{ "llm": { "conf": 0.31401882, "grade": "benign", "model": "Qwen/Qwen3.6-27B", "outcome": "benign", "interpretation": "Legitimate Go tooling source code" }, "ml": { "v": "7", "eng": "2.3.0-beta.0", "lvl": -1, "conf": 0, "mods": [ { "cls": 0, "raw": 0.00680393, "rte": "az", "prob": 0.00680393 } ], "prob": 0.020026892, "skip": [ { "rte": "az/zip", "why": "unavailable" }, { "rte": "az/zip", "why": "unavailable" } ], "files": [ { "id": 0, "lvl": -1, "conf": 0, "prob": 0.02002689242362976, "type": "zip" }, { "id": 1, "lvl": -1, "conf": 0, "prob": 0.0002828836441040039, "type": "go" }, { "id": 2, "lvl": -1, "conf": 0, "prob": 0.004742622375488281, "type": "go" }, { "id": 3, "lvl": -1, "conf": 0, "prob": 0.000041097402572631836, "type": "go.mod" }, { "id": 4, "lvl": -1, "conf": 0, "prob": 0.00012001395225524902, "type": "go.sum" }, { "id": 5, "lvl": -1, "conf": 0, "prob": 0.00007447600364685059, "type": "go" }, { "id": 6, "lvl": -1, "conf": 0, "prob": 0.011542856693267822, "type": "shell" }, { "id": 7, "lvl": -1, "conf": 0, "prob": 0.008920341730117798, "type": "go" }, { "id": 8, "lvl": -1, "conf": 0, "prob": 0.02002689242362976, "type": "shell" }, { "id": 9, "lvl": -1, "conf": 0, "prob": 0.0023692846298217773, "type": "text" }, { "id": 10, "lvl": -1, "conf": 0, "prob": 0.02002689242362976, "type": "registry" }, { "id": 11, "lvl": -1, "conf": 0, "prob": 0.02002689242362976, "type": "registry" }, { "id": 12, "lvl": -1, "conf": 0, "prob": 0.02002689242362976, "type": "registry" }, { "id": 13, "lvl": -1, "conf": 0, "prob": 0.02002689242362976, "type": "registry" }, { "id": 14, "lvl": -1, "conf": 0, "prob": 0.02002689242362976, "type": "registry" }, { "id": 15, "lvl": -1, "conf": 0, "prob": 0.02002689242362976, "type": "registry" }, { "id": 16, "lvl": -1, "conf": 0, "prob": 0.02002689242362976, "type": "registry" }, { "id": 17, "lvl": -1, "conf": 0, "prob": 0.02002689242362976, "type": "registry" }, { "id": 18, "lvl": -1, "conf": 0, "prob": 0.02002689242362976, "type": "registry" }, { "id": 19, "lvl": -1, "conf": 0, "prob": 0.02002689242362976, "type": "registry" }, { "id": 20, "lvl": -1, "conf": 0, "prob": 0.02002689242362976, "type": "registry" }, { "id": 21, "lvl": -1, "conf": 0, "prob": 0.02002689242362976, "type": "registry" }, { "id": 22, "lvl": -1, "conf": 0, "prob": 0.02002689242362976, "type": "registry" }, { "id": 23, "lvl": -1, "conf": 0, "prob": 0.02002689242362976, "type": "registry" }, { "id": 24, "lvl": -1, "conf": 0, "prob": 0.02002689242362976, "type": "registry" }, { "id": 25, "lvl": -1, "conf": 0, "prob": 0.02002689242362976, "type": "registry" }, { "id": 26, "lvl": -1, "conf": 0, "prob": 0.02002689242362976, "type": "registry" }, { "id": 27, "lvl": -1, "conf": 0, "prob": 0.02002689242362976, "type": "registry" }, { "id": 28, "lvl": -1, "conf": 0, "prob": 0.02002689242362976, "type": "registry" }, { "id": 29, "lvl": -1, "conf": 0, "prob": 0.02002689242362976, "type": "registry" }, { "id": 30, "lvl": -1, "conf": 0, "prob": 0.02002689242362976, "type": "registry" }, { "id": 31, "lvl": -1, "conf": 0, "prob": 0.02002689242362976, "type": "registry" }, { "id": 32, "lvl": -1, "conf": 0, "prob": 0.02002689242362976, "type": "registry" }, { "id": 33, "lvl": -1, "conf": 0, "prob": 0.02002689242362976, "type": "registry" }, { "id": 34, "lvl": -1, "conf": 0, "prob": 0.02002689242362976, "type": "registry" }, { "id": 35, "lvl": -1, "conf": 0, "prob": 0.02002689242362976, "type": "registry" }, { "id": 36, "lvl": -1, "conf": 0, "prob": 0.02002689242362976, "type": "registry" }, { "id": 37, "lvl": -1, "conf": 0, "prob": 0.02002689242362976, "type": "registry" }, { "id": 38, "lvl": -1, "conf": 0, "prob": 0.02002689242362976, "type": "registry" }, { "id": 39, "lvl": -1, "conf": 0, "prob": 0.00020629167556762695, "type": "registry" } ], "version": "v18.18", "analyzed_at": "2026-07-08T11:45:47Z" }, "path": "github.com-datadog-orchestrion-_tools-v0.0.0-20260706084330-df04ed94b69e.zip", "raw": { "files": [ { "id": 0, "ctx": [ { "b": "p!H([6Awys2MK\u00268000000000000000003He003UCBzb/ae[n*pfjXHkvpTp?fk\u003e(vxK#mbA+PDffje*tz!%FWB$+K5e?!\u003ejfFUKuh.Wczi5AAEfFc*EfF)uKiw+h6iB%\u003cNz/f-f", "n": [ { "c": 2, "d": "Zip archive path", "i": "metadata/package/files/included::zip-archive-path", "o": 0, "z": 76, "cf": 0.949999988079071 } ], "ln": 0 } ], "mol": "H₂(F₂Po₂)", "sha": "bb3463f7ece3ecbcb7b1f3bc0816d644f3b44ab14c0628db1d59728df2eea3c2", "path": "github.com-datadog-orchestrion-_tools-v0.0.0-20260706084330-df04ed94b69e.zip", "risk": 4, "size": 19843, "type": "zip", "facts": { "metrics": { "file": { "size": 19843.0, "entropy": 7.88, "size_bytes": 19843.0 }, "binary": { "overall_entropy": 7.88, "peak_region_bytes": 18432.0, "peak_region_entropy": 7.82 }, "archive": { "file_count": 10.0, "member_count": 10.0, "script_count": 2.0, "zip_bomb_ratio": 2.9, "directory_count": 0.0, "executable_count": 0.0, "extra_field_size": 0.0, "noise_file_count": 0.0, "total_compressed": 17151.0, "compression.ratio": 0.41, "hidden_file_count": 0.0, "total_uncompressed": 42242.0, "crc_collision_count": 0.0, "entry_comment_count": 0.0, "max_filename_length": 100.0, "rtlo_filename_count": 0.0, "format.regular_count": 10.0, "nested_archive_count": 0.0, "path_traversal_count": 0.0, "symlink_escape_count": 0.0, "security.setgid_count": 0.0, "security.setuid_count": 0.0, "security.sticky_count": 0.0, "double_extension_count": 0.0, "duplicate_member_count": 0.0, "security.symlink_count": 0.0, "unicode_filename_count": 0.0, "homoglyph_filename_count": 0.0, "security.encrypted_count": 0.0, "misplaced_executable_count": 0.0, "timing.mtime_dominant_count": 10.0, "timing.sentinel_mtime_count": 10.0, "security.world_writable_count": 0.0, "timing.mtime_dominant_fraction": 1.0, "compression.method_counts.deflate": 10.0 } } }, "traits": [ { "id": "micro-behaviors/communications/http/lib/netlib::net-http-import", "atk": "T1071.001", "mbc": "C0002", "crit": 3, "desc": "net/http package import", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/fs/read/directory::filepath-walk-dup", "atk": "T1083", "mbc": "E1083", "conf": 0.699999988079071, "crit": 3, "desc": "filepath.Walk recursive directory traversal", "from": [ { "file": 5 } ] }, { "id": "objectives/impact/destroy/keywords::target-codebase--repo", "conf": 0.8799999952316284, "crit": 1, "desc": "Codebase/repository target word: repo", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/process/exit/trap::shell-exit-trap", "conf": 0.8500000238418579, "crit": 3, "desc": "Shell EXIT trap handler", "from": [ { "file": 6 } ] }, { "id": "micro-behaviors/process/create/shell/spawn::shell-platform-check-darwin", "conf": 0.800000011920929, "crit": 2, "desc": "Checks darwin platform", "from": [ { "file": 6 } ] }, { "id": "metadata/file/extension/identity::shell-a", "conf": 1.0, "crit": 2, "desc": "POSIX shell script extension", "from": [ { "file": 6 } ], "spans": [ [ 0, 18 ] ] }, { "id": "micro-behaviors/fs/directory/traverse::rm-rf-cmd", "conf": 0.6000000238418579, "crit": 2, "desc": "rm -rf command", "from": [ { "file": 6 } ] }, { "id": "micro-behaviors/process/create/shell/spawn::shell-platform-check", "conf": 0.800000011920929, "crit": 2, "desc": "Checks shell platform type", "from": [ { "file": 6 } ] }, { "id": "objectives/impact/destroy/keywords::target-codebase--repository", "conf": 0.8799999952316284, "crit": 1, "desc": "Codebase/repository target word: repository", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/fs/directory/delete::rm-rf", "atk": "T1070.004", "mbc": "C0047", "conf": 0.800000011920929, "crit": 3, "desc": "rm -rf shell command", "from": [ { "file": 6 } ] }, { "id": "micro-behaviors/process/create/shell/spawn::shell-symbols", "conf": 0.8999999761581421, "crit": 3, "desc": "Shell execution symbols", "from": [ { "file": 6 } ] } ] }, { "analysis_gaps": [ "flow-graph-limited", "flow-query-incomplete" ], "ctx": [ { "b": "rC(R:B8@EnCYmFkv}*43C{4fIvru6\u003eaA8vnwPA0eB7DF5y?$kax(4v4azCZoBzbxfaAz4jz/YSmz/QaCvrb{4y?Wx\u003czGxx13nj4PB-7-3AV/EqwGToTvpJ$ZawuGVwO#N2axA5]B7]MgatLM6e^:l+axi2*B0bBxz!a02BrCpnv@co#wPF#nz!s9nvrb{4wmY{}y\u0026so7wftr5avGTWvpTp?asH]BBz#pZfe4J[Ck", "ln": 3, "col": 4, "line": 1 }, { "b": "ayX=2wN({4zxK4mwGU@my?$kmwPq\u003c7B95^J3nj4PBzk\u0026kwH[%nzGx@vx(mMaBzb98azC{uvpT4.A+fqmBz\u0026piz/f-fzGGPhzEEu7v@Dj3x(\u003eFsByx5$vrb[1aA.:pwftubaARphA%:MNaAz4jz/YSmz/QaQaw3U$vrDWgzddK2v{%g\u0026C{4cszeTPeB0a[eC{43FByX*4wN({1vpA!:B0bNrvrrSoz/](bazthbwGUC[wO}\u0026dfcBXAB7]o8wN(])C{4ixx(+zsz/oCNayPd#az+Q$C4C.qvqZukz//V7AV/gbvR6v%aA.Nzz/]M6wN)z2Aa9l(vp%c]zddc@3jpG:AbP=sasEN6b4CLeBy/Ysa{[S2wO#0@wnb{]fktMDzxYz]b4U!nz/P[y3jd[*y**%23jd[*zfc%e2{Kh7xcEV?b5H+cB0p}$b5Q$lfkbDHA3tR}b5.JD3jd[%wOkO0A3tR}b6dNmv}xZ93jd[$BAh8kxlbm73jd[?x([3hvLheez7/Kuz!A($fk2hPxk8E3BZ^1EhArB6x([3hvJ(dd3jnBtay/tcC4CMkx(v($y!OnDwO=Agx(+z9az\u003eLaaA7\u003cmv@DmdwO#Q7z/f01ay/tbze18mBA}?pB0bNyaARpdx(Utaz/P(fB8V5nwnb{]az+E}wO=Au3nj4Pq!oJ3azt\u003esAc15[fk20uBs}iuBzb/ae[n*p", "ln": 294, "col": 48, "line": 6 }, { "b": "z^%$LarR^HarR\u003erz/f-fzGGPhzEEukv@Dj3x((1rxM4{5a$K\u0026\u0026fcAL%x\u003c(69w]zYjwn+$03jd[!z!0\u0026jiV]K/arR\u003erz/f-fzGGPhzEEukv@Dj3x((1rxM4{5a$K\u0026\u0026fcAS2zeB0eB0bNrvrrS2w[CQ:BrCajv%8T1zGGrex(v(iz/fxp3jd[*wNPV", "ln": 1039, "col": 4, "line": 33 }, { "b": "eN@Zoze18Bw[ty)a$K\u0026Vfe1Cnz/6u9BAnNDxKM09vpS)\u003ez/M$vwO(vewGUz7zE[2mw[ty)B-I4oBz\u0026pzxK@qLp!q^FAV!vN3jd[*x)p*.arR^HarR\u003erz/f-fzGGPhzEEukv@Dj3x-", "ln": 1206, "col": 27, "line": 35 }, { "b": "fcA+@BrCa9w)]*#BrC:ny\u0026%rgazbUjz6izcC4\u003e#nzF-%5BrCpfaAzQxzFs03aA.NjwPw[-ni[\u003cn329#]z/WK3wPRH3B%[L8nMnkXlsieZmnu/?pc?Pya$jS$jS\u003e}/B.\u003e(3A+flkwPI@qaBsC4329#]Aa9\u003c4auzUdz/WK3wPRH3B%[L8nMnkXlsieZmnu/?p^F5Ka$kO@Aa9\u003c4ar-(\u003ca%FdR3jd1BwmoN*efFIAAV^zaaA8rNqE%oEmRMWIc#-QpxEKn{2)\u003erTaz2Olar-(\u003czFr]fDKp5=2)\u003eA^xd=UZByx04zyx7pAW.t42)(1!2)*]Yvr9G4C4CMkaAITBBZ]IoDKp5=2)\u003cvHzdm6%arR^HazC.nayF@9", "ln": 2196, "col": 3, "line": 53 }, { "b": "2)*]^ayF@9z/dPWz*c8gAW1(#2)*[AEiq{jB8L}Sb64mlz/YSmz/QaEu\u003cWhD34ic!2)\u003erTaz2OlauzUdyiarhe(=!avrcB5vqEu5vrt{easpVywO#Psj0n9PAV=I*az$[faBsC42)*]Oz!yW(vrt{]y\u0026gUjA=JPo2)*]^3jd1BAb[\u0026/AbM\u003cZaz2.czGEHewPhNex([olC}I\u003c2zdK4X2)\u003eM\u003epJ{X/AV^H/wP?T5Bs{E5AbP/iBz(hBe(cXewPxy%z!x", "ln": 2617, "col": 3, "line": 66 }, { "b": "By/Yse\u003c-#RyIdWaB-7.rdgcw\u003ey?WD#BrARcazkzgxMW=ppgXSpy?WD#Bsq3vy:/X$x\u003ewGfz!\u0026{4auzUdz/WK3wPRH3B%[L8nMnkXlsiX/ogqP1dlwU]z!\u0026{4ar-(\u003ca%FdR3jd2Gy?WD#BrAZ?v@b\u003c\u003czGEHjx([2OB-.p@z!\u0026{4d0fxywO@}734ic/32\u003c]oayuVxwPz/liZ1P}y?WD#Bs{yjy\u002600XADL\u0026lBAo68wPPtgBA/tVAb[-#zE)\u0026taAhv0wPhMsaAhu@B.$N", "ln": 3479, "col": 12, "line": 97 }, { "b": "3jd2Pz!yW(vrt{]y\u0026gUjA=JPo34ic!Bzk\u0026kwGT2%aAhuNm}D^wx([f5c[bGfy\u0026r@sp\u0026Zn/By({Bra]?=Bzk\u0026kwGU]6aARphB0bBAy?$kmwPq\u003c7B95KsB2\u003eA\u0026AA)x9efG4GBzLIq3jm8UA.G[JwO-[uwPz/liZ1Q4vpA!:mSirDx([f5d0ffBy?k45329#]wPz!", "ln": 3714, "col": 17, "line": 104 } ], "depth": 1, "facts": { "imp": [ [ "", "os.Getenv" ], [ "", "os.Getenv" ], [ "", "os.ReadFile" ], [ "", "log.Fatalln" ], [ "", "json.Unmarshal" ], [ "", "log.Fatalln" ], [ "", "flag.NewFlagSet" ], [ "", "flags.StringVar" ], [ "", "flags.StringVar" ], [ "", "flags.IntVar" ], [ "", "flags.Parse" ], [ "", "log.Fatalln" ], [ "", "log.Fatalln" ], [ "", "log.Fatalln" ], [ "", "log.Fatalln" ], [ "", "context.Background" ], [ "", "github.NewClient" ], [ "", "os.Getenv" ], [ "", "client.WithAuthToken" ], [ "", "client.PullRequests.Get" ], [ "", "log.Fatalln" ], [ "", "pr.GetTitle" ], [ "", "log.Printf" ], [ "", "labelForTitle" ], [ "", "log.Fatalln" ], [ "", "log.Printf" ], [ "", "client.Issues.AddLabelsToIssue" ], [ "", "log.Fatalf" ], [ "", "client.Issues.RemoveLabelForIssue" ], [ "", "log.Fatalf" ], [ "", "log.Printf" ], [ "", "fmt.Sprintf" ], [ "", "strings.Join" ], [ "", "slices.Collect" ], [ "", "maps.Keys" ], [ "", "regexp.Compile" ], [ "", "regex.FindStringSubmatch" ], [ "", "errors.New" ], [ "", "context" ], [ "", "encoding/json" ], [ "", "errors" ], [ "", "flag" ], [ "", "fmt" ], [ "", "github.com/google/go-github/v69/github" ], [ "", "log" ], [ "", "maps" ], [ "", "net/http" ], [ "", "os" ], [ "", "regexp" ], [ "", "slices" ], [ "", "strings" ] ], "mbr": [ "client.Issues", "client.Issues.AddLabelsToIssue", "client.Issues.RemoveLabelForIssue", "client.PullRequests", "client.PullRequests.Get", "client.WithAuthToken", "context.Background", "errors.New", "event.Number", "event.Repository", "event.Repository.Name", "event.Repository.Owner", "event.Repository.Owner.Login", "flag.ExitOnError", "flag.NewFlagSet", "flags.IntVar", "flags.Parse", "flags.StringVar", "fmt.Sprintf", "github.NewClient", "http.StatusNotFound", "json.Unmarshal", "log.Fatalf", "log.Fatalln", "log.Printf", "maps.Keys", "os.Args", "os.Getenv", "os.ReadFile", "pr.GetTitle", "regex.FindStringSubmatch", "regexp.Compile", "resp.StatusCode", "slices.Collect", "strings.Join" ], "tgt": [ "client.Issues.AddLabelsToIssue", "client.Issues.RemoveLabelForIssue", "client.PullRequests.Get", "client.WithAuthToken", "context.Background", "errors.New", "flag.NewFlagSet", "flags.IntVar", "flags.Parse", "flags.StringVar", "fmt.Sprintf", "github.NewClient", "json.Unmarshal", "labelForTitle", "log.Fatalf", "log.Fatalln", "log.Printf", "maps.Keys", "os.Getenv", "os.ReadFile", "pr.GetTitle", "regex.FindStringSubmatch", "regexp.Compile", "slices.Collect", "strings.Join" ], "funcs": [ [ "main", 2113 ], [ "labelForTitle", 4599 ] ], "metrics": { "ast": { "op.eq": 6, "op.le": 1, "op.ne": 11, "op.lor": 1, "op.sub": 1, "op.band": 4, "max_depth": 22, "call_count": 38, "node_count": 1271, "member_count": 35, "op_density.eq": 0, "op_density.le": 0, "op_density.ne": 0.01, "op_density.lor": 0, "op_density.sub": 0, "op_density.band": 0, "max_array_length": 2, "max_member_depth": 4 }, "file": { "size": 5045, "entropy": 5.1 }, "text": { "lines": 147, "top_char": 101, "tab_count": 194, "digit_ratio": 0.01, "space_count": 541, "char_entropy": 5.1, "unique_chars": 86, "top_char_null": 0, "import_density": 8.84, "string_density": 0.48, "top_char_ratio": 0.08, "avg_line_length": 33.32, "max_line_length": 119, "empty_line_ratio": 0.12, "last_line_length": 1, "whitespace_ratio": 0.17, "identifier_density": 1.44, "line_length_stddev": 34.25, "max_whitespace_run": 6, "normalized_import_count": 1.07, "normalized_string_count": 5.77, "suspicious_comment_ratio": 0.04, "normalized_function_count": 0.16, "imports_to_functions_ratio": 6.5, "strings_to_functions_ratio": 35, "normalized_unique_identifiers": 10.28, "identifiers_to_functions_ratio": 37 }, "binary": { "peak_region_bytes": 4021, "peak_region_entropy": 5.1 }, "source": { "function_count": 2 }, "imports": { "count": 13, "stdlib_count": 10, "stdlib_ratio": 0.77, "third_party_count": 3, "third_party_ratio": 0.23 }, "strings": { "bytes": 1127, "count": 70, "url_count": 1, "avg_length": 16.1, "max_length": 61, "avg_entropy": 2.88, "empty_count": 6, "entropy_stddev": 0.94 }, "comments": { "chars": 1367, "count": 23, "lines": 23, "url_count": 2, "high_entropy": 1, "to_code_ratio": 0.19 }, "functions": { "count": 2, "density": 1.36, "avg_params": 0.5, "code_ratio": 0.69, "max_params": 1, "length_stddev": 36.5, "avg_name_length": 8.5, "no_params_count": 1, "avg_length_lines": 50.5, "max_length_lines": 87, "min_length_lines": 14, "avg_param_name_length": 5 }, "identifiers": { "count": 211, "unique": 74, "avg_length": 6.74, "max_length": 19, "min_length": 1, "avg_entropy": 2.32, "reuse_ratio": 0.35, "length_stddev": 3.75, "single_char_count": 1, "single_char_ratio": 0.01, "high_entropy_count": 2, "high_entropy_ratio": 0.03, "all_lowercase_ratio": 0.43, "all_uppercase_ratio": 0.01, "underscore_prefix_count": 1 } } }, "id": 1, "mol": "H₂(DbOs₂)Md(In₄)", "path": "github.com-datadog-orchestrion-_tools-v0.0.0-20260706084330-df04ed94b69e.zip!!github.com/datadog/orchestrion/_tools@v0.0.0-20260706084330-df04ed94b69e/conventionalcommit/main.go", "pid": 0, "risk": 4, "sha": "2a6d8624eed0397cd419f88b2e59b49a5fc1fb616155aa530943ee8d90e81552", "size": 5045, "traits": [ { "id": "metadata/import/go/encoding/json::encoding/json", "conf": 0.95, "crit": 3, "desc": "imports encoding/json", "spans": [ [ 585, 13 ] ] }, { "id": "metadata/import/go/github/com/google/go-github/v69/github::github/com/google/go-github/v69/github", "conf": 0.95, "crit": 3, "desc": "imports github.com/google/go-github/v69/github", "spans": [ [ 692, 38 ] ] }, { "id": "metadata/import/go/net/http::net/http", "conf": 0.95, "crit": 3, "desc": "imports net/http", "spans": [ [ 642, 8 ] ] }, { "id": "metadata/import/go/os::os", "conf": 0.95, "crit": 3, "desc": "imports os", "spans": [ [ 654, 2 ] ] }, { "id": "micro-behaviors/data/serialize/json::go-json-unmarshal", "mbc": "C0032", "conf": 0.85, "crit": 3, "desc": "Go JSON unmarshal call", "spans": [ [ 2681, 14 ] ] }, { "id": "micro-behaviors/os/env/secret-name::github-token-name-reference", "conf": 0.9, "crit": 3, "desc": "References the GITHUB_TOKEN environment variable", "spans": [ [ 3554, 12 ] ] }, { "id": "micro-behaviors/os/env/vcs::github-token-name-lookup-proximity", "conf": 0.9, "crit": 3, "desc": "GitHub token name near an environment lookup", "uses": [ 5, 20 ], "spans": [ [ 3543, 9 ], [ 3554, 12 ] ] }, { "id": "metadata/file/comment::source-comment-bytes-over-300", "conf": 0.92, "crit": 2, "desc": "Source has over 300 comment bytes" }, { "id": "metadata/import/go/context::context", "conf": 0.95, "crit": 2, "desc": "imports context", "spans": [ [ 574, 0 ] ] }, { "id": "metadata/import/go/errors::errors", "conf": 0.95, "crit": 2, "desc": "imports errors", "spans": [ [ 602, 0 ] ] }, { "id": "metadata/import/go/flag::flag", "conf": 0.95, "crit": 2, "desc": "imports flag", "spans": [ [ 612, 0 ] ] }, { "id": "metadata/import/go/fmt::fmt", "conf": 0.95, "crit": 2, "desc": "imports fmt", "spans": [ [ 620, 0 ] ] }, { "id": "metadata/import/go/log::log", "conf": 0.95, "crit": 2, "desc": "imports log", "spans": [ [ 627, 0 ] ] }, { "id": "metadata/import/go/maps::maps", "conf": 0.95, "crit": 2, "desc": "imports maps", "spans": [ [ 634, 0 ] ] }, { "id": "metadata/import/go/regexp::regexp", "conf": 0.95, "crit": 2, "desc": "imports regexp", "spans": [ [ 660, 0 ] ] }, { "id": "metadata/import/go/slices::slices", "conf": 0.95, "crit": 2, "desc": "imports slices", "spans": [ [ 670, 0 ] ] }, { "id": "metadata/import/go/strings::strings", "conf": 0.95, "crit": 2, "desc": "imports strings", "spans": [ [ 680, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english", "conf": 0.8, "crit": 2, "desc": "Contains common English function words", "uses": [ 27, 28, 29, 30, 31, 32 ], "spans": [ [ 1087, 0 ] ] }, { "id": "micro-behaviors/data/serialize/json::encoding-json-import", "mbc": "C0032", "conf": 0.5, "crit": 2, "desc": "encoding/json package import", "spans": [ [ 586, 0 ] ] }, { "id": "micro-behaviors/fs/read/file/full::os-readfile", "conf": 0.9, "crit": 2, "desc": "Read file contents via os.ReadFile", "spans": [ [ 2385, 0 ] ] }, { "id": "micro-behaviors/os/env/read::os-getenv", "conf": 0.8, "crit": 2, "desc": "os.Getenv() reads a named environment variable", "spans": [ [ 2260, 0 ] ] }, { "id": "micro-behaviors/os/package-manager/publish::go-github-client-import", "conf": 0.9, "crit": 2, "desc": "Go GitHub client library import", "spans": [ [ 693, 0 ] ] }, { "id": "micro-behaviors/os/telemetry/logging/event::go-logger-write-call", "conf": 0.94, "crit": 2, "desc": "Go writes a message through a logger", "spans": [ [ 3762, 0 ] ] }, { "id": "micro-behaviors/process/lifecycle/auto-exec::go-package-global-initializer", "conf": 0.98, "crit": 2, "desc": "Initializes Go package-level variables" }, { "id": "metadata/lang/natural/vocabulary/content-word::english-edit-verb-token", "conf": 0.88, "crit": 1, "desc": "English edit-action verb token", "spans": [ [ 374, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/content-word::secret-data-term-token", "conf": 0.9, "crit": 1, "desc": "Secret-data term token", "spans": [ [ 3554, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/content-word::sensitive-target-term-token", "conf": 0.88, "crit": 1, "desc": "Secret, security, or environment terminology", "uses": [ 25 ], "spans": [ [ 3554, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "spans": [ [ 89, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-2", "conf": 0.8, "crit": 1, "desc": "English function-word token \"and\"", "spans": [ [ 511, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-3", "conf": 0.8, "crit": 1, "desc": "English function-word token \"that\"", "spans": [ [ 342, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-4", "conf": 0.8, "crit": 1, "desc": "English function-word token \"have\"", "spans": [ [ 475, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "spans": [ [ 1087, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-7", "conf": 0.8, "crit": 1, "desc": "English function-word token \"this\"", "spans": [ [ 51, 0 ] ] }, { "id": "micro-behaviors/data/parse/vocabulary::token-word", "conf": 0.45, "crit": 1, "desc": "Contains the standalone word token", "spans": [ [ 3534, 0 ] ] } ], "type": "go" }, { "analysis_gaps": [ "flow-graph-limited", "flow-query-incomplete" ], "ctx": [ { "b": "rC(R:B8@EnCYmFkv}*43C{4fIvru6\u003eaA8vnwPA0eB7DF5y?$kax(4v4azCZoBzbxfaAz4jz/YSmz/QaCvrb{4y?Wx\u003czGxx13nj4PB-7-3AV/EqwGToTvpJ$ZawuGVwO#N2axA5]B7]MgatLM6e^:l+axi2*B0bBxz!a02BrCpnv@co#wPF#nz!s9nvrb{4wmY{}y\u0026so7wftr5avGTWvpTp?asH]BBz#pZfe4J[Ck", "ln": 3, "col": 4, "line": 1 }, { "b": "xMLvLfFUBoAb]JhwO#Pjl$7gCwn=9iaw3DXe^.@8vpK7YxjSi5vqfP^3tBu@z/P}xc\u003c*n8vS=o%zZ2I{b4UU4z!9N1xd)+oB%mn1b4+U1xcEV?b4+Xla{[S2y\u0026r@g3jd[{B0p}$b5*$jxFi$iy?mM]Bz8\u003c92{Kz3xjVsba{[S2B8M8va{[S2B98CpzFa2m3mMq?w{503az\u003eL3zyu}RDKp75vr9Fs3jd2Px\u003e7Z(B7GzXx(UtqBAh8kx9[}Kz/{evB-Z8!y?j.iB98CpzF6p.dgcw[y**%eq/)4]zF90UAWSnJx\u003e7Z(B7GzXx(U:Eb5y$6wO#N2B0rdTa$[4PA4=3wv}xL0wPG4Dar\u003eugA+e:5z/QaCv@DmbvqfQ[zF782y?$kkvp%d)az++4wO#N2azC.9z/PY6BzkVha$i\u003c9w]7)*e(M\u003ejx(mM:vr9+yz/{evB-Z8!y?kdub5.QCAclmDefDcgnKC{wq:\u0026n]A+6b$A==NVv@(/qefDcPB-.OBBrCgfy?j-hzY\u003cmAx()]gdgcw[y**%ep*[x=wHF#m3jgJ.v}xL0wPHmNAV^H/w[=6)Aa9?", "ln": 216, "col": 11, "line": 4 }, { "b": "x(4v1vrufnlU{sxzyxBCBz#wAmRMWIdgcy*C42zlB98tvwGTVXv}xL0wPFg+w]zYjuO0six(4u#vqPM#iZ1QavqYZ?azbB#xd=F\u003cxlbEIaBsC432BJ)e(lO5zGGFsb1#]-wnb{]ay[]5vixf5z/3QyB6JPbefFLsy?mG)zdLd62)\u003erTaz2OlauzUdB98tvwIcU{vpR\u0026wy?k2bx(4u#vqPN8j0n9PAV=I*az$[faBsC42)\u003eA^xd=UZ", "ln": 711, "col": 16, "line": 31 }, { "b": "32BJ)e(lO5zGGFsb3e/0BzkS9ay[]5vixVgash8lzxZROz/{evB-Z8!y?k45329#]wPz/liZ1QbBz(hhe)07cBy^{Qy?k2kB-.OBBvG$XwHPX-wPz/laW3@=x(1]s3jd2Pz!yW(vrt{]w*!\u0026(A=M8saA}\u003cuBzkS9ash1*ashhozxZROz/{evB-Z8!y?kduwPz/u3jha/Ef{s6D2Nsqc\u003c*nOx\u003e7Z(B7GznB98CBv@@\u0026u3jd2Hvrt{2zddx/B98B", "ln": 1042, "col": 1, "line": 44 }, { "b": "B15k9z^^fCx(4uew[=6)zEEx[aAITBx(mMjaz2Olz/M$E3jgq}az2OlauzUdz/WKbAaJ]nw[=6)zEEx[dgcw}w/$V9AV=I*az$[faBsC4336Q0B-IvxwPz!#34ic!wmYv:AV!%DlU{WZwHF#m3jg.}iZ1P}B9ofhwP}3-vpS}\u0026c$T[n336P!z/PxfefFH", "ln": 1352, "col": 17, "line": 60 }, { "b": "A:-\u0026#wGUG3ze.)KByuqs3jd1By?Wx\u003czGxwwv@DsiA+Pf1BrAZ?B7nS@p?%X(w[=6)Aa9\u003c4e\u003eQ4@zyxEtxgcDOefF\u003eKx\u003eIc$djCPg34ic!Ef$xf3taA#v\u003c0goasZ60v}xL0wPGpys8@1%wKZxIwHIe8y?mG)zdK\u0026hBAh8kxdj%mA=M8saBsC4w?k6oA=Jo-jS[V:e\u003c\u003cU\u003cvru6ew[=6)zEEx[dgcw}w/$V9AV=I*az$[faBsC4336Q0B-IvxwPz!#34ic!wmYv:AV!%DlU{WZwHF#m3jg]0iZ1P}B9ofhwP}i@x(){bc$T[n31NQVwPw]qe\u003efV1B7=%J3jm8Nw/$V9AV^zaaA]CtA+PSbc%G$#BAh8kxl$*\u0026z/6DizE)Zca$K\u0026XpJyeZx(kaCar\u003cG[v}xL0wG\u0026VFb13o/D2^RixMLCDdlwU-A=JoCjS[SRy-[6i2)\u003eS-BAIRwaz2Ol3jha/3jg(:AV/ylv@Dx#B0aW)tqPSbBAh8kx9[@Sz/M$gz/6DizE)Zc", "ln": 2979, "col": 26, "line": 134 }, { "b": "wPS6nzxJ?hyZLN$3taA#v\u003c2\u00265vqX[Sxdd.mxcqnqA+PA7diJXNA+PA7aBsC4wO#Qgx\u003equpaz2OlauzUdz/WKewNPaqx(URvyIb76329#]wPz/laW3@=x(1]s3jd2Pz!yX0A+PAkw*!\u003cEvrclDaAIsjAbYJexcnHwayX[(vrDT5aA7\u003cmwPz*fAV=VHa$K\u003cQyIbgvwPz/u3jd2VwPS6nzxHcCzFKcdCwXPi34ic!C42zlc\u003c*m!v@DsiA+Pf1BAm", "ln": 3950, "col": 3, "line": 182 } ], "depth": 1, "facts": { "imp": [ [ "", "flag.StringVar" ], [ "", "flag.StringVar" ], [ "", "flag.Parse" ], [ "", "filepath.Clean" ], [ "", "filepath.Clean" ], [ "", "flag.Args" ], [ "", "log.Printf" ], [ "", "store.LoadFile" ], [ "", "log.Fatalf" ], [ "", "log.Println" ], [ "", "store.AddCopyrights" ], [ "", "log.Printf" ], [ "", "store.WriteFile" ], [ "", "log.Fatalf" ], [ "", "os.Open" ], [ "", "f.Close" ], [ "", "csv.NewReader" ], [ "", "r.ReadAll" ], [ "", "fmt.Errorf" ], [ "", "fmt.Errorf" ], [ "", "fmt.Errorf" ], [ "", "make" ], [ "", "make" ], [ "", "append" ], [ "", "sort.Strings" ], [ "", "scanPkg" ], [ "", "filepath.Join" ], [ "", "os.Create" ], [ "", "f.Close" ], [ "", "csv.NewWriter" ], [ "", "w.Flush" ], [ "", "w.Write" ], [ "", "append" ], [ "", "sort.Slice" ], [ "", "strings.Compare" ], [ "", "w.Write" ], [ "", "os.ReadDir" ], [ "", "log.Printf" ], [ "", "entry.IsDir" ], [ "", "scanFile" ], [ "", "filepath.Join" ], [ "", "entry.Name" ], [ "", "append" ], [ "", "len" ], [ "", "strings.Join" ], [ "", "regexp.MustCompile" ], [ "", "strings.TrimSpace" ], [ "", "strings.HasPrefix" ], [ "", "hasDigits.MatchString" ], [ "", "os.Open" ], [ "", "log.Fatalf" ], [ "", "f.Close" ], [ "", "bufio.NewScanner" ], [ "", "scanner.Scan" ], [ "", "scanner.Text" ], [ "", "isCopyright" ], [ "", "append" ], [ "", "scanner.Err" ], [ "", "log.Fatal" ], [ "", "bufio" ], [ "", "encoding/csv" ], [ "", "flag" ], [ "", "fmt" ], [ "", "log" ], [ "", "os" ], [ "", "path/filepath" ], [ "", "regexp" ], [ "", "sort" ], [ "", "strings" ] ], "mbr": [ "bufio.NewScanner", "csv.NewReader", "csv.NewWriter", "entry.IsDir", "entry.Name", "f.Close", "filepath.Clean", "filepath.Join", "flag.Args", "flag.Parse", "flag.StringVar", "fmt.Errorf", "hasDigits.MatchString", "l.data", "license.copyright", "license.spdx", "licenseInfo.spdx", "log.Fatal", "log.Fatalf", "log.Printf", "log.Println", "os.Create", "os.Open", "os.ReadDir", "r.ReadAll", "regexp.MustCompile", "scanner.Err", "scanner.Scan", "scanner.Text", "sort.Slice", "sort.Strings", "store.AddCopyrights", "store.LoadFile", "store.WriteFile", "strings.Compare", "strings.HasPrefix", "strings.Join", "strings.TrimSpace", "val.spdx", "w.Flush", "w.Write" ], "tgt": [ "append", "bufio.NewScanner", "csv.NewReader", "csv.NewWriter", "entry.IsDir", "entry.Name", "f.Close", "filepath.Clean", "filepath.Join", "flag.Args", "flag.Parse", "flag.StringVar", "fmt.Errorf", "hasDigits.MatchString", "isCopyright", "len", "log.Fatal", "log.Fatalf", "log.Printf", "log.Println", "make", "os.Create", "os.Open", "os.ReadDir", "r.ReadAll", "regexp.MustCompile", "scanFile", "scanPkg", "scanner.Err", "scanner.Scan", "scanner.Text", "sort.Slice", "sort.Strings", "store.AddCopyrights", "store.LoadFile", "store.WriteFile", "strings.Compare", "strings.HasPrefix", "strings.Join", "strings.TrimSpace", "w.Flush", "w.Write" ], "funcs": [ [ "main", 372 ], [ "LoadFile", 1336 ], [ "AddCopyrights", 2869 ], [ "WriteFile", 3068 ], [ "scanPkg", 3963 ], [ "isCopyright", 4570 ], [ "scanFile", 4734 ] ], "metrics": { "ast": { "op.eq": 6, "op.gt": 2, "op.lt": 2, "op.ne": 11, "op.sub": 6, "op.band": 3, "op.land": 1, "max_depth": 21, "call_count": 59, "node_count": 1986, "member_count": 41, "op_density.eq": 0, "op_density.gt": 0, "op_density.lt": 0, "op_density.ne": 0.01, "op_density.sub": 0, "op_density.band": 0, "op_density.land": 0, "max_array_length": 2, "max_member_depth": 2 }, "file": { "size": 5150, "entropy": 5.01 }, "text": { "lines": 238, "top_char": 101, "tab_count": 337, "digit_ratio": 0.01, "space_count": 506, "char_entropy": 5.01, "unique_chars": 76, "top_char_null": 0, "import_density": 4.2, "string_density": 0.16, "top_char_ratio": 0.07, "avg_line_length": 20.64, "max_line_length": 112, "empty_line_ratio": 0.1, "last_line_length": 1, "whitespace_ratio": 0.21, "identifier_density": 1.67, "line_length_stddev": 20.56, "max_whitespace_run": 6, "normalized_import_count": 0.65, "normalized_string_count": 2.46, "normalized_function_count": 0.45, "imports_to_functions_ratio": 1.43, "strings_to_functions_ratio": 5.43, "suspicious_identifier_ratio": 0.06, "normalized_unique_identifiers": 12.92, "identifiers_to_functions_ratio": 14.57 }, "binary": { "peak_region_bytes": 5120, "peak_region_entropy": 4.98 }, "source": { "class_count": 2, "function_count": 7 }, "imports": { "count": 10, "stdlib_count": 10, "stdlib_ratio": 1 }, "strings": { "bytes": 508, "count": 38, "avg_length": 13.37, "max_length": 50, "path_count": 1, "avg_entropy": 2.75, "entropy_stddev": 0.87 }, "comments": { "chars": 234, "count": 4, "lines": 4, "url_count": 1, "to_code_ratio": 0.02 }, "functions": { "count": 9, "density": 2.94, "avg_params": 0.86, "code_ratio": 0.84, "max_params": 1, "length_stddev": 21.39, "avg_name_length": 8.57, "no_params_count": 1, "avg_length_lines": 28.57, "max_length_lines": 71, "min_length_lines": 4, "high_entropy_names": 1, "avg_param_name_length": 5.67 }, "identifiers": { "count": 397, "unique": 102, "avg_length": 5.9, "max_length": 14, "min_length": 1, "avg_entropy": 2.16, "reuse_ratio": 0.26, "length_stddev": 2.97, "sequential_names": 6, "single_char_count": 7, "single_char_ratio": 0.07, "high_entropy_count": 1, "high_entropy_ratio": 0.01, "all_lowercase_ratio": 0.51, "all_uppercase_ratio": 0.01, "underscore_prefix_count": 1 } } }, "id": 2, "mol": "H₂(DbF₂)Md(In₂)", "path": "github.com-datadog-orchestrion-_tools-v0.0.0-20260706084330-df04ed94b69e.zip!!github.com/datadog/orchestrion/_tools@v0.0.0-20260706084330-df04ed94b69e/copyrights/merge.go", "pid": 0, "risk": 5, "sha": "03324b966fc863e4f1d6a519aa11cd6d9732a2d63d326f71a8ecf49f89985e8e", "size": 5150, "traits": [ { "id": "metadata/import/go/encoding/csv::encoding/csv", "conf": 0.95, "crit": 3, "desc": "imports encoding/csv", "spans": [ [ 280, 12 ] ] }, { "id": "metadata/import/go/os::os", "conf": 0.95, "crit": 3, "desc": "imports os", "spans": [ [ 318, 2 ] ] }, { "id": "micro-behaviors/data/buffer/transfer::go-write-method-call", "conf": 0.65, "crit": 3, "desc": "Go Write/WriteAt method call", "spans": [ [ 3256, 7 ] ] }, { "id": "micro-behaviors/fs/path/temp::go-temp-path-ref", "conf": 0.8, "crit": 3, "desc": "Go temp path reference", "spans": [ [ 481, 5 ] ] }, { "id": "micro-behaviors/fs/path/temp::temp-path-segment", "conf": 0.75, "crit": 3, "desc": "Temp or Tmp path segment", "spans": [ [ 481, 5 ] ] }, { "id": "micro-behaviors/fs/read/directory::directory-enumeration", "atk": "T1083", "mbc": "E1083", "conf": 0.7, "crit": 3, "desc": "Directory enumeration capability", "uses": [ 21, 22 ], "spans": [ [ 4014, 10 ] ] }, { "id": "micro-behaviors/fs/write/file/full::go-write-file-method-call", "conf": 0.6, "crit": 3, "desc": "Go WriteFile method call", "spans": [ [ 1106, 11 ] ] }, { "id": "metadata/import/go/bufio::bufio", "conf": 0.95, "crit": 2, "desc": "imports bufio", "spans": [ [ 271, 0 ] ] }, { "id": "metadata/import/go/flag::flag", "conf": 0.95, "crit": 2, "desc": "imports flag", "spans": [ [ 296, 0 ] ] }, { "id": "metadata/import/go/fmt::fmt", "conf": 0.95, "crit": 2, "desc": "imports fmt", "spans": [ [ 304, 0 ] ] }, { "id": "metadata/import/go/log::log", "conf": 0.95, "crit": 2, "desc": "imports log", "spans": [ [ 311, 0 ] ] }, { "id": "metadata/import/go/path/filepath::path/filepath", "conf": 0.95, "crit": 2, "desc": "imports path/filepath", "spans": [ [ 324, 0 ] ] }, { "id": "metadata/import/go/regexp::regexp", "conf": 0.95, "crit": 2, "desc": "imports regexp", "spans": [ [ 341, 0 ] ] }, { "id": "metadata/import/go/sort::sort", "conf": 0.95, "crit": 2, "desc": "imports sort", "spans": [ [ 351, 0 ] ] }, { "id": "metadata/import/go/strings::strings", "conf": 0.95, "crit": 2, "desc": "imports strings", "spans": [ [ 359, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english", "conf": 0.8, "crit": 2, "desc": "Contains common English function words", "uses": [ 25, 26, 27 ], "spans": [ [ 759, 0 ] ] }, { "id": "micro-behaviors/fs/directory/readdir::readdir-go", "conf": 0.66, "crit": 2, "desc": "List directory contents (Go)", "spans": [ [ 4016, 0 ] ] }, { "id": "micro-behaviors/fs/file/create::os-create", "conf": 0.8, "crit": 2, "desc": "Create file via os.Create", "spans": [ [ 3133, 0 ] ] }, { "id": "micro-behaviors/fs/file/open::os-open", "conf": 0.9, "crit": 2, "desc": "Open file via os.Open", "spans": [ [ 1400, 0 ] ] }, { "id": "micro-behaviors/fs/path-ops/join::source-path-builder-call", "conf": 0.95, "crit": 2, "desc": "Calls a path join or combine API", "spans": [ [ 3027, 0 ] ] }, { "id": "micro-behaviors/fs/path/temp::tmp-path-content", "conf": 1.0, "crit": 2, "desc": "Contains a /tmp/ or /var/tmp/ path", "spans": [ [ 480, 0 ] ] }, { "id": "micro-behaviors/fs/read/directory::file-readdir", "atk": "T1083", "mbc": "E1083", "conf": 0.6, "crit": 2, "desc": "Go filesystem directory listing method", "spans": [ [ 4014, 0 ] ] }, { "id": "micro-behaviors/fs/read/directory::readdir-call", "atk": "T1083", "mbc": "E1083", "conf": 0.6, "crit": 2, "desc": "os.ReadDir directory listing", "spans": [ [ 4014, 0 ] ] }, { "id": "micro-behaviors/os/telemetry/logging/event::go-logger-write-call", "conf": 0.94, "crit": 2, "desc": "Go writes a message through a logger", "spans": [ [ 800, 0 ] ] }, { "id": "micro-behaviors/process/lifecycle/auto-exec::go-package-global-initializer", "conf": 0.98, "crit": 2, "desc": "Initializes Go package-level variables" }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "spans": [ [ 89, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "spans": [ [ 759, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-7", "conf": 0.8, "crit": 1, "desc": "English function-word token \"this\"", "spans": [ [ 51, 0 ] ] }, { "id": "micro-behaviors/fs/path/extension::data-document-extension-reference", "conf": 0.9, "crit": 1, "desc": "References a data filename extension", "spans": [ [ 596, 0 ] ] }, { "id": "micro-behaviors/fs/path/location::temporary-path-expression-text-reference", "conf": 0.92, "crit": 1, "desc": "Temporary-path expression text reference", "spans": [ [ 481, 0 ] ] } ], "type": "go" }, { "id": 3, "sha": "4f76e615782f31b2da250d8dde684a318f7211ad66ac472fef7ad843a09918fe", "path": "github.com-datadog-orchestrion-_tools-v0.0.0-20260706084330-df04ed94b69e.zip!!github.com/datadog/orchestrion/_tools@v0.0.0-20260706084330-df04ed94b69e/go.mod", "size": 1424, "type": "go.mod", "depth": 1 }, { "id": 4, "sha": "b2d2f12b1fd5aab79b3fd9d95b8835df3f550cbda8ad986ef620291e1bfb81d0", "path": "github.com-datadog-orchestrion-_tools-v0.0.0-20260706084330-df04ed94b69e.zip!!github.com/datadog/orchestrion/_tools@v0.0.0-20260706084330-df04ed94b69e/go.sum", "size": 15292, "type": "go.sum", "depth": 1 }, { "analysis_gaps": [ "flow-graph-limited", "flow-call-unavailable" ], "ctx": [ { "b": "fe1CFzFS)9B0b4sAbok#x([fpaAITkBy!#9z//V7A^8kswGUz$y-)t7y?mVgx(k5nxLzJgA+fidB7]-mA^n^oA+cwfx\u003e7Z(B7F\u003e?fe1C\u003czE^s0aARpdavf%Pv}YA@oLF0FzGxwir+lq)x(v(iga\u003emk3nj4Pra]#!aAhvtwozy7azC.6y\u0026%o1B0bKxw]@l9A+cw7wP?T3z/xn#ayPvml$7gCwn=96c$)ZAAc15[fl.R:e[wyjvpTp?xMkUmz/4cRe^:l+avy6^D2^RixMLvLfFUBoAb]JhwO#Pjl$7gCwn=9iaw3DXe^.@8vpK7YxjSi5vqfP^3tBu@z/P}xc\u003c*n8vS=o%zZ2I{b4+Xla{[S2y\u0026r@g3jd[{B0p}$b5*$jxFi$iy?mM]Bz8\u003c92{KCjA+PA7B0p@u3jpx/zET/avqfQcdiJ%A31Xv2wN/*[wfr]@ax@b)BAh8kxl%%(2{I2Qaxrq}wPI]nwQ5fgx\u003e7\u003e0y\u003cvdAByxo5wft/jxK#jdx(^\u0026dvqG:5w[=6)B0bgmaARphB0bHmAbP/iBz(hBayPq4az++4wO#N2wfJMi2)?!efcCyPwmY^7Bzbkdl2ZmxxK@qWx\u003e7Z(B7DE{wPz\u003caz/cWMe?![4ed8W\u0026a$\u003eO(ra]#!aAhvtwozy7azC.6y\u0026%o1B0bKxw]@l9A+cw7wP?T3z/xn#ayPvml$7gCwn=96c$)ZAAc15[fl.R:e[wyjvpTp?xMkUmz/4cRe*q?N2)?!efcAS2AcVFrxj#xfgb7EtePt-wB7GlhavGTWvpTp?efEJ4v\u003eF@R3jha/32\u003e90efFIAAV^zaaA8rNm}D^^wge(l329#]wPz/laW3@=x(1]s3jd2Pz!yW(vrt{]c$NBtdgcxf3jgJ!xd^23x(n38c)z2(wN/H\u0026zF784z/x#xx\u003eIa3azts{wmY!5aA7\u003cmm@GIZx(4v4azCZoc2\u003e5FwN/\u003e6B7]/ey\u003cviQaAhKndgcx8vr9G4A=M8sB0aW)B98CpzF6p.wPz/ljS[uJy?mM]Bz9pdvqGZcAcC?zazb+lv\u003c(q8Bz8!rBAh8kxdLftzF0/fz/WK2x(4uLzF0/raz2Olaz2Olz/NoHwPz*fAV/Yo2)\u003erTaz2Olar-(\u003czFr]fDKp5=32BJ)e\u003efn\u003evqEu6A=JPo2)(1!2)\u003erTar+/FA+PA7B1Q0(B5Ni[w[=Grx(mK3e(2?(wHF#Uar\u0026BJzZ3RMDKp5=336Q0B-IvxzFr[]2)(1!2)\u003eiTy?kduwPz/liZ1Q7B1QmcwO@]nvrufi3jd2Mw/$V9AV=I*az$[faBsC42)\u003eA^xd=UZByw#$c)z92A=k$vB7nS@zFs03ash1*ash7MefFUAw]xp%vqPN7dj=PMA=JPo2)(1!2)\u003ecNw[u09w[=6)e\u003c\u003cC[B7D:G3jd2VauzUdvS=o%z.s^@Ct-0XwmY^fw[=6)dgcv/w]zYjx=]D1att(1x=]IXg=(*]d\u003eq-?3jd1By?W=#efFpJaz2OlauzUdAXpm3vpS5CzE\u003ejB3jd1Bx\u003ewG0A=JoCjS[SRy-[6i2)*[Ay\u0026r@smQZyEy::mhBz9iFx!gxrA=JPo2)*]^3jd1Bx\u003ewG0CYmk7By!#!x\u003cz\u00268jS[//A+PA7c#rQnwHO:G3jd1B31Xc$z/P[wjS[fLAaJ]$c$NBtz/P[IazbFje(M.fx(n38c)zb{y?j.nB0b1iwPF#iz/^aiz/fV9x(k56z/x#xx\u003eIa3azts{wmY!5aTeDWx(mK3e(2?(wHF#Rdgcv/2)\u003e6YwNPuY2)*]^3jd2!3jd2VwPS6nzxJ?hyZHF%dgcw}w/$V9AV=I*az$[faBsC432BJ)e\u003efn\u003evqEu6A=JPo34ic!x\u003ewG7wO@]cA=M8sB15j}ats{+3jd2Jz/M$cefFIAAV^zaaAy[dxjSh%A=M8sB0b/p2)*]BefFpxjS[uNBs{ygx(n3ezyx7pAW.t434ic!32:(qmr\u0026J*c]0dT34iee3i", "ln": 0, "col": 1, "line": 1 } ], "depth": 1, "facts": { "imp": [ [ "", "os.Getwd" ], [ "", "log.Fatal" ], [ "", "log.Printf" ], [ "", "filepath.Walk" ], [ "", "log.Fatal" ], [ "", "strings.HasSuffix" ], [ "", "info.Name" ], [ "", "os.Open" ], [ "", "log.Fatalf" ], [ "", "info.Name" ], [ "", "file.Close" ], [ "", "bufio.NewReader" ], [ "", "r.ReadLine" ], [ "", "log.Fatal" ], [ "", "string" ], [ "", "append" ], [ "", "fmt.Sprintf" ], [ "", "info.Name" ], [ "", "log.Fatal" ], [ "", "len" ], [ "", "fmt.Println" ], [ "", "os.Exit" ], [ "", "bufio" ], [ "", "fmt" ], [ "", "log" ], [ "", "os" ], [ "", "path/filepath" ], [ "", "strings" ] ], "mbr": [ "bufio.NewReader", "file.Close", "filepath.Walk", "fmt.Println", "fmt.Sprintf", "info.Name", "log.Fatal", "log.Fatalf", "log.Printf", "os.Exit", "os.Getwd", "os.Open", "r.ReadLine", "strings.HasSuffix" ], "tgt": [ "append", "bufio.NewReader", "file.Close", "filepath.Walk", "fmt.Println", "fmt.Sprintf", "info.Name", "len", "log.Fatal", "log.Fatalf", "log.Printf", "os.Exit", "os.Getwd", "os.Open", "r.ReadLine", "string", "strings.HasSuffix" ], "funcs": [ [ "main", 330 ] ], "metrics": { "ast": { "op.gt": 1, "op.lt": 1, "op.ne": 6, "op.lnot": 1, "max_depth": 25, "call_count": 22, "node_count": 510, "member_count": 14, "op_density.gt": 0, "op_density.lt": 0, "op_density.ne": 0.01, "op_density.lnot": 0, "max_array_length": 2, "max_member_depth": 2 }, "file": { "size": 1561, "entropy": 5.01 }, "text": { "lines": 64, "top_char": 101, "tab_count": 100, "digit_ratio": 0.02, "space_count": 165, "char_entropy": 5.01, "unique_chars": 70, "top_char_null": 0, "import_density": 9.38, "string_density": 0.22, "top_char_ratio": 0.07, "avg_line_length": 23.39, "max_line_length": 100, "empty_line_ratio": 0.05, "last_line_length": 1, "whitespace_ratio": 0.21, "identifier_density": 1.48, "line_length_stddev": 25.13, "max_whitespace_run": 1, "normalized_import_count": 0.75, "normalized_string_count": 1.75, "normalized_function_count": 0.13, "imports_to_functions_ratio": 6, "strings_to_functions_ratio": 14, "suspicious_identifier_ratio": 0.05, "normalized_unique_identifiers": 6.17, "identifiers_to_functions_ratio": 37 }, "binary": { "peak_region_bytes": 1561, "peak_region_entropy": 4.98 }, "source": { "function_count": 1 }, "imports": { "count": 6, "stdlib_count": 6, "stdlib_ratio": 1 }, "strings": { "bytes": 398, "count": 14, "avg_length": 28.43, "max_length": 84, "avg_entropy": 3.03, "entropy_stddev": 1.19 }, "comments": { "chars": 234, "count": 4, "lines": 4, "url_count": 1, "to_code_ratio": 0.07 }, "functions": { "count": 1, "density": 1.56, "code_ratio": 0.75, "avg_name_length": 4, "no_params_count": 1, "avg_length_lines": 48, "max_length_lines": 48, "min_length_lines": 48 }, "identifiers": { "count": 95, "unique": 37, "avg_length": 4.92, "max_length": 9, "min_length": 1, "avg_entropy": 1.96, "reuse_ratio": 0.39, "length_stddev": 2.15, "sequential_names": 2, "single_char_count": 3, "single_char_ratio": 0.08, "all_lowercase_ratio": 0.59, "all_uppercase_ratio": 0.03, "underscore_prefix_count": 1 } } }, "id": 5, "mol": "H(F)Md(In)", "path": "github.com-datadog-orchestrion-_tools-v0.0.0-20260706084330-df04ed94b69e.zip!!github.com/datadog/orchestrion/_tools@v0.0.0-20260706084330-df04ed94b69e/headercheck/header_check.go", "pid": 0, "risk": 3, "sha": "fdb30efa8f32c5db156b502e993318f624248c2a04bb30ed6e4733b8868ea17c", "size": 1561, "traits": [ { "id": "metadata/import/go/os::os", "conf": 0.95, "crit": 3, "desc": "imports os", "spans": [ [ 294, 2 ] ] }, { "id": "micro-behaviors/fs/directory/traverse::filepath-walk", "atk": "T1083", "conf": 0.9, "crit": 3, "desc": "Go recursively walks a directory", "spans": [ [ 802, 13 ] ] }, { "id": "metadata/import/go/bufio::bufio", "conf": 0.95, "crit": 2, "desc": "imports bufio", "spans": [ [ 271, 0 ] ] }, { "id": "metadata/import/go/fmt::fmt", "conf": 0.95, "crit": 2, "desc": "imports fmt", "spans": [ [ 280, 0 ] ] }, { "id": "metadata/import/go/log::log", "conf": 0.95, "crit": 2, "desc": "imports log", "spans": [ [ 287, 0 ] ] }, { "id": "metadata/import/go/path/filepath::path/filepath", "conf": 0.95, "crit": 2, "desc": "imports path/filepath", "spans": [ [ 300, 0 ] ] }, { "id": "metadata/import/go/strings::strings", "conf": 0.95, "crit": 2, "desc": "imports strings", "spans": [ [ 317, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english", "conf": 0.8, "crit": 2, "desc": "Contains common English function words", "uses": [ 12, 13, 14 ], "spans": [ [ 1140, 0 ] ] }, { "id": "micro-behaviors/fs/file/open::os-open", "conf": 0.9, "crit": 2, "desc": "Open file via os.Open", "spans": [ [ 995, 0 ] ] }, { "id": "micro-behaviors/fs/read/directory::getwd-call", "atk": "T1083", "mbc": "E1083", "conf": 0.5, "crit": 2, "desc": "os.Getwd get working directory", "spans": [ [ 649, 0 ] ] }, { "id": "micro-behaviors/os/console/io::go-stdout-write-call", "conf": 0.94, "crit": 2, "desc": "Go calls fmt.Print to write output", "spans": [ [ 1522, 0 ] ] }, { "id": "micro-behaviors/os/telemetry/logging/event::go-logger-write-call", "conf": 0.94, "crit": 2, "desc": "Go writes a message through a logger", "spans": [ [ 698, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "spans": [ [ 89, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "spans": [ [ 1140, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-7", "conf": 0.8, "crit": 1, "desc": "English function-word token \"this\"", "spans": [ [ 51, 0 ] ] } ], "type": "go" }, { "ctx": [ { "b": "boXZ.B8\u0026{yx(kOnzGWdivrl8?B7GCoeOf6yaAh4lwObv+yZHIGo\u0026akHqAVoNzejl8zeZQHwfr6wDSiZol}Hp8fkUckwI4.jv}xL0wPGFasxFWcsrYg3BAg/ear\u003e\u0026yat4RCas8qko\u0026akHqHG-imoAbXavPgaaxg^co:RkalScGLr9@3+qAVoNay!}8eIe7?bQ:^Cx(X91zdK?weG=k.DQp1%nmbp\u003erz(gMtqfuha%nrUason{fjXTqfk+]Gy-\u003e5KaAhKnasNT8xkX[AlM^T5wnc74vqPM#a%.I4k#QrYq+{y\u003elQ+iku40[CayYFcy?aUuzY*kHDSiZol}Hp8fjFTkfk2hPy?Wx\u003czGxxga%pJjBzb/ae[n*pfk2iwxkzcjxkYwrx\u003e7Z(B7GzCB$%yiboP%0x(+zovpK7YxjSibz/660z*9skA+eV{B0bNrwGU/6v}xL0wGUI{By!%7x(v(we?NG5m[#\u0026Tmpe.Wq=C[7xk8E3BZ=$kz/4c}vrt{Cz!y.AyH}P$xK#lpxkYClwohJ$ByO#d3jn12s7JH{B-5slz/M$px(n6refFFiA^8knayPd#aA}Kqwn=WkaARJAxjVfcvqG:5Bzbkdy?Wx\u003czGxxgefFUAv@co#x(mMaAbn%8w]zZbeN@Zpwncd1z/f01aA8deB1N!#pGppWmn(t[bZSG+p^^(MEj]UWB-H#6B0p%dyH?d1at4KPa%.IlpGppWmn[QU3s)ZTy*?u}at41AoI4Pupe:O*mOcoxqWNbPAV^\u003eFpG5xIzxJ+fzGQgDwmoI5x(k5qx(mE1Cxk?*wn.!$ax86oqBr(Wl}Hota%.Imo\u0026akHqHHitz/{8gwPGBGDQ*\u003ecq*/?%arUl9xM21ql1:?JwOkB[x(mMaB8Mhwv}u={x(4v4azCZobQ^bgB7Gk$zdK?lbZSD=rz(gMuQNE-EiH9.B8JgBwGUF\u003ezxK1gA:-]#ay/teD2^RixMLwrByxm", "ln": 0, "col": 1, "line": 1 }, { "b": "a%.Imo\u0026akHqHHifA=M8sB0q-OD(%?EvrrRobZSG+p^^(MEj]eLA=k#ta%o5@g9v[\u003caz2!iBrAd\u0026dgdguv}YZ$wfrE4ayM^vCow7PDS9ZuqBr(Wl}Hp8a{]Cnv@JLxAV=LKDS9ZuqBr(Wl}Hp8a$\u003ez*a%.IlpGppWmn[Q/a{[V1awV0pmOcoxjT8d#r83gSnM6%\u0026oI4Pupe:OkgJE2BvrcEne*L^lpFT]qe[n%Ca{]CnwN/y(ar\u003cc{x(4r]zF77qc$lRawO${[wGSfxDRWTvmOcoxEiH9:3lQDYpFT[La%.I9pFT]qa%n6PDSiZol}Hp8fjFTkfk2hPy?Wx\u003czGxxga%p]qAbP=sao", "ln": 909, "col": 114, "line": 21 } ], "depth": 1, "facts": { "imp": [ [ "", "set" ], [ "", "mktemp" ], [ "", "trap" ], [ "", "cd" ], [ "", "dirname" ], [ "", "pwd" ], [ "", "go" ], [ "", "dirname" ], [ "", "mkdir" ], [ "", "echo" ], [ "", "basename" ], [ "", "\"${TMPDIR}/bin/go-licenses\"" ], [ "", "cat" ], [ "", "exit" ], [ "", "chmod" ], [ "", "cp" ], [ "", "echo" ], [ "", "basename" ], [ "", "\"${TMPDIR}/bin/go-licenses\"" ], [ "", "cat" ], [ "", "exit" ], [ "", "go" ] ], "tgt": [ "\"${TMPDIR}/bin/go-licenses\"", "basename", "cat", "cd", "chmod", "cp", "dirname", "echo", "exit", "go", "mkdir", "mktemp", "pwd", "set", "trap" ], "metrics": { "ast": { "max_depth": 12, "call_count": 22, "node_count": 456, "max_array_len": 1 }, "file": { "size": 1483, "entropy": 5.49 }, "text": { "lines": 31, "top_char": 101, "max_ws_run": 1, "digit_ratio": 0.01, "space_count": 143, "char_entropy": 5.49, "unique_chars": 72, "top_char_null": 0, "string_density": 0.97, "top_char_ratio": 0.05, "avg_line_length": 46.84, "max_line_length": 196, "empty_line_ratio": 0.23, "last_line_length": 109, "whitespace_ratio": 0.12, "identifier_density": 3.9, "line_length_stddev": 49.24, "normalized_string_count": 5.39, "suspicious_string_ratio": 0.13, "normalized_unique_identifiers": 11.71 }, "binds": { "count": 9 }, "binary": { "peak_region_bytes": 1483, "peak_region_entropy": 5.44 }, "strings": { "bytes": 642, "count": 30, "shell": 4, "url_count": 1, "avg_length": 21.4, "max_length": 102, "path_count": 3, "avg_entropy": 3.78, "entropy_stddev": 0.56 }, "comments": { "chars": 170, "count": 3, "lines": 3, "to_code_ratio": 0.11 }, "identifiers": { "count": 121, "unique": 58, "avg_length": 7, "max_length": 32, "min_length": 1, "avg_entropy": 2.11, "reuse_ratio": 0.48, "length_stddev": 6.53, "has_digit_ratio": 0.03, "single_char_count": 1, "single_char_ratio": 0.02, "high_entropy_count": 4, "high_entropy_ratio": 0.07, "all_lowercase_ratio": 0.38, "all_uppercase_ratio": 0.21, "numeric_suffix_count": 1 } } }, "id": 6, "mol": "H₂(F₃Po)", "path": "github.com-datadog-orchestrion-_tools-v0.0.0-20260706084330-df04ed94b69e.zip!!github.com/datadog/orchestrion/_tools@v0.0.0-20260706084330-df04ed94b69e/make-licenses.sh", "pid": 0, "risk": 3, "sha": "34f20a68d68a7da066a72ca2e4c83bb053850c55331bfdf04b0bfe2f3826f493", "size": 1483, "traits": [ { "id": "metadata/file/extension/identity::shell-a", "conf": 1.0, "crit": 2, "desc": "POSIX shell script extension" }, { "id": "metadata/lang/natural::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "spans": [ [ 350, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-2", "conf": 0.8, "crit": 1, "desc": "English function-word token \"and\"", "spans": [ [ 457, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "spans": [ [ 439, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-7", "conf": 0.8, "crit": 1, "desc": "English function-word token \"this\"", "spans": [ [ 322, 0 ] ] }, { "id": "micro-behaviors/fs/chmod/modify::chmod-command", "atk": "T1222", "mbc": "E1222", "conf": 0.6, "crit": 3, "desc": "chmod shell command", "spans": [ [ 973, 5 ] ] }, { "id": "micro-behaviors/fs/directory/chdir::shell-change-directory", "conf": 0.95, "crit": 3, "desc": "Shell changes working directory", "spans": [ [ 145, 2 ] ] }, { "id": "micro-behaviors/fs/directory/cwd::pwd-command", "conf": 0.8, "crit": 3, "desc": "Queries the current working directory", "spans": [ [ 203, 6 ] ] }, { "id": "micro-behaviors/fs/directory/mkdir::mkdir-command", "conf": 0.8, "crit": 3, "desc": "Shell invokes mkdir command", "spans": [ [ 559, 21 ] ] }, { "id": "micro-behaviors/process/exit/trap::shell-exit-trap", "conf": 0.85, "crit": 3, "desc": "Shell EXIT trap handler", "spans": [ [ 92, 28 ] ] } ], "type": "shell" }, { "ctx": [ { "b": "fe1CFzFS)9B0b4sAbok#x([fpaAITkBy!#9z//V7A^8kswGUz$y-)t7y?mVgx(k5nxLzJgA+fidB7]-mA^n^oA+cwfx\u003e7Z(B7F\u003e?fe1C\u003czE^s0aARpdavf%Pv}YA@oLF0FzGxwir+lq)x(v(iga\u003emk3nj4Pra]#!aAhvtwozy7azC.6y\u0026%o1B0bKxw]@l9A+cw7wP?T3z/xn#ayPvml$7gCwn=96c$)ZAAc15[fl.R:e[wyjvpTp?xMkUmz/4cRe^:l+avy6^D2^RixMLvLfFUBoAb]JhwO#Pjl$7gCwn=9iaw3DXe^.}sfk2h:vS=y3wft#jz!%F43ufA-yHH\u003c!aARKuy\u0026Y{\u003cx(d*cA=-AL3jevsaxin$y-)n1AaJ]$wO#0(wPFg+uMZL9x([3hvLheez7/Kuz!A($fk2hPy?Wx\u003czGxxgflP8{3jg5Zb4\u003e?gvqYZgz/PFzCRs2EA+l$mzdCqewO#0\u003eB97\u0026ja%nJ(axrF]wftP7av*c/noFw:s8Sa{w]8yfaA?gfx\u003egT]wIemByZIP#", "ln": 0, "col": 1, "line": 1 } ], "depth": 1, "facts": { "imp": [ [ "", "github.com/google/go-licenses/v2" ], [ "", "golang.org/x/perf/cmd/benchstat" ] ], "metrics": { "ast": { "max_depth": 5, "call_count": 0, "node_count": 28 }, "file": { "size": 428, "entropy": 4.84 }, "text": { "lines": 14, "top_char": 101, "tab_count": 3, "digit_ratio": 0.02, "space_count": 42, "char_entropy": 4.84, "unique_chars": 50, "top_char_null": 0, "import_density": 14.29, "string_density": 0.14, "top_char_ratio": 0.08, "avg_line_length": 29.57, "max_line_length": 84, "empty_line_ratio": 0.21, "last_line_length": 1, "whitespace_ratio": 0.14, "identifier_density": 0.07, "line_length_stddev": 29.58, "max_whitespace_run": 1, "normalized_import_count": 0.53, "normalized_string_count": 0.53, "normalized_unique_identifiers": 0.26 }, "binary": { "peak_region_bytes": 428, "peak_region_entropy": 4.84 }, "imports": { "count": 2, "third_party_count": 2, "third_party_ratio": 1 }, "strings": { "bytes": 63, "count": 2, "url_count": 2, "avg_length": 31.5, "max_length": 32, "avg_entropy": 4.02, "entropy_stddev": 0.07 }, "comments": { "chars": 303, "count": 7, "lines": 7, "url_count": 1, "to_code_ratio": 1 }, "identifiers": { "count": 1, "unique": 1, "avg_length": 5, "max_length": 5, "min_length": 5, "avg_entropy": 1.92, "reuse_ratio": 1, "all_lowercase_ratio": 1 } } }, "id": 7, "path": "github.com-datadog-orchestrion-_tools-v0.0.0-20260706084330-df04ed94b69e.zip!!github.com/datadog/orchestrion/_tools@v0.0.0-20260706084330-df04ed94b69e/tools.go", "pid": 0, "risk": 1, "sha": "618d45a5610e1367030d463841f1ee72f38dced39b862f67ff00ad0fecfbc6a5", "size": 428, "traits": [ { "id": "metadata/build/archive::github-versioned-source-archive-member", "conf": 0.95, "crit": 2, "desc": "GitHub versioned source archive member" }, { "id": "metadata/file/comment::source-comment-bytes-over-300", "conf": 0.92, "crit": 2, "desc": "Source has over 300 comment bytes" }, { "id": "metadata/import/go/github/com/google/go-licenses/v2::github/com/google/go-licenses/v2", "conf": 0.95, "crit": 2, "desc": "imports github.com/google/go-licenses/v2", "spans": [ [ 314, 0 ] ] }, { "id": "metadata/import/go/golang/org/x/perf/cmd/benchstat::golang/org/x/perf/cmd/benchstat", "conf": 0.95, "crit": 2, "desc": "imports golang.org/x/perf/cmd/benchstat", "spans": [ [ 352, 0 ] ] }, { "id": "metadata/lang/natural::lang-english", "conf": 0.8, "crit": 2, "desc": "Contains common English function words", "uses": [ 6, 7 ], "spans": [ [ 89, 0 ] ] }, { "id": "micro-behaviors/data/source/syntax/directive::go-blank-import", "conf": 0.7, "crit": 2, "desc": "Go blank import declaration", "spans": [ [ 311, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "spans": [ [ 89, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-7", "conf": 0.8, "crit": 1, "desc": "English function-word token \"this\"", "spans": [ [ 51, 0 ] ] } ], "type": "go" }, { "id": 8, "sha": "fce38f453bc4a99fc8a1ba35e7f3c61b2e5546ffd650cf0c3169a05dd9e4549d", "path": "github.com-datadog-orchestrion-_tools-v0.0.0-20260706084330-df04ed94b69e.zip!!github.com/datadog/orchestrion/_tools@v0.0.0-20260706084330-df04ed94b69e/verify-licenses.sh", "risk": 1, "size": 429, "type": "shell", "depth": 1 }, { "id": 9, "sha": "41dbf51f3ad2a19e32d87c6073db3c23809322fc2699b463df4577e6cca64de3", "path": "github.com-datadog-orchestrion-_tools-v0.0.0-20260706084330-df04ed94b69e.zip!!github.com/datadog/orchestrion/_tools@v0.0.0-20260706084330-df04ed94b69e/LICENSE", "risk": 1, "size": 11342, "type": "text", "depth": 1 }, { "id": 10, "sha": "eaa8d587cdd8df01d087a590de18f975bca4216e6c8f5fb599008cdf4177bf31", "path": "github.com_google_go-github_v69@v69.2.0.registry.json", "size": 773, "type": "registry", "depth": 2 }, { "id": 11, "sha": "d858ffe5de8bedf2157270d244d62307a3247800c6461b17ab2058b33766cefd", "path": "github.com_google_go-licenses_v2@v2.0.0-alpha.1.registry.json", "size": 783, "type": "registry", "depth": 2 }, { "id": 12, "sha": "f161d766fa1aae52426df78cb30e14c694fb5ffd5af861a19a1f0aecdb07361a", "path": "golang.org_x_perf@v0.0.0-20250214215153-c95ad7d5b636.registry.json", "size": 783, "type": "registry", "depth": 2 }, { "id": 13, "sha": "bd6ba6791f989d26ef5cb8e5e1b6141a30810fca6595333e337706056a826090", "path": "github.com_aclements_go-moremath@v0.0.0-20241023150245-c8bbc672ef66.registry.json", "size": 806, "type": "registry", "depth": 2 }, { "id": 14, "sha": "1a9849bbb888957c048e2db3e61b1a53b0192fa3efedf640f8240b836a32b61e", "path": "github.com_davecgh_go-spew@v1.1.2-0.20180830191138-d8f796af33cc.registry.json", "size": 765, "type": "registry", "depth": 2 }, { "id": 15, "sha": "47b5ea3a1551bbf266032021013532be30c5ed7cd69c3f0e4569d4adb8529822", "path": "github.com_go-logr_logr@v1.4.3.registry.json", "size": 760, "type": "registry", "depth": 2 }, { "id": 16, "sha": "78a5d509b7956755982e7b01455e93dc7c7bc3c6f6fb50d273fe1c15a1616c03", "path": "github.com_golang_groupcache@v0.0.0-20241129210726-2c02b8208cf8.registry.json", "size": 798, "type": "registry", "depth": 2 }, { "id": 17, "sha": "abe4e390da4ea378373916270d87349522c7db499991e07df8b0666a89bfb670", "path": "github.com_google_go-cmp@v0.7.0.registry.json", "size": 762, "type": "registry", "depth": 2 }, { "id": 18, "sha": "977df06655a76a96e6ec8cdd34a47d60787283281bb8a7ca1b840fd99a8c6180", "path": "github.com_google_go-querystring@v1.2.0.registry.json", "size": 778, "type": "registry", "depth": 2 }, { "id": 19, "sha": "1ffaafb9c099a4ab0fec6b62080a1fd28185cfa67d2f8bf6ee8c9df241e865c7", "path": "github.com_google_licenseclassifier_v2@v2.0.0.registry.json", "size": 788, "type": "registry", "depth": 2 }, { "id": 20, "sha": "8e0d2e8a2ffca5afe735c0bf78d802b68a8d19b7ec36bba625dbb6e025bae735", "path": "github.com_google_martian_v3@v3.3.3.registry.json", "size": 768, "type": "registry", "depth": 2 }, { "id": 21, "sha": "1a8545173f4e877b2cd285469ed94178bb38d083aece541dee29cf05db361a9d", "path": "github.com_inconshreveable_mousetrap@v1.1.0.registry.json", "size": 787, "type": "registry", "depth": 2 }, { "id": 22, "sha": "f8c78d212e962fc7d072834fe9c98976fb1458f2d013ad1f6bce89fb32e082dd", "path": "github.com_otiai10_copy@v1.14.1.registry.json", "size": 761, "type": "registry", "depth": 2 }, { "id": 23, "sha": "ec0a540bdd6ce810a41d68a4ff554cae84a9af921a85437c248f8856af85f124", "path": "github.com_otiai10_mint@v1.6.3.registry.json", "size": 761, "type": "registry", "depth": 2 }, { "id": 24, "sha": "79a73f77007de062390f331c48c97951abfa5e6b0bc2325b678a51a88a4b2604", "path": "github.com_pmezard_go-difflib@v1.0.1-0.20181226105442-5d4384ee4fb2.registry.json", "size": 768, "type": "registry", "depth": 2 }, { "id": 25, "sha": "7b6a67ff3a4ffccfee955b6653ce73a3e5b171f07a5e98c650057eaf28c99d1d", "path": "github.com_sergi_go-diff@v1.3.1.registry.json", "size": 763, "type": "registry", "depth": 2 }, { "id": 26, "sha": "b2875a97936372c7a8d1ac11551e8ca0fdb7faf90dfaf981f54186e61c122fc1", "path": "github.com_spf13_cobra@v1.9.1.registry.json", "size": 758, "type": "registry", "depth": 2 }, { "id": 27, "sha": "22983f74e52860a1e7b68c6d106bbf47ee1c4b85efcf807bdbcff82b0e6ed6e1", "path": "github.com_spf13_pflag@v1.0.6.registry.json", "size": 758, "type": "registry", "depth": 2 }, { "id": 28, "sha": "e557143282d81f045fd99a0257e6f8adecbdaa7cba044be6954045f8b0816d59", "path": "github.com_stretchr_testify@v1.11.1.registry.json", "size": 769, "type": "registry", "depth": 2 }, { "id": 29, "sha": "5f030180880ec31f8c42486dd7060d5edd52ebba8552b0a26004daa4cc9bdd10", "path": "go.opencensus.io@v0.24.0.registry.json", "size": 779, "type": "registry", "depth": 2 }, { "id": 30, "sha": "cd8fb633e0ee09d6f7557e5409c3a4b66ec548d4c904e3b49189c9bf18f4a3ab", "path": "golang.org_x_mod@v0.34.0.registry.json", "size": 754, "type": "registry", "depth": 2 }, { "id": 31, "sha": "4d2d1bd68e9b66eccc68c17ebc7042ae38c996b6e2f796f34481401a8009682e", "path": "golang.org_x_net@v0.52.0.registry.json", "size": 754, "type": "registry", "depth": 2 }, { "id": 32, "sha": "0c3e53a417d357ec75c73ab2a0f2ae09abfe6ee8dd6a7a5735a624c999b539ed", "path": "golang.org_x_sync@v0.20.0.registry.json", "size": 756, "type": "registry", "depth": 2 }, { "id": 33, "sha": "33075c8927ea14ddae6721917bd7b60de44e6fbb8b5080a379ce2e59e18a8437", "path": "golang.org_x_sys@v0.43.0.registry.json", "size": 754, "type": "registry", "depth": 2 }, { "id": 34, "sha": "900a7f913d47dcedd61d49e673d4f3e3bd74287b765cc9526c2b37e7d7e153e5", "path": "golang.org_x_text@v0.35.0.registry.json", "size": 756, "type": "registry", "depth": 2 }, { "id": 35, "sha": "082cec26e0e9b2dd0ad44c3087c52d97f69a9262ff1e8400fd491d163ed345ff", "path": "golang.org_x_tools@v0.43.0.registry.json", "size": 758, "type": "registry", "depth": 2 }, { "id": 36, "sha": "c71b3144e9dec2fc66bd53e785e7e6a374a6ab6b58084abce9a7213915ea20bc", "path": "k8s.io_klog_v2@v2.130.1.registry.json", "size": 756, "type": "registry", "depth": 2 }, { "id": 37, "sha": "72c8348b9902fdfb637531f0b5cb308a0058da81dc50a8a6b6aeee9eb40aabf1", "path": "github.com_google_go-replayers_httpreplay@v1.2.0.registry.json", "size": 786, "type": "registry", "depth": 2 }, { "id": 38, "sha": "fcafe2e87383902a16e5235691e52aa4813dd983a7a831a068c8ed7c8feaaa74", "path": "gopkg.in_yaml.v3@v3.0.1.registry.json", "size": 725, "type": "registry", "depth": 2 }, { "id": 39, "mol": "Md", "sha": "f194824c529a13d1fadcdb3111f0260ee58eccb57eecc4a248d7a1d60568bd11", "path": "github.com_datadog_orchestrion__tools@v0.0.0-20260706084330-df04ed94b69e.registry.json", "risk": 1, "size": 807, "type": "registry", "depth": 1 } ], "omitted_files": 34, "v": "8" } }