ "", "echo" ], [ "", "echo" ], [ "", "docker" ], [ "", "docker" ], [ "", "openssl" ], [ "", "openssl" ], [ "", "chmod" ], [ "", "chmod" ], [ "", "docker" ], [ "", "docker" ], [ "", "docker" ], [ "", "docker" ], [ "", "docker" ], [ "", "docker" ], [ "", "docker" ], [ "", "docker" ], [ "", "echo" ], [ "", "echo" ], [ "", "curl" ], [ "", "curl" ], [ "", "curl" ], [ "", "curl" ], [ "", "curl" ], [ "", "curl" ], [ "", "curl" ], [ "", "curl" ], [ "", "echo" ], [ "", "echo" ], [ "", "pushd" ], [ "", "pushd" ], [ "", "docker-compose" ], [ "", "docker-compose" ], [ "", "docker" ], [ "", "docker" ], [ "", "grep" ], [ "", "grep" ], [ "", "head" ], [ "", "head" ], [ "", "curl" ], [ "", "curl" ], [ "", "popd" ], [ "", "popd" ], [ "", "echo" ], [ "", "echo" ], [ "", "openssl" ], [ "", "openssl" ], [ "", "openssl" ], [ "", "openssl" ], [ "", "openssl" ], [ "", "openssl" ], [ "", "openssl" ], [ "", "openssl" ], [ "", "openssl" ], [ "", "openssl" ] ], "tgt": [ "chmod", "curl", "docker", "docker-compose", "echo", "grep", "head", "openssl", "popd", "pushd" ], "metrics": { "ast": { "op.eq": 1, "max_depth": 7, "call_count": 27, "node_count": 356, "op_density.eq": 0 }, "file": { "size": 3619, "entropy": 5.57 }, "text": { "lines": 36, "top_char": 101, "tab_count": 2, "max_ws_run": 2, "digit_ratio": 0.1, "space_count": 259, "char_entropy": 5.57, "unique_chars": 88, "top_char_null": 0, "lines_over_200": 6, "lines_over_500": 1, "string_density": 0.86, "top_char_ratio": 0.07, "avg_line_length": 99.53, "max_line_length": 719, "empty_line_ratio": 0.17, "last_line_length": 104, "long_token_count": 3, "whitespace_ratio": 0.08, "identifier_density": 6.28, "line_length_stddev": 152.95, "normalized_string_count": 5.17, "trailing_whitespace_lines": 2, "normalized_unique_identifiers": 22.44 }, "binds": { "count": 1 }, "binary": { "peak_region_bytes": 2048, "peak_region_entropy": 5.82 }, "strings": { "bytes": 1617, "count": 31, "url_count": 4, "avg_length": 52.16, "max_length": 559, "path_count": 2, "avg_entropy": 3.36, "entropy_stddev": 1.35, "high_entropy_count": 1 }, "comments": { "chars": 78, "count": 3, "lines": 3, "to_code_ratio": 0.09 }, "identifiers": { "count": 226, "unique": 116, "avg_length": 10.04, "max_length": 42, "min_length": 1, "avg_entropy": 2.49, "reuse_ratio": 0.51, "length_stddev": 8.46, "has_digit_ratio": 0.22, "single_char_count": 1, "single_char_ratio": 0.01, "high_entropy_count": 15, "high_entropy_ratio": 0.13, "all_lowercase_ratio": 0.22, "all_uppercase_ratio": 0.03, "numeric_suffix_count": 16 } } }, "id": 15, "mol": "H₄(Cm₈Cr₃F₂Os)", "path": "/tmp/cyclotron-7af1572c/samples/391ba3f1479a/lua-resty-acme-0.9.0-1.src.rock!!lua-resty-acme/t/fixtures/prepare_env.sh", "pid": 0, "risk": 6, "sha": "c0bd5cdf1bf6abddfe2dd7567b2668176ff2657efddc148353b75e230867f9cb", "size": 3619, "traits": [ { "id": "micro-behaviors/communications/http/curl::curl-data-option", "atk": "T1071.001", "mbc": "C0002", "conf": 0.88, "crit": 3, "desc": "curl sends an HTTP request body", "spans": [ [ 3058, 4 ] ] }, { "id": "micro-behaviors/communications/http/download/shell::shell-curl-url-call", "atk": "T1105", "conf": 0.8, "crit": 3, "desc": "curl call names an HTTP URL", "spans": [ [ 1236, 4 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-1", "conf": 0.8, "crit": 2, "desc": "English function-word token \"the\"", "spans": [ [ 3027, 0 ] ] }, { "id": "micro-behaviors/crypto/certificate/usage::ca-certificates", "conf": 0.8, "crit": 2, "desc": "References a CA certificate bundle", "spans": [ [ 727, 0 ] ] }, { "id": "micro-behaviors/communications/http/download/cli::curl-command-call", "atk": "T1105", "conf": 0.96, "crit": 3, "desc": "Shell invokes the curl command", "spans": [ [ 1236, 4 ] ] }, { "id": "metadata/file/extension/identity::shell-a", "conf": 1.0, "crit": 2, "desc": "POSIX shell script extension", "spans": [ [ 0, 0 ] ] }, { "id": "micro-behaviors/fs/chmod/executable/dangerous::shell-777-decimal", "atk": "T1222", "mbc": "E1222", "conf": 0.8, "crit": 3, "desc": "Shell calls chmod with mode 777", "spans": [ [ 296, 5 ] ] }, { "id": "micro-behaviors/communications/http/curl::curl-post-custom-header", "atk": "T1071.001", "mbc": "C0002", "conf": 0.82, "crit": 3, "desc": "curl POST request with custom header", "spans": [ [ 1236, 96 ] ] }, { "id": "micro-behaviors/crypto/certificate/usage::ssl-certs-path", "conf": 0.8, "crit": 2, "desc": "References the system TLS certificate directory", "spans": [ [ 744, 0 ] ] }, { "id": "micro-behaviors/communications/http/tls::curl-insecure", "mbc": "C0005", "conf": 0.95, "crit": 3, "desc": "curl disables TLS certificate verification", "spans": [ [ 1236, 60 ] ] }, { "id": "micro-behaviors/crypto/asymmetric/key::pem-public-key-header", "conf": 0.9, "crit": 3, "desc": "References PEM public-key header", "spans": [ [ 1633, 26 ] ] }, { "id": "micro-behaviors/crypto/asymmetric/rsa::embedded-pem-pubkey", "mbc": "C0027", "conf": 0.85, "crit": 3, "desc": "Embedded PEM public key in shell script", "spans": [ [ 1638, 16 ] ] }, { "id": "micro-behaviors/fs/path/temp::unix-temp", "conf": 0.7, "crit": 2, "desc": "Unix /tmp/ path reference", "spans": [ [ 226, 0 ] ] }, { "id": "micro-behaviors/fs/path/temp::tmp-path-content", "conf": 1.0, "crit": 2, "desc": "Contains a /tmp/ or /var/tmp/ path", "spans": [ [ 225, 0 ] ] }, { "id": "micro-behaviors/fs/chmod/executable/mode::chmod-exec-tmp-file", "atk": "T1222", "mbc": "E1222", "conf": 0.9, "crit": 3, "desc": "chmod marks /tmp file executable", "spans": [ [ 296, 22 ] ] }, { "id": "micro-behaviors/crypto/certificate/usage::x509-string", "conf": 0.6, "crit": 2, "desc": "References X.509 certificate terminology", "spans": [ [ 196, 0 ] ] }, { "id": "micro-behaviors/communications/http/endpoints::loopback-http-url-reference", "conf": 0.9, "crit": 3, "desc": "References a loopback HTTP URL", "spans": [ [ 940, 14 ] ] }, { "id": "micro-behaviors/crypto/certificate/usage::openssl-self-signed-cert", "atk": "T1587.003", "conf": 0.85, "crit": 3, "desc": "Generates self-signed TLS certificate", "spans": [ [ 183, 17 ] ] }, { "id": "micro-behaviors/fs/chmod/modify::chmod-command", "atk": "T1222", "mbc": "E1222", "conf": 0.6, "crit": 3, "desc": "chmod shell command", "spans": [ [ 296, 5 ] ] }, { "id": "micro-behaviors/os/container/runtime::docker-cli-run-create", "conf": 0.82, "crit": 3, "desc": "Docker CLI run or create command", "spans": [ [ 39, 10 ] ] }, { "id": "micro-behaviors/fs/chmod/executable/mode::chmod-exec-absolute-path", "atk": "T1222", "mbc": "E1222", "conf": 0.92, "crit": 3, "desc": "chmod makes an absolute path executable", "spans": [ [ 296, 22 ] ] }, { "id": "micro-behaviors/communications/http/url/scheme::cleartext-http-url", "atk": "T1071.001", "mbc": "C0002", "conf": 0.9, "crit": 3, "desc": "Cleartext http:// URL", "spans": [ [ 940, 14 ] ] }, { "id": "micro-behaviors/communications/socket/bind/address::bind-all-interfaces", "conf": 0.8, "crit": 3, "desc": "Binds or listens on all interfaces (0.0.0.0)", "spans": [ [ 921, 53 ] ] }, { "id": "micro-behaviors/communications/http/header/content-type::json-header", "conf": 0.9, "crit": 3, "desc": "References HTTP Content-Type application/json", "spans": [ [ 1334, 30 ] ] }, { "id": "micro-behaviors/communications/http/curl::curl-post-flag", "atk": "T1071.001", "mbc": "C0002", "conf": 0.8, "crit": 3, "desc": "curl explicitly sends an HTTP POST request", "spans": [ [ 1236, 68 ] ] }, { "id": "micro-behaviors/fs/chmod/executable/dangerous::shell-777", "atk": "T1222", "mbc": "E1222", "conf": 0.8, "crit": 3, "desc": "chmod 777 (world-writable+executable)", "spans": [ [ 296, 5 ] ] } ], "type": "shell" }, { "ctx": [ { "b": "boXZHx(kOkvrl98eP}EdzE[30C0d993tB8{tu-j4DlsE/ayenmaARpdzvdHearUl9xM21qrDzOYwJy}VfD+KIA=U@kzxYAgarR!rCXImxf:.Jb3jpAWBrCQnB7GC2z!@@\u003eA=kD6B8UY2jTqB(B08}+A=kD6B8UY2at4Q*D$NFhA3c-Qay]5bD$NFhA3c-Qar\u00267GwP}H8b7a6nvpQGjzzrNEz!@@\u003eC0d90wN/y(as7(wwm6v}v@3d8wN=\u003cgay/Loat4aDcOlX*eOl**3tB8{tu-j4DlsySz!@@\u003eB%n5mt@%fJxK#5*arR^HwN/y(ar\u003c*6yI[6mzxJ\u003elwfu3", "ln": 0, "col": 1, "line": 1 }, { "b": "C6%Zgx(\u003eFcxK$W?z/{dAeN/\u0026ywO+{^B7E0IDV0zsuV{\u002683l{Wlz!0N7AaJI^zE[30A=kD6B8UY2jT8d#z!@@\u003eA=kD6B8UY2fc\u003eELwm6HkbYmgquV{\u0026w3s!2$a%.8ywm6v}v@3d8wN=]ba%.5qCvbxev@3d8wN=[\u003exk8DgA+#{ybYvHfuVH6{yJBDav\u003chn3wN(]nx=[Qvfc\u003eELwm6HkbYmgquV[8na%n6PzE[30A=kD6B8UY2a{}%%BrC15wfr6wzE[30A=kD6B8UY2a{[V4azbt7wErG\u0026wfrErar\u003e\u003eWuSGP[q+o+WauZ?{bYvHfuV)^", "ln": 365, "col": 29, "line": 18 }, { "b": "jS(9$zE[30B%!}Qa%pYovLq+kB98WXvpKd=fjO*jwO#Pxy\u0026%d[xk8DgvpS)\u003eeP?ycboQGfvqYZ?y\u0026r}[xk8Dgv@Dj3x(\u003eEHz6g3ywO+{^B7ExPbYmgquV)R2xk8DgByw/8a%.5qCvbIq3tj6{eN@Eby\u0026r@eeIg)-Bz#wAavwW=pdE-DpE^3Owc#%-BrC15wfrED3tj6{aAR48at4aDa%.5qCvbIq3tj6{ay/tbze18meO#QOA+f4", "ln": 630, "col": 40, "line": 29 } ], "depth": 1, "facts": { "imp": [ [ "", "echo" ], [ "", "echo" ], [ "", "exit" ], [ "", "exit" ], [ "", "git" ], [ "", "git" ], [ "", "ls" ], [ "", "ls" ], [ "", "grep" ], [ "", "grep" ], [ "", "grep" ], [ "", "grep" ], [ "", "head" ], [ "", "head" ], [ "", "echo" ], [ "", "echo" ], [ "", "cut" ], [ "", "cut" ], [ "", "echo" ], [ "", "echo" ], [ "", "exit" ], [ "", "exit" ], [ "", "echo" ], [ "", "echo" ], [ "", "git" ], [ "", "git" ], [ "", "git" ], [ "", "git" ], [ "", "cp" ], [ "", "cp" ], [ "", "git" ], [ "", "git" ], [ "", "sed" ], [ "", "sed" ], [ "", "git" ], [ "", "git" ], [ "", "sed" ], [ "", "sed" ], [ "", "git" ], [ "", "git" ], [ "", "git" ], [ "", "git" ], [ "", "git" ], [ "", "git" ], [ "", "git-chglog" ], [ "", "git-chglog" ], [ "", "git" ], [ "", "git" ], [ "", "git" ], [ "", "git" ], [ "", "git" ], [ "", "git" ] ], "tgt": [ "cp", "cut", "echo", "exit", "git", "git-chglog", "grep", "head", "ls", "sed" ], "metrics": { "ast": { "op.div": 1, "max_depth": 7, "call_count": 26, "node_count": 311, "op_density.div": 0 }, "file": { "size": 848, "entropy": 5.05 }, "text": { "lines": 39, "top_char": 101, "max_ws_run": 1, "digit_ratio": 0.02, "space_count": 100, "char_entropy": 5.05, "unique_chars": 63, "top_char_null": 0, "string_density": 0.46, "top_char_ratio": 0.08, "avg_line_length": 20.74, "max_line_length": 78, "empty_line_ratio": 0.18, "last_line_length": 39, "whitespace_ratio": 0.16, "identifier_density": 2.95, "line_length_stddev": 19, "normalized_string_count": 2.88, "normalized_unique_identifiers": 7.57 }, "binds": { "count": 4 }, "binary": { "peak_region_bytes": 848, "peak_region_entropy": 5.05 }, "strings": { "bytes": 284, "count": 18, "avg_length": 15.78, "max_length": 43, "avg_entropy": 3.16, "entropy_stddev": 0.91 }, "comments": { "chars": 37, "count": 4, "lines": 4, "to_code_ratio": 0.11 }, "identifiers": { "count": 115, "unique": 40, "avg_length": 5.1, "max_length": 25, "min_length": 1, "avg_entropy": 1.81, "reuse_ratio": 0.35, "length_stddev": 4.45, "has_digit_ratio": 0.13, "single_char_count": 2, "single_char_ratio": 0.05, "high_entropy_count": 1, "high_entropy_ratio": 0.03, "all_lowercase_ratio": 0.53, "numeric_suffix_count": 3 } } }, "id": 17, "mol": "H₂(FPo)", "path": "/tmp/cyclotron-7af1572c/samples/391ba3f1479a/lua-resty-acme-0.9.0-1.src.rock!!lua-resty-acme/scripts/prepare_new_release.sh", "pid": 0, "risk": 3, "sha": "12ecd0dee1654c31fb671481ae63753f6537a1b0477ad273e9845b452eb0c7f3", "size": 848, "traits": [ { "id": "metadata/file/extension/identity::shell-a", "conf": 1.0, "crit": 2, "desc": "POSIX shell script extension", "spans": [ [ 0, 0 ] ] }, { "id": "micro-behaviors/process/create/vcs/git::shell-git-commit", "atk": "T1059.004", "conf": 0.92, "crit": 3, "desc": "Commits changes to a Git repository", "spans": [ [ 694, 3 ] ] }, { "id": "micro-behaviors/fs/shell-ops::cp-command", "conf": 0.9, "crit": 3, "desc": "Shell text contains a cp file-copy command", "spans": [ [ 457, 35 ] ] } ], "type": "shell" }, { "ctx": [ { "b": "Bt4luCYX7GwPGIzA+fh#A+eP?zGWTNxBk7?arR^Uaz$R8wJy@jwPS6laARKuy\u0026Y}aarR^HaAzQxiV@!SarR^HarR^HB9h2iayPkheOwTpazC.mByx04at4OMat4\u003cYv@L\u003c]ze0)gB0a[owO-G0vj+#2A==2cx\u003e7N[wPFh3arR^HarR!zyH?d1at4KPbU}l9pe+7+uR\u003cS?mOcY8bURi7n\u003ez#?p/o.KnMVrxarR^HarR^KaAg[jy-)j@v}YAXarR^HarR^HAclknwfrKsz/65s", "ln": 2064, "col": 14, "line": 79 }, { "b": "wO$BBoBq)+arR^HA=(mXaBBIsarR^HarR!vw/$q2b3l9^p^[bTq+QK?k#Qq#ar-(\u003cb3l3it@%fJxK#67Cv$Geazt\u003esAc15[fk20vxMW=pv@Diqz/xo9B8#dJz/xo9B8#dJvrb\u003c\u003ex)a5vbU}l9pe+7+uR0EYng]0)AXq0Jat3wieG/A-ByxhjDu:3Aj0nG+B7/8bz/xo9B8#dHbU}l9pe+7+uR0EYnh04Ew[.O{arR^HarR!vw/$q2b3l9^p^[bTq+QK?k#Qq#auZ?\u003esrX\u003e[auHY/xK#67Cv$Geazt\u003esAc15[fl.R:e]LYuzGx(ne]L=yflq5OA:@VlzV", "ln": 4333, "col": 21, "line": 112 } ], "depth": 1, "facts": { "metrics": { "file": { "size": 6893, "entropy": 5.13 }, "binary": { "peak_region_bytes": 3821, "peak_region_entropy": 5.26 } } }, "id": 19, "mol": "H₂(CmOs)Md(Bk)", "path": "/tmp/cyclotron-7af1572c/samples/391ba3f1479a/lua-resty-acme-0.9.0-1.src.rock!!lua-resty-acme/.github/workflows/tests.yml", "pid": 0, "refs": [ { "to": "pkg:github/actions/checkout@v2", "off": 1746, "kind": "dependency" }, { "to": "pkg:github/actions/cache@v2", "off": 1807, "kind": "dependency" } ], "risk": 3, "sha": "4d6b578e6dd1cf65b811876b20090a13aed21b82bf212d90ce1c2ea8f14827df", "size": 6893, "traits": [ { "id": "metadata/build/ci/trigger::scheduled-workflow-trigger", "conf": 0.9, "crit": 3, "desc": "GitHub scheduled workflow trigger" }, { "id": "micro-behaviors/communications/http/download/cli::fetch-output-flag-structured-file", "conf": 0.84, "crit": 3, "desc": "Structured file has curl/wget output path", "spans": [ [ 4397, 73 ] ] }, { "id": "micro-behaviors/os/package-manager/apt::apt-package-install-command", "conf": 0.98, "crit": 3, "desc": "Runs an APT package install command", "spans": [ [ 2128, 28 ] ] } ], "type": "github_actions" }, { "ctx": [ { "b": "y\u0026r/(y-)UiefF+vB09Q*Aarr)y::snADL#owH[@Ky?v-}w[C:8dgf^3az#ataA83rBzbl63lQEcz!0i(aytD#ayuVxy?v-hjS[YNvqG:dA+flkx(W=oasy#qB0*", "ln": 0, "col": 1, "line": 1 }, { "b": "c[W20a{[V?B-7Yhx(v(iuRJd\u003cwP]Ljz/feo3lQEcz!0i(ay]hbauZ\u0026Sz/fefvqYP#v@Dl%e[wWp3lQE4x(UsVay]hbaA8oyz/WKzwPRH3B%[Llo\u0026akHqx^Ljz/M%Fflz5IcKHh6az+$avqE6cwO+%3jQJqOarU-pBzUPhvrt{!y?k14arR^HDKp(rarR^Hwnc6bjS[oHATA{iarV7-3lQDlaz(icarS9uarUYoBAIRwaAIagw^S9!wc@VWz!0i(azb+lv@#B6zxJ$hxlw30By!/\u003ex(4u#vqPN7wn8", "ln": 222, "col": 50, "line": 11 }, { "b": "3t19=3jpP/v{%f@w{503BzkVhaz2!iB98EKw*[6fat2e/r8k[TiV}{CwN/G#w]zYjwQ4{gBy/u1wH[%wz/^apB-RTEvpB4:aARJAz/xo9aA8oyzF%R7arUGsv{%f@w?k6oA=Jo=azC:Dz/xo9c$U1Mb64cpdgdgux\u003ewG1aARpdzvdHearUnSv@c5", "ln": 537, "col": 44, "line": 29 }, { "b": "B.8WUaAIHrx()Z7BzJvzB-.OBBsvL7arSl/aARZwazC)tzFr]fzdNc[x(mMaBzbkdw[=6)azC)tv@DydB-qClwft/hazCZoy?ml/v%Ghez/PY6Bp6ckeIe8!BzJ6.ats{PwNPE$aARpdazULlaz$+lwPw]8CYmwqwPFh3azCBgzF%RtBAzswz/M%", "ln": 1105, "col": 17, "line": 64 } ], "depth": 1, "facts": { "imp": [ [ "", "pcall" ], [ "", "pcall" ], [ "", "os.getenv" ], [ "", "setmetatable" ], [ "", "ngx.encode_base64" ], [ "", "io.open" ], [ "", "string.find" ], [ "", "tonumber" ], [ "", "exists" ], [ "", "io.open" ], [ "", "split_ttl" ], [ "", "ngx.time" ], [ "", "os.remove" ], [ "", "regulate_filename" ], [ "", "check_expiration" ], [ "", "regulate_filename" ], [ "", "check_expiration" ], [ "", "math.floor" ], [ "", "ngx.time" ], [ "", "io.open" ], [ "", "regulate_filename" ], [ "", "exists" ], [ "", "os.remove" ], [ "", "regulate_filename" ], [ "", "check_expiration" ], [ "", "lfs.dir" ], [ "", "ngx.decode_base64" ], [ "", "string.sub" ], [ "", "table.insert" ] ], "mbr": [ "_M.new", "conf.dir", "io.open", "lfs.dir", "math.floor", "ngx.decode_base64", "ngx.encode_base64", "ngx.time", "os.getenv", "os.remove", "self.dir", "string.find", "string.sub", "table.insert" ], "tgt": [ "check_expiration", "exists", "io.open", "lfs.dir", "math.floor", "ngx.decode_base64", "ngx.encode_base64", "ngx.time", "os.getenv", "os.remove", "pcall", "regulate_filename", "setmetatable", "split_ttl", "string.find", "string.sub", "table.insert", "tonumber" ], "funcs": [ [ "_M.new", 229 ], [ "regulate_filename", 421 ], [ "exists", 543 ], [ "split_ttl", 720 ], [ "check_expiration", 839 ], [ "_M:add", 1345 ], [ "_M:set", 1529 ], [ "_M:delete", 1921 ], [ "_M:get", 2106 ], [ "_M:list", 2319 ] ], "metrics": { "ast": { "op.eq": 3, "op.ge": 1, "op.gt": 1, "op.add": 1, "op.lor": 5, "op.sub": 1, "op.land": 3, "op.lnot": 6, "max_depth": 12, "call_count": 35, "node_count": 1031, "member_count": 14, "max_array_len": 1, "op_density.eq": 0, "op_density.ge": 0, "op_density.gt": 0, "op_density.add": 0, "op_density.lor": 0, "op_density.sub": 0, "op_density.land": 0, "op_density.lnot": 0.01, "max_concat_chain": 2, "member_depth_max": 2 }, "file": { "size": 2762, "entropy": 4.58 }, "text": { "lines": 155, "top_char": 101, "max_ws_run": 1, "digit_ratio": 0.01, "space_count": 545, "char_entropy": 4.58, "unique_chars": 61, "top_char_null": 0, "string_density": 0.09, "top_char_ratio": 0.09, "avg_line_length": 16.82, "max_line_length": 72, "empty_line_ratio": 0.19, "last_line_length": 9, "whitespace_ratio": 0.25, "identifier_density": 1.41, "line_length_stddev": 16.13, "normalized_string_count": 1.12, "suspicious_identifier_ratio": 0.07, "normalized_unique_identifiers": 7.97 }, "binds": { "count": 28 }, "binary": { "peak_region_bytes": 2762, "peak_region_entropy": 4.74 }, "source": { "function_count": 5 }, "strings": { "bytes": 74, "count": 14, "ip_count": 1, "avg_length": 5.29, "max_length": 28, "path_count": 1, "avg_entropy": 1.59, "entropy_stddev": 0.95 }, "comments": { "chars": 212, "count": 5, "lines": 5, "todo_count": 2, "to_code_ratio": 0.03 }, "functions": { "count": 5 }, "identifiers": { "count": 219, "unique": 58, "avg_length": 5.4, "max_length": 17, "min_length": 1, "avg_entropy": 1.9, "reuse_ratio": 0.26, "length_stddev": 3.67, "has_digit_ratio": 0.03, "sequential_names": 4, "single_char_count": 5, "single_char_ratio": 0.09, "high_entropy_count": 1, "high_entropy_ratio": 0.02, "all_lowercase_ratio": 0.91, "all_uppercase_ratio": 0.07, "numeric_suffix_count": 2, "underscore_prefix_count": 3 } } }, "id": 23, "mol": "H₂(FOs)", "path": "/tmp/cyclotron-7af1572c/samples/391ba3f1479a/lua-resty-acme-0.9.0-1.src.rock!!lua-resty-acme/lib/resty/acme/storage/file.lua", "pid": 0, "risk": 2, "sha": "9baaea4cbe16738476f406e7a7b7e58a42b2a7174396bbd91616f8e209bb2310", "size": 2762, "traits": [ { "id": "micro-behaviors/fs/path/temp::win-temp-env-source-read", "conf": 0.85, "crit": 3, "desc": "Reads the Windows TEMP environment variable", "spans": [ [ 301, 11 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-1", "conf": 0.8, "crit": 2, "desc": "English function-word token \"the\"", "spans": [ [ 1153, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-2", "conf": 0.8, "crit": 2, "desc": "English function-word token \"and\"", "spans": [ [ 270, 0 ] ] }, { "id": "micro-behaviors/os/env/access::lua-os-getenv", "conf": 0.85, "crit": 3, "desc": "Lua environment variable access", "spans": [ [ 298, 9 ] ] } ], "type": "lua" }, { "ctx": [ { "b": "y\u0026r/(y-)zkBz@u=aAz4kB.L(car\u003e\u0026qB98WWxMOuna{@d8v{%f@v}{76zxI7+A+flkx(W=cb4Cwez/dgGvp\u003c6{3jpP/v{%f@uRIUaaBwIzy\u0026r/(y-)OpauZ\u0026]uTEI+wmZ0djS[9aEf%!ev{%f@", "ln": 0, "col": 1, "line": 1 }, { "b": "wPRu\u003evrt{+B-IpvjS\u003e}4B$\u003ef-e?On-z/]@tatbn?a$)!ABywY*Byuvoe?On=vruf9e?Om\u003cfcQ-Caz+$avqE5%vrt{+B-IpvjS\u003e}4B$\u003ef-e?On-z/]@tatbn?a$)FnByuvoe?N", "ln": 571, "col": 10, "line": 28 }, { "b": "arR^HBzM29C4CYdw{CHZaARTDwEoL5wO#2=3lQEcz!0i(aAIagw/%kzarR^HB7GDgwPRv5vpB4:c\u003c?7tarV1rarR^HarUuoB95J/ay/tcw?E+nB95KyAV=LXgb**te?![ja$K6zarR^HaAhmtBrAZ?v@Dl%e]U-HBrCHxauhbgfF0LNarR^HayPzmxKtQ/BzbP6auZ\u0026*BAh8kxd!1sCv+!yv@Dl%e[5)AxKtQ/BzbP6aA8oyb6m:swO@Xved9HxarR^HvrDW9uVoB}xDPCXv@Dl%e[5)AxKtZ!Bz8!nAV=MwBZ!{5zE){3B0rdxarR^HarU9nBzb34z!@#cjS[lMzE$IfB-.q7A=k=9ed9HxarR^HyiK=bAa9\u003c4auZ\u0026Sz/fetyiK=bAa9\u003c4aA8oya$[aFAXzDQzzc6xv@=d5B1.rKvR6N$wPRH8e[]kSB7Gxnx\u003e7Z.v}fC1zGEKNz!\u0026{4a$K6zarR^Hazt\u003esAc0c+ay/tcw?E+sBz#pL3lQDlarR!Gy\u0026-%bwPzG%C{2l)BzM29C4CYdw{C{marR^HarU=xB6\u003c01A=#2muV6p?wGTbUv@Dl%e{7]JuVP!0C4CY3zEEx[ed9HxarR^HBzkP6z/{dAjS[lMzE$Iy", "ln": 756, "col": 1, "line": 33 }, { "b": "wO#2=3lQEjwO+%hxK$Q.wPz\u0026mjS]7UarR^HtoWf3r:*b!Bs*EgyH}xct{8oMBz\u003e@azvdHeEf{r7azCBgB7Gf1e[/uGAc0dzxK#5*arR^Hx\u003ewG9z/^aywO+%hBzM29A@", "ln": 1462, "col": 3, "line": 60 }, { "b": "C42JfBrCajzyoJGyH}6@vqGU3wH[%FwGUG6wNPW(ayMygwP]nhzGx]dzEWl2w]zYjwP?T9C{4csADL\u0026lBp6cky\u0026r/(y-)k7x\u003eqg7auZ\u0026XBAzE.zE[2udgdguv@b\u003c\u003czGE{XwPRp3x(dB1B-Y3MwO+%hBzkP6z/{dJ3jm)#y\u0026r/(y-)X9D2dzcwfs2TAaa3dz^^f0vqYP#v}{76zz2Hrv@C)?c#-Quy\u0026r-)dgcz8ayuVxwPz/ljS[lJx\u003eqg7i+98CzE)s1d05%ow?E+nB95@QB7Gf1e]U-HBsvLtazCBgwPz/lBzbl63lQDlaAz4nB-IvxzFr]raz2Ol3lQE5zE:7%azCBgB7Gf1e[/uGAc0dzxK#5*arQ", "ln": 1771, "col": 6, "line": 77 }, { "b": "Bzbl63lQDlarR!EwPS6nzxJ?hy+cXMB-7R%y?j-hzY?$SoDX1SzE^*4vqxA%CwhejaA?goy\u0026*!vwPz%9AYLr!atbn?wPz!#arR^HwO#2=arUlkwc@U^azCBgB7Gf1e]C9mwPI*0v}u^8xK#5*arR^HB7Gf1e[!*8wmY!5toWf3r:*b!Bs*l@zdN^c", "ln": 2158, "col": 12, "line": 89 }, { "b": "au.\u003egb6m:swO@XmBzbl63lQDlaAz4nB-Ivxv@Dl%e{82EwO%4wzFr[]arUliB7G5$aAIagw?EImBzb2#wPRQ7wfus:ar\u003ePzvR6N$wPRH8a%p#vwO}?$arR!EwPS6nzxF", "ln": 3222, "col": 22, "line": 136 }, { "b": "arUYoBAIRwaz$[fefFIAATA{iwO#2=3lQEcz!0i(aARKqwO@RNazbt7wJB\u003cyvpQ=gdQ^dfa$i\u003cwazbt7wJBsqz/YFrdgcz8az+$avqE6bwPI*ezGxwuaz2OlauZ\u0026QAa{.wwO+%far\u003cSTq=B}(ar\u0026EZf!V%TBz9rKatbn?B7Gf1e[5)AxKtZ!Bz8^He*8t\u003ey\u0026r%2zxZRODKp(rarUYyy?j.LaAIagw?EImBzb34z!@#o3lQDlazMaxauZ\u0026?z!\u0026{43lQEtdgcz8azCBgwPz/lBzbl63lQDlaAz4nB-IvxzFr]raz2Ol3lQE5zE:7YarUxgaz#ataAz4mAbPSnwM{u!B-.pvt{a6aaz#atao", "ln": 3433, "col": 3, "line": 145 }, { "b": "atE{YdgdguarR^HBAzswjS(D^arR^HwO#2=arR^HeIe8Sx(XopaA.Tlvru66BzbkdzdN/$wmoN*3lQDlaz+$avqE5[efFIAAV^H/vq]{eB7Gf1efDckpG7jpefG1By?tqpwPRu\u003evrt{+B-Ipve?On\u0026vqGT*uV]\u003e2y\u0026\u003c31wQbXtdj=P*3lQDlarR^", "ln": 4015, "col": 74, "line": 170 }, { "b": "eIe8*vrDyday]z4B8AvEaAIa9z6i\u003egBAIRwayPekaA.:pw{4]jx(mK3azCZoBzbxfayPk6au{hQarR!vw/$V9AV/EqwO}?$arR^HaAz4nB-IvxwPz!#arR^HwO#2=arUlkwc@U^az+$avqE69vr(WcvpQGzaBsCrarR!qvrt{2jS]7UarR^HarU\u0026o", "ln": 4230, "col": 5, "line": 177 }, { "b": "vrt{2Cwg(fay]51wPRGavqG:5C4CYnx(v)gaA7\u003cmB7F\u003c4wPP56B0bWry?%C3az+$avqE5[efFIAAV^H/vq]{eB7Gf1efDc8mnccHmiTo9B7Gf1e]tfwvpS!*vpad$y-\u0026", "ln": 5614, "col": 18, "line": 237 } ], "depth": 1, "facts": { "imp": [ [ "", "require" ], [ "", "require" ], [ "", "ngx.re.gsub" ], [ "", "ngx.re.match" ], [ "", "setmetatable" ], [ "", "string.lower" ], [ "", "auth" ], [ "", "cjson.encode" ], [ "", "cjson.decode" ], [ "", "cjson.encode" ], [ "", "io.open" ], [ "", "api" ], [ "", "ngx.log" ], [ "", "api" ], [ "", "valid_vault_key" ], [ "", "string.format" ], [ "", "api" ], [ "", "valid_vault_key" ], [ "", "api" ], [ "", "valid_vault_key" ], [ "", "get" ], [ "", "ngx.update_time" ], [ "", "set_cas" ], [ "", "ngx.update_time" ], [ "", "set_cas" ], [ "", "api" ], [ "", "valid_vault_key" ], [ "", "get" ], [ "", "api" ], [ "", "ipairs" ], [ "", "ngx.re.match" ], [ "", "table.insert" ], [ "", "cjson.safe" ], [ "", "resty.http" ] ], "mbr": [ "_M.new", "cjson.decode", "cjson.encode", "conf.auth_method", "conf.auth_path", "conf.auth_role", "conf.host", "conf.https", "conf.jwt_path", "conf.kv_path", "conf.namespace", "conf.port", "conf.timeout", "conf.tls_server_name", "conf.tls_verify", "conf.token", "decoded.errors", "io.open", "ngx.WARN", "ngx.log", "ngx.re", "ngx.re.gsub", "ngx.re.match", "ngx.update_time", "payload.options", "res.status", "self.auth_method", "self.auth_path", "self.auth_role", "self.data_url", "self.headers", "self.host", "self.https", "self.jwt_path", "self.metadata_url", "self.namespace", "self.port", "self.timeout", "self.tls_server_name", "self.tls_verify", "string.format", "string.lower", "table.insert" ], "tgt": [ "api", "auth", "cjson.decode", "cjson.encode", "get", "io.open", "ipairs", "ngx.log", "ngx.re.gsub", "ngx.re.match", "ngx.update_time", "require", "set_cas", "setmetatable", "string.format", "string.lower", "table.insert", "valid_vault_key" ], "funcs": [ [ "valid_vault_key", 122 ], [ "_M.new", 232 ], [ "api", 1704 ], [ "auth", 3175 ], [ "set_cas", 3851 ], [ "get", 4673 ], [ "_M:add", 4977 ], [ "_M:set", 5479 ], [ "_M:delete", 5570 ], [ "_M:get", 5795 ], [ "_M:list", 5951 ] ], "metrics": { "ast": { "op.eq": 5, "op.gt": 1, "op.lt": 1, "op.add": 1, "op.lor": 19, "op.mul": 1, "op.land": 4, "op.lnot": 13, "max_depth": 15, "call_count": 47, "node_count": 2230, "member_count": 43, "max_array_len": 13, "op_density.eq": 0, "op_density.gt": 0, "op_density.lt": 0, "op_density.add": 0, "op_density.lor": 0.01, "op_density.mul": 0, "op_density.land": 0, "op_density.lnot": 0.01, "max_concat_chain": 2, "member_depth_max": 3 }, "file": { "size": 6489, "entropy": 4.6 }, "text": { "lines": 274, "top_char": 101, "max_ws_run": 1, "digit_ratio": 0.01, "space_count": 1309, "char_entropy": 4.6, "unique_chars": 77, "top_char_null": 0, "string_density": 0.27, "top_char_ratio": 0.09, "avg_line_length": 22.68, "max_line_length": 99, "empty_line_ratio": 0.14, "last_line_length": 9, "whitespace_ratio": 0.24, "identifier_density": 1.57, "line_length_stddev": 21.22, "normalized_string_count": 4.47, "suspicious_identifier_ratio": 0.02, "normalized_unique_identifiers": 11.61 }, "binds": { "count": 46 }, "binary": { "peak_region_bytes": 6489, "peak_region_entropy": 4.69 }, "source": { "function_count": 6 }, "imports": { "count": 2, "third_party_count": 2, "third_party_ratio": 1 }, "strings": { "bytes": 693, "count": 74, "ip_count": 1, "avg_length": 9.36, "max_length": 51, "path_count": 8, "avg_entropy": 2.18, "entropy_stddev": 0.99 }, "comments": { "chars": 443, "count": 9, "lines": 9, "to_code_ratio": 0.03 }, "functions": { "count": 6 }, "identifiers": { "count": 429, "unique": 94, "avg_length": 5.88, "max_length": 20, "min_length": 1, "avg_entropy": 2.12, "reuse_ratio": 0.22, "length_stddev": 3.37, "sequential_names": 2, "single_char_count": 3, "single_char_ratio": 0.03, "high_entropy_count": 1, "high_entropy_ratio": 0.01, "all_lowercase_ratio": 0.98, "all_uppercase_ratio": 0.03, "underscore_prefix_count": 3 } } }, "id": 24, "mol": "H₂(CmOs)", "path": "/tmp/cyclotron-7af1572c/samples/391ba3f1479a/lua-resty-acme-0.9.0-1.src.rock!!lua-resty-acme/lib/resty/acme/storage/vault.lua", "pid": 0, "risk": 2, "sha": "d966842bdbc11f1f61973e69af05c3086a752f247f073d4c31050989b382a391", "size": 6489, "traits": [ { "id": "micro-behaviors/os/container/runtime::serviceaccount-token", "conf": 0.8, "crit": 3, "desc": "Kubernetes service-account token path", "spans": [ [ 1077, 51 ] ] }, { "id": "micro-behaviors/communications/http/login::http-login-path", "atk": "T1071.001", "conf": 0.88, "crit": 3, "desc": "HTTP login path", "spans": [ [ 3584, 6 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-1", "conf": 0.8, "crit": 2, "desc": "English function-word token \"the\"", "spans": [ [ 4063, 0 ] ] }, { "id": "micro-behaviors/os/container/runtime::projected-serviceaccount-token", "conf": 0.82, "crit": 3, "desc": "Kubernetes projected service-account path", "spans": [ [ 1077, 51 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-2", "conf": 0.8, "crit": 2, "desc": "English function-word token \"and\"", "spans": [ [ 1927, 0 ] ] }, { "id": "micro-behaviors/os/container/runtime::container-runtime-secrets-path", "conf": 0.82, "crit": 3, "desc": "Container runtime secrets path", "spans": [ [ 1076, 18 ] ] }, { "id": "micro-behaviors/os/container/runtime::secrets-path", "conf": 0.7, "crit": 3, "desc": "Kubernetes secrets path", "spans": [ [ 1077, 27 ] ] } ], "type": "lua" }, { "ctx": [ { "b": "wfs2TB98CpzF7Olx(mC*y\u0026r/(y-)!wvJW/RB98CpzF7OyBZ+X]z!0i(aA8jgzGx(nauZ\u0026/wPq\u003cbA+cTyA+frlC}JJnzdLtrAaJ{dB8i3H3jnvpazt\u003esAc15[flzbJy\u0026.jywPRJpz/PFzxMO9cflgVmi5JMJaw=GVwGSYY3n0?LltpsCA^n^tx\u003eq9\u003eB0bgmaARpdawbNdp9sE:ygQ)%B0bQDwN(])C{3K9zdK?#A+cw8zEWP}wN({aB7]J83n0?LvQTs?hz/L%y-)qbv@C)(zF785wPIv4x\u003c$T:azCZoq!oDXx(v(ih6u*Hax}-k", "ln": 40, "col": 10, "line": 2 }, { "b": "pFJ3lwNV=Xx\u003eIr(BAIRnazCZoq!oDXx(v(ig9yHE3n0?Ltt^{Th-irEt}Nlxra]#!az2C2z!9N1xcqtrwPF#5axqrkaAH$6wGUF@vrb^^By/FnB7GCCarTT7vqfK(zF6qdeG=A7cM(]jvrb^^By/GlawC\u003cmr3kTYaAITBx(F35wg!#Emq=QNwmYo]C42ifwPF#oxKM09x(mA%B.24\u003ceIe8!A:-V#x(mMacP@?1v}Yp\u003evpKy\u003cA=Su$rz#\u003ctvR3W5wOL^^By!#9vriM9ze:JlAaK6aC{3Wov@C)?wg!j9z!0i(ayX=2wI#v/jS[=RADL#owHF:uxlV4rvrl0rg:jvQy\u0026r/(y-)qbv@C)?uT^C+wI#w/A+(\u003cYayX=2wI#v$wO#0@wmYaSvrl0rg\u003c9?P3n0?LarSl/avY^Qy*{*.yANt6aAz4mBA]GGz/Pzix(+zmz/^agC4293vpB4:3n0?LarUlkv@C)?uT^C+wI#w/A+(\u003cYazb+lv/", "ln": 342, "col": 31, "line": 9 }, { "b": "vQTs?hz^3%wN/T?wNw[PB7El^B-Ip9y\u0026r/(y-)qfA+]VbauZ\u0026/wPq\u003cbA+cTyzFahDwPz*cz!ymy3jnvpazt\u003esAc15[flzbJy\u0026.jywPRJpz/PFzxMO9cflgVmh-rDK3t:S\u003cvqE5#B-7Yhx(v(iBzb/lvSlv4zGEpCyH}=u3lQEcz!0i(aAg+fvqQ6djS[YVwQa", "ln": 864, "col": 26, "line": 19 }, { "b": "azCBgwPz/lBzbl63lQDlarR!EwPS6nzxJ?hy+cYuA=IHfarR!rzE:7YarR^Hw]zYjuO0sgz/5]%zxJUhaAg+6A=STtz/5]%zGvlHwn.!$arR^HayuVxwPz/ljS[fHBui\u0026vwgeS\u0026pe-t/ay]zcvqfQd3lQDlarR!vw/$V9AV/EqwO}?$arR^HarR^", "ln": 1815, "col": 4, "line": 55 }, { "b": "Abf3gi=]pEp^[8bcVB9uC42G7cN/ylzE:7Yy\u0026r/(y-)Xdzc{^:A=+V4wNPaXAV^H/a$Uw#eIfpTm[DC#lQ:)LnK=osk#Zo8eIeLaa{@d8v{%f@AaJ([v}xX5uUjj{By/FnjS\u003e}2eIeLamnuk[lQ:)LnK=osk#Zo8eIeLaa{@d8v{%f@w{503BzkVhay/7@v@2BYxKLQ)uVH76Bye:6B9h5mc$u}0x(mo%wO\u0026$vx(!urwPzc}vqPN83lQDyeG/mGazbt9wft#cwGU!$B95KzwO\u0026M1wPz(n", "ln": 2754, "col": 10, "line": 101 }, { "b": "wEoL5y\u0026r/(y-)XnB09Q*fBw{By\u0026r/(y-)Xdz3?ydCw7YbwGV8nB.8XazWEQfarUGsv{%f@zE[3hz/W3:ay/7[x(mo%wO\u003cFux(mDfAaJ([v}xX5uUB1VwmY^jaAhmuas!M?efG4PBP", "ln": 3004, "col": 54, "line": 107 }, { "b": "aAhmuauZ\u0026+wP@9iA%:3jwO#2=3lQE9w/#57z6i}lwO}?$arR!yz!0i(ay!#6BsXLCA=Jo=aA8jgzGx(ne{GlciwbhXCpmAwz7b/marR!vw/$V9AV/EqwO}?$arR^HarR!EwPS6nzxJL1y\u0026:esaz2Ol3lQDlaz2C33lQDlaz+$avqE67vqPNbaz2OlauZ\u0026SwPz(NxjVf(x(!urwPzc}vqPN7dgdguarUxgaz2OlaARpdzvdHearR^Hao", "ln": 3319, "col": 4, "line": 119 }, { "b": "y-)tjzEW^5z/cXlz!yFmC5eYLe?O+93lQDyeG!\u003eFxcqqmaz2Olz/M$pz!BblCwhejaA8yyay/LnBz(1sAb]J4x)qfKB97\u00262yANC8C4CE%arSl/ayPd#aAIakvrb^#z/Mgcaz+$avqE67auZ\u0026*wO+{/BsnsTa$K\u0026?e?ONWarUGsv{%f@BrAZ?DMT{[e*bMHarUGsv{%f@x(mK3auZ\u0026TwNY^{e[X:qx(mK3c]9s@b2-q4dgcz8at2e/yJ196iV@iRzF7Rwwnr\u0026mz!xz1az+$avqE6cxM4{kuVQl$auZ\u0026YzF0/tB7/GjByf9fv*Tt3x\u003ewGexM4{kuVQl$aARpdzvdHearUGsv{%f@A+fA3B8\u003e+kjS[=RC4CYnwHIRkz/P@bB8\u003e+t", "ln": 3881, "col": 5, "line": 147 }, { "b": "A+PA7d0eWct}3a6az2C33jm)#y\u0026r/(y-)OoxcotWBywS{wIdFhzEW9%c$mshefDbXdgcz8az2Oly\u0026r@sA::f0y\u0026r@my\u003c6RCaz(gjdgfT7wc@V:wPS6nzxKokarR^HwO#0@wmYaS", "ln": 4463, "col": 22, "line": 168 } ], "depth": 1, "facts": { "imp": [ [ "", "require" ], [ "", "require" ], [ "", "require" ], [ "", "string.format" ], [ "", "encode_base64url" ], [ "", "encode_base64url" ], [ "", "openssl.digest.new" ], [ "", "encode_base64url" ], [ "", "openssl.name.new" ], [ "", "openssl.altname.new" ], [ "", "pairs" ], [ "", "openssl.csr.new" ], [ "", "openssl.pkey.new" ], [ "", "openssl.x509.new" ], [ "", "select" ], [ "", "debug.getinfo" ], [ "", "reverse" ], [ "", "find" ], [ "", "sub" ], [ "", "string.format" ], [ "", "tostring" ], [ "", "table.concat" ], [ "", "errlog.raw_log" ], [ "", "ngx.base64" ], [ "", "ngx.errlog" ], [ "", "resty.acme.openssl" ] ], "mbr": [ "base64.decode_base64url", "base64.encode_base64url", "cn.blob", "debug.getinfo", "errlog.raw_log", "info.currentline", "info.short_src", "openssl.altname", "openssl.altname.new", "openssl.csr", "openssl.csr.new", "openssl.digest", "openssl.digest.new", "openssl.name", "openssl.name.new", "openssl.pkey", "openssl.pkey.new", "openssl.x509", "openssl.x509.new", "params.e", "params.n", "string.find", "string.format", "string.reverse", "string.sub", "table.concat" ], "tgt": [ "debug.getinfo", "encode_base64url", "errlog.raw_log", "find", "openssl.altname.new", "openssl.csr.new", "openssl.digest.new", "openssl.name.new", "openssl.pkey.new", "openssl.x509.new", "pairs", "require", "reverse", "select", "string.format", "sub", "table.concat", "tostring" ], "funcs": [ [ "thumbprint", 965 ], [ "create_csr", 1414 ], [ "create_pkey", 2565 ], [ "check_chain_root_issuer", 2888 ], [ "log", 3877 ] ], "metrics": { "ast": { "op.eq": 1, "op.gt": 1, "op.add": 5, "op.lor": 2, "op.sub": 2, "op.lnot": 2, "max_depth": 16, "call_count": 40, "node_count": 1345, "member_count": 26, "max_array_len": 7, "op_density.eq": 0, "op_density.gt": 0, "op_density.add": 0, "op_density.lor": 0, "op_density.sub": 0, "op_density.lnot": 0, "max_concat_chain": 3, "member_depth_max": 3, "infinite_loop_count": 1 }, "file": { "size": 4802, "entropy": 4.76 }, "text": { "lines": 184, "top_char": 101, "max_ws_run": 5, "digit_ratio": 0.02, "space_count": 928, "char_entropy": 4.76, "unique_chars": 78, "top_char_null": 0, "string_density": 0.16, "top_char_ratio": 0.08, "avg_line_length": 25.1, "max_line_length": 86, "empty_line_ratio": 0.13, "last_line_length": 1, "whitespace_ratio": 0.23, "identifier_density": 1.36, "line_length_stddev": 20.74, "normalized_string_count": 2.14, "suspicious_identifier_ratio": 0.05, "normalized_unique_identifiers": 10.37 }, "binds": { "count": 44 }, "binary": { "peak_region_bytes": 3778, "peak_region_entropy": 4.98 }, "source": { "function_count": 5 }, "imports": { "count": 3, "third_party_count": 3, "third_party_ratio": 1 }, "strings": { "bytes": 422, "count": 29, "avg_length": 14.55, "max_length": 42, "avg_entropy": 2.52, "empty_count": 1, "entropy_stddev": 1.29 }, "comments": { "chars": 851, "count": 18, "lines": 18, "to_code_ratio": 0.11, "url_in_comments": 2 }, "functions": { "count": 5 }, "identifiers": { "count": 251, "unique": 78, "avg_length": 6.73, "max_length": 23, "min_length": 1, "avg_entropy": 2.23, "reuse_ratio": 0.31, "length_stddev": 4.49, "has_digit_ratio": 0.05, "sequential_names": 4, "single_char_count": 5, "single_char_ratio": 0.06, "high_entropy_count": 3, "high_entropy_ratio": 0.04, "all_lowercase_ratio": 0.94, "all_uppercase_ratio": 0.01, "numeric_suffix_count": 2, "underscore_prefix_count": 1 } } }, "id": 29, "mol": "H(Po)Md(In₂)", "path": "/tmp/cyclotron-7af1572c/samples/391ba3f1479a/lua-resty-acme-0.9.0-1.src.rock!!lua-resty-acme/lib/resty/acme/util.lua", "pid": 0, "risk": 3, "sha": "4dc64e1553661baf7de5d29ab9ac9b1f71acb6be79001733bc2f88640d716658", "size": 4802, "traits": [ { "id": "metadata/import/lua/ngx/base64::ngx/base64", "conf": 0.95, "crit": 3, "desc": "imports ngx.base64", "spans": [ [ 601, 10 ] ] }, { "id": "metadata/import/lua/ngx/errlog::ngx/errlog", "conf": 0.95, "crit": 2, "desc": "imports ngx.errlog", "spans": [ [ 912, 0 ] ] }, { "id": "metadata/import/lua/resty/acme/openssl::resty/acme/openssl", "conf": 0.95, "crit": 3, "desc": "imports resty.acme.openssl", "spans": [ [ 104, 18 ] ] }, { "id": "metadata/file/line::file-has-30-plus-lines", "conf": 0.9, "crit": 2, "desc": "File has 30 or more lines" }, { "id": "metadata/lang/natural::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "spans": [ [ 193, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-2", "conf": 0.8, "crit": 1, "desc": "English function-word token \"and\"", "spans": [ [ 3970, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-3", "conf": 0.8, "crit": 1, "desc": "English function-word token \"that\"", "spans": [ [ 497, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "spans": [ [ 1863, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-6", "conf": 0.8, "crit": 1, "desc": "English function-word token \"with\"", "spans": [ [ 3929, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-7", "conf": 0.8, "crit": 1, "desc": "English function-word token \"this\"", "spans": [ [ 390, 0 ] ] }, { "id": "micro-behaviors/crypto/certificate/usage::pem-end", "conf": 0.7, "crit": 2, "desc": "References PEM certificate footer", "spans": [ [ 2861, 0 ] ] }, { "id": "micro-behaviors/process/debug/symbol::lua-debug-module-access", "conf": 0.9, "crit": 3, "desc": "Accesses Lua debug module", "spans": [ [ 4048, 13 ] ] }, { "id": "micro-behaviors/crypto/certificate/usage::certificate-ref", "conf": 0.5, "crit": 3, "desc": "References certificate terminology", "spans": [ [ 2818, 11 ] ] }, { "id": "micro-behaviors/crypto/certificate/usage::pem-begin", "conf": 0.7, "crit": 2, "desc": "References PEM certificate header", "spans": [ [ 2807, 0 ] ] }, { "id": "micro-behaviors/crypto/certificate/usage::x509-string", "conf": 0.6, "crit": 3, "desc": "References X.509 certificate terminology", "spans": [ [ 3383, 5 ] ] } ], "type": "lua" }, { "id": 32, "mol": "H(Cm)", "sha": "3ac31aa275b2bbd57749529b0c6c33f20c0c840685912d501189a309bb6125f0", "path": "/tmp/cyclotron-7af1572c/samples/391ba3f1479a/lua-resty-acme-0.9.0-1.src.rock!!lua-resty-acme/lib/resty/acme/autossl.lua", "risk": 2, "size": 17918, "type": "lua", "depth": 1 }, { "ctx": [ { "b": "y\u0026r/(y-)zkBz@u=aAz4kB.L(cc)AXyB98WWxMOuna$i\u003enz!0i(ay/ecz/cWXaAz4kB.L(cc)AeoB8L}udgf)fv{%f@B-.tlauZ\u0026/wPq\u003cbA+cTyA+frlC}JJnzdLtxBzkLndgf)fv{%f@z/xo9B8#dujS[=RADL#owHF-", "ln": 0, "col": 1, "line": 1 }, { "b": "atLF\u003cgB%UaefD]6atCV6atLW13jpP/v{%f@r7f.+uSo{auRTx(lQ+uNpdv/InMnbLsS/\u003cIzF%RtzF%Rtz/WKzwPRH3B%[Llmn)e)r8M\u003eapesRLmpeRYmOcuDr7fF-a$i\u003cay\u0026r/(y-)7VauZ\u0026]3lQD#rZ/[+nL-87jS(aae\u0026+KrcKLney\u0026r/(y-)OpauZ\u0026]uTEI+wmZ0djS[9aEf{r$z!0i(ay]4}vrDyduT[1(w[+)2jS]7UarSl/aARpdavev?miD+eave*}az2C3AbPDdBrCWzaA.:p3lQE1Aa@W4A+MTVar\u003eGvBz#pZfe3:zzdLqxfFUm?Aa{}vwPS08zEWZjAc9ZJA+v4ox(W={Bz(hBa$K6zat2e/BzbkdvpJ!=B-8pzwO\u003e\u003c\u0026y-)?raAz4ax(!xcATA{ivpJ!=B-8qdwO\u003e\u003c\u0026y-\u003e\u003e-zFr]r3lQDyeG/dGwGUz\u003ev@DHcBrCvgC{3*saw+H3azbLjzddJeBy/Ys3lQE1v}fC1zGGl3wQbyYaz$[fed9HxeIe8!", "ln": 587, "col": 35, "line": 21 }, { "b": "wPzH5xcp\u003e@zE^M{ATA{iwNP4PxKL^?y?mSfjS[SRy+b]oat2e/B98tvvp%c]w]zYjv}Yp!y?mG%wEoL5B98tvvp%dUvpS!=By/FnjS\u003e}\u0026xL!}A3lQDyeG/dGwGV5oz/Po0wGUG3zF0P}aAg+gB7F(8Bz\u0026pyBz(hdxjSh]wmoC0wPwb2aAITyA:-O", "ln": 1213, "col": 29, "line": 43 }, { "b": "arUSzwObH]A+e=*v}Yp+zxI7+zFr]r3lQDyeG!Liy\u00260M?v@0i0B-7Yhx(v(iBzb98ayP85z*cmBBz\u0026pCvqf*avR6d\u0026A+cwmx\u003eIr(y?W^1avev?miDU.A=#2maARJAC42i3wmoN\u003e3lQE3xKLZ[wO#c(uVQr$A=+U#vqG:?vpK6}jS[SRy+b{w3jpP/", "ln": 1541, "col": 1, "line": 54 }, { "b": "zxK4wB.99DzFr[]wO#2=3taA#v@#B6zxJpXe]ClAc$vgkw*[6fay/tcw/%kVB7GDgwPRv5vpB4:c$vgkw/#2jaBwI/aBvE5x(mD)CPYc(wmYvYB.(ebv@Dl%x\u003eI\u0026y3jm)#y\u0026r/(y-)!gy?s!MaAIaozdN/$BywS{wHE)darR!N3lQDlarR!qx(W={Bz(hBauZ\u0026+", "ln": 2185, "col": 8, "line": 76 }, { "b": "AV^H/v@Dl%e]#bMA:-P(uTWFNAcbVi3lQDyeG!1*l@b\u0026^v{%E?xDQ(bA=k$vvqYP#A+funA=91jA:-D?w{4{aC)UVpx\u003ewG9z/^ayBz(hdxjUBUwmoC0wPx?zx(mDfa%!\u0026=diJ.CwO}?$arR!FBz(hdxjUBUwmoC0wPw[Rar\u003e\u0026qB98WWvpKd=e]#a", "ln": 2715, "col": 23, "line": 97 }, { "b": "a%nG\u003caz2Ol3lQDlaz2C33lQE5zE:7YarUGsv{%f@yiK.wjS]7UarR^HAb](swN/*[wfs2TDKp(rarR^HvqGN0jS\u003e}Dq.*i*a$K6zarR^Haz#anv}u=Caz#anv}vg#arR^HarU/Ey-\u003e\u003e-B-Ip9arR^HEjLZFarR!Cvr(WcvpQGzaAg+my\u0026r-)3lQEt3jm)#eIe8ApEE#taz(mhxDQ+}BAz8mazth3wnC%$x9]+7x\u003ewGbvr(WcvpQG?zE:(evr(Wcve", "ln": 6263, "col": 58, "line": 209 }, { "b": "wI#w/A+)dsB8L}GwO#0@wmWf2vpAOUCxkxQvr(WcvpQ/o3lQDlarR!yz!0i(aztR2v\u003c0]Sz/xo9B8#dIxL?f/e]ClAd05%ow?EU6vQA!=vpJUWwQb*Hb2.2#gbQ%ldgdguarR^Hy\u0026r/(y-)!kxcotWxL?f/i+A8zvqEu6vpAOUCxkxQA=l5hv@#o)atbn?a$+5Ze?OnTvpAOUCxkxQvr(WcvpQ!]arR^HarUl7vQA\u003e]B1RJFxkRd1B-I4o", "ln": 7185, "col": 35, "line": 248 }, { "b": "arTM[ADL\u0026lBrC7izGGDcBp6PKav6)OA:-/cxK$Q.wPz\u0026marTv2vixV2vR/P#CwhejaAz4kB.bSoazts{wmY!53n0?peIe8gA+funA=90$wPI*ezGxwiz^)D)v@@\u0026iAV/EDAbo8dc#J:nefF!Jxdj%wzxJIhA=k#t3taA#v@#B6zxJpXi=G1UBsqoL", "ln": 8258, "col": 19, "line": 277 }, { "b": "uV*y6d0oMDed9HxarV1rarR^HarUJjBzbP6auZ?\u003ep!$1?a$K6zarR^HayYn1C{2l)yiK.I3lQDlarR!uwNPaXA=Su^azts{wmY!53lQDlaBKOtasNT8arUxgaz2Ol", "ln": 8790, "col": 34, "line": 296 }, { "b": "B-IpHar?}GwPI*ezGxwIar\u0026uVA+frhe[e:fC{%7carUGsv{%f@vSb!53lQE9w/#b9B8S:BwNPaXA=UCjlVl\u003c:wO#Pwrc-B]cTw=OBZ=:NefDV9diH=par\u003elkAbok#vruj4zzb:Cz/c:wBzbl63lQDlayYn1C{2l)yiarhe[wK6z!9AcA+frhe[e:fC{%7yaz2wgwOC:0A+frhe[!*8wmY!5tph^RzGGDcBs*EqAaHz5i=/BMc]0m}gbHB5jV%]ivq{g4x\u003e7N[x(v(xAb](ay?mDlyiarha%p#vwO}?$arQ", "ln": 8962, "col": 36, "line": 307 }, { "b": "zxJ?hy+cXMv}Yp!y?mG%wGUY8C42i3wi7?Satbn?BywS{wIdFhzEW9%c$NBtz/P[Iar\u0026(\u0026a$i\u003cwarR^Haz2C33lQDlaz2C33lQE5zE:7YarUxgaz#ataA8phwPzd0ByxolB0bNr", "ln": 12729, "col": 14, "line": 441 }, { "b": "z/Px1AV/7qaA?gfx\u003efmEA+eV\u0026C{4iEay]zmzFTl1wc%C4x\u003ewG9z/^axwPI/yv}xX5x\u003ez6?vru66vqYP#A+frhe]#byBAITEvqYP#A+frhe]#byBAITEjV%]iC42i3wfJdrxK#5*arR^Hy\u0026r@mzFai3l}6Bxm\u003et=$B8L}GwO#0@wmWffwPI/tdgdguarUYoBAIQ", "ln": 13734, "col": 21, "line": 484 }, { "b": "xKLZ[wO#c(ar\u0026uVBA}*Rar\u0026\u0026?a$K\u003cDxKLZ[wO#c(e{82EwO%4wa%pPvar\u0026uVv}Yp!y?mG%wIe4CvruTkefDb/aAIsjAbYJexcF=iarR^HarUliB7G5$aAIagw?EObvqC", "ln": 16983, "col": 26, "line": 574 } ], "depth": 1, "facts": { "imp": [ [ "", "require" ], [ "", "require" ], [ "", "require" ], [ "", "require" ], [ "", "cjson.new" ], [ "", "json.encode_escape_forward_slash" ], [ "", "os.getenv" ], [ "", "http.new" ], [ "", "openssl.pkey.new" ], [ "", "util.thumbprint" ], [ "", "setmetatable" ], [ "", "setmetatable" ], [ "", "decode_base64url" ], [ "", "require" ], [ "", "storagemod.new" ], [ "", "ipairs" ], [ "", "require" ], [ "", "handler.new" ], [ "", "set_account_key" ], [ "", "new_httpc" ], [ "", "json.decode" ], [ "", "string.format" ], [ "", "ngx.re.sub" ], [ "", "pcall" ], [ "", "log" ], [ "", "encode_base64url" ], [ "", "encode_base64url" ], [ "", "log" ], [ "", "json.encode" ], [ "", "encode_base64url" ], [ "", "json.encode" ], [ "", "encode_base64url" ], [ "", "json.encode" ], [ "", "openssl.hmac.new" ], [ "", "encode_base64url" ], [ "", "log" ], [ "", "json.encode" ], [ "", "encode_base64url" ], [ "", "json.encode" ], [ "", "encode_base64url" ], [ "", "json.encode" ], [ "", "openssl.digest.new" ], [ "", "encode_base64url" ], [ "", "json.encode" ], [ "", "new_httpc" ], [ "", "log" ], [ "", "json.decode" ], [ "", "json.decode" ], [ "", "log" ], [ "", "self.eab_handler" ], [ "", "decode_base64url" ], [ "", "new_httpc" ], [ "", "ipairs" ], [ "", "pairs" ], [ "", "ngx.sleep" ], [ "", "log" ], [ "", "json.encode" ], [ "", "ipairs" ], [ "", "log" ], [ "", "ipairs" ], [ "", "log" ], [ "", "json.encode" ], [ "", "table.concat" ], [ "", "type" ], [ "", "pairs" ], [ "", "encode_base64url" ], [ "", "log" ], [ "", "json.encode" ], [ "", "watch_order_status" ], [ "", "string.sub" ], [ "", "util.check_chain_root_issuer" ], [ "", "log" ], [ "", "parse_alternate_link" ], [ "", "log" ], [ "", "log" ], [ "", "util.check_chain_root_issuer" ], [ "", "log" ], [ "", "log" ], [ "", "log" ], [ "", "json.encode" ], [ "", "ipairs" ], [ "", "log" ], [ "", "ipairs" ], [ "", "log" ], [ "", "log" ], [ "", "self.conf.challenge_start_callback" ], [ "", "ngx.sleep" ], [ "", "watch_order_status" ], [ "", "openssl.pkey.new" ], [ "", "util.create_csr" ], [ "", "log" ], [ "", "ipairs" ], [ "", "pairs" ], [ "", "log" ], [ "", "ngx.exit" ], [ "", "log" ], [ "", "ngx.exit" ], [ "", "cjson" ], [ "", "resty.acme.openssl" ], [ "", "resty.acme.util" ], [ "", "resty.http" ] ], "mbr": [ "_M.new", "_M.set_account_key", "authz_status.challenges", "body.detail", "body.type", "challenge.status", "challenge.token", "challenge.type", "challenge.url", "challenges.challenges", "cjson.new", "conf.account_key", "conf.account_kid", "conf.eab_handler", "conf.eab_hmac_key", "conf.eab_kid", "conf.enabled_challenge_handlers", "conf.storage_adapter", "conf.storage_config", "domains.n", "eab_handler_module.handle", "eab_jws.payload", "eab_jws.protected", "eab_jws.signature", "handler.new", "http.new", "json.decode", "json.encode", "json.encode_escape_forward_slash", "jws.payload", "jws.protected", "jws.protected.jwk", "jws.protected.kid", "jws.signature", "ngx.DEBUG", "ngx.ERR", "ngx.INFO", "ngx.ctx", "ngx.ctx.acme_httpc", "ngx.exit", "ngx.re", "ngx.re.sub", "ngx.sleep", "openssl.digest", "openssl.digest.new", "openssl.hmac", "openssl.hmac.new", "openssl.pkey", "openssl.pkey.new", "order_body.authorizations", "order_body.finalize", "order_status.authorizations", "order_status.certificate", "order_status.status", "os.getenv", "params.e", "params.n", "payload.contact", "resp.body", "resp.certificate", "resp.detail", "resp.headers", "resp.status", "self.account_kid", "self.account_pkey", "self.account_thumbprint", "self.challenge_handlers", "self.conf", "self.conf.account_email", "self.conf.api_uri", "self.conf.challenge_start_callback", "self.conf.preferred_chain", "self.directory", "self.eab_handler", "self.eab_hmac_key", "self.eab_kid", "self.eab_required", "self.storage", "storagemod.new", "string.format", "string.sub", "table.concat", "util.check_chain_root_issuer", "util.create_csr", "util.decode_base64url", "util.encode_base64url", "util.log", "util.thumbprint" ], "tgt": [ "cjson.new", "decode_base64url", "encode_base64url", "handler.new", "http.new", "ipairs", "json.decode", "json.encode", "json.encode_escape_forward_slash", "log", "new_httpc", "ngx.exit", "ngx.re.sub", "ngx.sleep", "openssl.digest.new", "openssl.hmac.new", "openssl.pkey.new", "os.getenv", "pairs", "parse_alternate_link", "pcall", "require", "self.conf.challenge_start_callback", "self.eab_handler", "set_account_key", "setmetatable", "storagemod.new", "string.format", "string.sub", "table.concat", "type", "util.check_chain_root_issuer", "util.create_csr", "util.thumbprint", "watch_order_status" ], "funcs": [ [ "new_httpc", 1687 ], [ "set_account_key", 1849 ], [ "_M.new", 2202 ], [ "_M:init", 3600 ], [ "_M:jws", 5935 ], [ "_M:post", 8387 ], [ "_M:new_account", 9753 ], [ "_M:new_nonce", 10689 ], [ "_M:new_order", 11104 ], [ "watch_order_status", 11586 ], [ "parse_alternate_link", 13115 ], [ "_M:finalize", 13469 ], [ "_M:order_certificate", 15845 ], [ "_M:serve_http_challenge", 19091 ], [ "_M:serve_tls_alpn_challenge", 19315 ] ], "metrics": { "ast": { "op.eq": 11, "op.add": 3, "op.lor": 13, "op.land": 21, "op.lnot": 37, "max_depth": 26, "call_count": 132, "node_count": 5206, "member_count": 88, "max_array_len": 24, "op_density.eq": 0, "op_density.add": 0, "op_density.lor": 0, "op_density.land": 0, "op_density.lnot": 0.01, "max_concat_chain": 2, "member_depth_max": 3 }, "file": { "size": 19565, "entropy": 4.68 }, "text": { "lines": 658, "top_char": 101, "max_ws_run": 7, "digit_ratio": 0.01, "space_count": 3850, "char_entropy": 4.68, "unique_chars": 89, "top_char_null": 0, "string_density": 0.24, "top_char_ratio": 0.09, "avg_line_length": 28.73, "max_line_length": 115, "empty_line_ratio": 0.14, "last_line_length": 9, "whitespace_ratio": 0.23, "identifier_density": 1.5, "line_length_stddev": 25.21, "normalized_string_count": 6.28, "repeated_char_sequences": 36, "suspicious_string_ratio": 0.01, "suspicious_comment_ratio": 0.02, "suspicious_identifier_ratio": 0.03, "normalized_unique_identifiers": 18.37 }, "binds": { "count": 113 }, "binary": { "peak_region_bytes": 3072, "peak_region_entropy": 5.18 }, "source": { "function_count": 5 }, "imports": { "count": 4, "third_party_count": 4, "third_party_ratio": 1 }, "strings": { "sql": 2, "bytes": 2985, "count": 161, "url_count": 1, "avg_length": 18.54, "max_length": 83, "avg_entropy": 2.89, "empty_count": 2, "entropy_stddev": 0.96 }, "comments": { "chars": 1840, "count": 47, "empty": 3, "lines": 44, "todo_count": 6, "high_entropy": 1, "to_code_ratio": 0.07, "url_in_comments": 2 }, "functions": { "count": 5 }, "identifiers": { "count": 985, "unique": 172, "avg_length": 8.69, "max_length": 27, "min_length": 1, "avg_entropy": 2.45, "reuse_ratio": 0.17, "length_stddev": 5.94, "has_digit_ratio": 0.01, "sequential_names": 6, "single_char_count": 7, "single_char_ratio": 0.04, "high_entropy_count": 11, "high_entropy_ratio": 0.06, "all_lowercase_ratio": 0.92, "all_uppercase_ratio": 0.04, "underscore_prefix_count": 4 } } }, "id": 33, "mol": "H₃(Cm₂Cr₂Os)", "path": "/tmp/cyclotron-7af1572c/samples/391ba3f1479a/lua-resty-acme-0.9.0-1.src.rock!!lua-resty-acme/lib/resty/acme/client.lua", "pid": 0, "risk": 4, "sha": "405a9b645433d5e2a73a16f76f96e858aaff4e43162b3afed31bae333646fdf6", "size": 19565, "traits": [ { "id": "micro-behaviors/crypto/certificate/usage::acme-directory-endpoint", "conf": 0.95, "crit": 3, "desc": "References an ACME directory endpoint", "spans": [ [ 837, 38 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-1", "conf": 0.8, "crit": 2, "desc": "English function-word token \"the\"", "spans": [ [ 784, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-2", "conf": 0.8, "crit": 2, "desc": "English function-word token \"and\"", "spans": [ [ 2763, 0 ] ] }, { "id": "micro-behaviors/os/env/access::lua-os-getenv", "conf": 0.85, "crit": 3, "desc": "Lua environment variable access", "spans": [ [ 651, 9 ] ] }, { "id": "micro-behaviors/communications/http/token-auth::jwt-rsa-algorithm-field", "conf": 0.9, "crit": 3, "desc": "RSA algorithm field", "spans": [ [ 6327, 13 ] ] }, { "id": "micro-behaviors/crypto/certificate/usage::certificate-ref", "conf": 0.5, "crit": 2, "desc": "References certificate terminology", "spans": [ [ 13782, 0 ] ] }, { "id": "micro-behaviors/crypto/hash/hmac::hmac-api-reference", "mbc": "C0029", "conf": 0.9, "crit": 3, "desc": "References an HMAC API", "spans": [ [ 7249, 8 ] ] }, { "id": "micro-behaviors/communications/http/header/content-type::json-header", "conf": 0.9, "crit": 3, "desc": "References HTTP Content-Type application/json", "spans": [ [ 9026, 46 ] ] } ], "type": "lua" }, { "id": 34, "sha": "6319d164958fedb00bc8b64152b7ed27eb5914d368be95a726f9d5f4a90ade3b", "path": "jayrgo_luacheck-action.registry.json", "size": 811, "type": "registry", "depth": 2 } ], "omitted_files": 3, "v": "8" } }