{ "llm": { "conf": 0.30013224, "grade": "benign", "model": "Qwen/Qwen3.6-27B", "outcome": "benign", "interpretation": "Legitimate Jenkins X platform build scripts" }, "ml": { "v": "7", "eng": "2.3.1-beta.0", "lvl": -1, "conf": 0, "mods": [ { "cls": 0, "raw": 0.00018887718, "rte": "az", "prob": 0.00018887718 } ], "prob": 0.00018887718, "skip": [ { "rte": "az/zip", "why": "unavailable" }, { "rte": "az/zip", "why": "unavailable" } ], "files": [ { "id": 0, "lvl": -1, "conf": 0, "prob": 0.00018887718033511192, "type": "zip" }, { "id": 1, "lvl": -1, "conf": 0, "prob": 0.000015228986740112305, "type": "text" }, { "id": 2, "lvl": -1, "conf": 0, "prob": 0.00008590022480348125, "type": "makefile" }, { "id": 3, "lvl": -1, "conf": 0, "prob": 0.000014046828255231958, "type": "markdown" }, { "id": 4, "lvl": -1, "conf": 0, "prob": 0.000010083119377668481, "type": "markdown" }, { "id": 5, "lvl": -1, "conf": 0, "prob": 0.000015288591384887695, "type": "png" }, { "id": 6, "lvl": -1, "conf": 0, "prob": 0.000015288591384887695, "type": "png" }, { "id": 7, "lvl": -1, "conf": 0, "prob": 0.000015616416931152344, "type": "png" }, { "id": 8, "lvl": -1, "conf": 0, "prob": 0.00001617272755538579, "type": "png" }, { "id": 9, "lvl": -1, "conf": 0, "prob": 0.000015288591384887695, "type": "png" }, { "id": 10, "lvl": -1, "conf": 0, "prob": 0.00001586476901138667, "type": "png" }, { "id": 11, "lvl": -1, "conf": 0, "prob": 0.000015288591384887695, "type": "png" }, { "id": 12, "lvl": -1, "conf": 0, "prob": 0.000015288591384887695, "type": "png" }, { "id": 13, "lvl": -1, "conf": 0, "prob": 0.000015288591384887695, "type": "png" }, { "id": 14, "lvl": -1, "conf": 0, "prob": 0.00001560648343001958, "type": "png" }, { "id": 15, "lvl": -1, "conf": 0, "prob": 0.00001586476901138667, "type": "png" }, { "id": 16, "lvl": -1, "conf": 0, "prob": 0.00001574555972183589, "type": "png" }, { "id": 17, "lvl": -1, "conf": 0, "prob": 0.000015775362044223584, "type": "png" }, { "id": 18, "lvl": -1, "conf": 0, "prob": 0.000016073385268100537, "type": "png" }, { "id": 19, "lvl": -1, "conf": 0, "prob": 0.000015616416931152344, "type": "png" }, { "id": 20, "lvl": -1, "conf": 0, "prob": 0.000015616416931152344, "type": "png" }, { "id": 21, "lvl": -1, "conf": 0, "prob": 0.000015288591384887695, "type": "png" }, { "id": 22, "lvl": -1, "conf": 0, "prob": 0.000015288591384887695, "type": "png" }, { "id": 23, "lvl": -1, "conf": 0, "prob": 0.000016748905181884766, "type": "png" }, { "id": 24, "lvl": -1, "conf": 0, "prob": 0.000010182459845964331, "type": "markdown" }, { "id": 25, "lvl": -1, "conf": 0, "prob": 0.000015288591384887695, "type": "png" }, { "id": 26, "lvl": -1, "conf": 0, "prob": 0.000009854634299699683, "type": "markdown" }, { "id": 27, "lvl": -1, "conf": 0, "prob": 0.000029047330826870166, "type": "shell" }, { "id": 28, "lvl": -1, "conf": 0, "prob": 0.000015020370483398438, "type": "registry" } ], "version": "v18.18", "analyzed_at": "2026-07-19T05:44:59Z" }, "path": "github.com-jenkins-x-jenkins-x-platform-v0.0.3885.zip", "raw": { "files": [ { "id": 0, "ctx": [ { "b": "p!H([6Awys2MK\u00268000000000000000002aY003UCBzb/ae[n*pfkt6oyIvWceQe{-wO#o$zGvyOePtJmBy]Diz9Sm#e?![li5\u0026=Ge[X)ux\u003eIs4A+d}b.ew0Y42jj#3iE:Aht)%J\u0026TEu/w%!iWkOsj9+?u/G:Q?OW(7MA!:xs4:41p3.@\u003eC$W=c@(-)/", "n": [ { "c": 2, "d": "Zip archive path", "i": "metadata/package/files/included::zip-archive-path", "o": 0, "z": 53, "cf": 0.949999988079071 } ], "ln": 0 } ], "mol": "H₂(Cm₃F)", "sha": "ea8f9011d504e2931166d07a75327f1e87d0dc7b48b3caadc12b7e8d00bb61cc", "path": "github.com-jenkins-x-jenkins-x-platform-v0.0.3885.zip", "risk": 2, "size": 821518, "type": "zip", "facts": { "metrics": { "file": { "size": 821518.0, "entropy": 7.99, "size_bytes": 821518.0 }, "binary": { "overall_entropy": 7.99, "peak_region_bytes": 798720.0, "peak_region_entropy": 7.85 }, "archive": { "file_count": 70.0, "member_count": 70.0, "script_count": 1.0, "zip_bomb_ratio": 12.41, "directory_count": 0.0, "executable_count": 0.0, "extra_field_size": 0.0, "noise_file_count": 0.0, "total_compressed": 802310.0, "compression.ratio": 0.79, "hidden_file_count": 3.0, "total_uncompressed": 1010303.0, "crc_collision_count": 1.0, "entry_comment_count": 0.0, "max_filename_length": 118.0, "rtlo_filename_count": 0.0, "format.regular_count": 70.0, "nested_archive_count": 0.0, "path_traversal_count": 0.0, "symlink_escape_count": 0.0, "security.setgid_count": 0.0, "security.setuid_count": 0.0, "security.sticky_count": 0.0, "double_extension_count": 0.0, "duplicate_member_count": 0.0, "security.symlink_count": 0.0, "unicode_filename_count": 0.0, "homoglyph_filename_count": 0.0, "security.encrypted_count": 0.0, "misplaced_executable_count": 0.0, "timing.mtime_dominant_count": 70.0, "timing.sentinel_mtime_count": 70.0, "security.world_writable_count": 0.0, "timing.mtime_dominant_fraction": 1.0, "compression.method_counts.deflate": 70.0 } } }, "traits": [ { "id": "micro-behaviors/communications/http/upload::curl-data-binary", "conf": 0.699999988079071, "crit": 3, "desc": "curl uploads raw binary body" }, { "id": "micro-behaviors/communications/http/download/curl::curl-cmd", "atk": "T1105", "conf": 0.699999988079071, "crit": 3, "desc": "curl command includes URL or option", "spans": [ [ 495, 14 ] ] }, { "id": "micro-behaviors/communications/http/url/port::http-alt-port-8080", "conf": 0.699999988079071, "crit": 3, "desc": "HTTP alternate port 8080" }, { "id": "micro-behaviors/communications/http/upload::curl-post-binary-upload", "conf": 0.7799999713897705, "crit": 3, "desc": "Curl binary data upload to external URL" }, { "id": "micro-behaviors/fs/directory/delete::rm-rf", "atk": "T1070.004", "mbc": "C0047", "conf": 0.800000011920929, "crit": 3, "desc": "References rm -rf recursive deletion command" }, { "id": "metadata/file/extension/identity::shell-a", "conf": 1.0, "crit": 2, "desc": "POSIX shell script extension", "from": [ { "file": 27 } ] }, { "id": "micro-behaviors/communications/http/download/curl::curl-silent", "atk": "T1105", "conf": 0.800000011920929, "crit": 3, "desc": "curl command uses silent or fail flags", "spans": [ [ 201, 19 ] ] }, { "id": "metadata/package/files/included::github-module-zip-basename", "conf": 0.8600000143051147, "crit": 1, "desc": "GitHub versioned zip filename", "spans": [ [ 0, 53 ] ] } ] }, { "ctx": [ { "b": "arR^HarR^HarR^HarR^HarR^HarR^HarR^HarR^Havf%Pv}YA@oLF0FzGxv@arR^HarR^HarR^HarR^HarR^HarR^HarR!cwPz\u003caz/cWMe?!?0n)#QWvrcSogb7ys3lQDlarR^HarR^HarR^HarR^HarR^Hazt\u003esA5]T9CxXl-vq]T+xK@/mA+v4wx\u003e7Z(B7GzC3jm)#axg^co\u0026Af2pdci(pFKqHr7P\u003eXqY[L9qxO$rmjYMVmnM(Tl@=PNnL-8jave:\u003cavF!1r8MpOrA8K=p6}sJarSx\u003eavG^Mx(mTbx(v)ge^.}darR^Har\u003cG[v}xL0wG\u0026mrxKLZ[az\u003eW#zxK4mwGV8aA=2\u003euvqYP#v@Dl}x([6czGu}jz/M$yB7D)BA+figz!a02BzkVhed9HxarR^HvqYP#wncabA+P09BzkVhayPslwmYv!zE)u3vTf7{wN/*@z/fRsf^7NKA=l8kxDPqTz!pblxLzJgwn+$2zdNQbe^.}darR^Har\u003cG[v}xL0z/N3AB7!##y-)OavqWifxK@q@z/x#xx\u003eIa3aA8EwwPw]iAV!}hBzk\u0026xayPzmxM4{9DsZRfvTeq6arR^HaARpday/teD2^RixMLwnCwZ#jaARp9BrCpsazk.6zGGPgxcqqfwGTVXv}xL0wIaq%arR^HarR\u003e4wOkB/avQf\u0026x([RAaAIj8y?$khwNPE0BzbkdB-7]izxJ\u003efaARpdayO=4x(mMawO#Q7BA]0qzE:\u003e#yY", "ln": 0, "col": 1, "line": 1 }, { "b": "z/fVqz!%l3wftubefF\u003eKayPq4aA.NjwPw]6z/6ufzvdHearR^Hv@DmbA=k+pCwhejaARp9BrCdjBzk\u0026xe*9S4AV/EqwGU@mA=t@rwPF#jw/#hex(+zcwObT]x([6czy=bqarR^Har\u003erlzGG]qy:70swNPE$asH}MaARpdaAhmywPxsAwnc6}v@@\u0026i", "ln": 635, "col": 41, "line": 16 }, { "b": "azC.7x\u003e7N[wN(])C{3J5arR^HarUfjAcVFrxj#xfzF%Shv}u^8xKM09x(+zhzEWH9wmYo]x(k5iAV!!jBywV)wN({9zY\u003cdnwGVhnA+=18arR^HasHVoaz2!aze:r5azy", "ln": 1701, "col": 56, "line": 36 }, { "b": "y-)UpawuuVvqE5PzGGPmC{3KrBzbPkx)Ku3aARJAB9g@ex(\u003eFozxJz1xKLZ?aA7\u003c0arR^HarU=twGUG3AcVFrxj#xfz*c8gAXnF7z/M$xxK@r9B-ICtB7Gznz!pblxLv", "ln": 2652, "col": 25, "line": 52 }, { "b": "vSMa2B.bDjy\u003cvdqzEWQ9AbP=9By!#9Cwhejx(k5nxK@q/z/PRC3jm)#atLL(m@\u00263QBrCHlavy6^D2^RixMLv\u003cx\u003e7Z(B7D%Dq/#L:wN/*8Bz\u0026pzxK@rdwPzTeayPd#ay/tcwncd1z/fRsz!ot0arR^HaARphB0ad\u003cv}xL0wH[%nvpJ%[lVl\u003c:A+P09Bz(gxxK#i}vTf8eA:X", "ln": 3460, "col": 9, "line": 64 }, { "b": "B97\u0026jwN(]$zxK4mx(+zrwN/*@z/d0DAa9\u003c1zGE1qx\u003e7Z(B7DFozY\u0026[9yH]4txKM6}az\u003eK$wH[fharR^HaA.:pefF\u003eyw[u09Bz\u0026pywO=flaAIagy+cYyze:AlBsXLyzE:(dBzblaCwhbfaARTjzGxA3AV/EqwGU5)A+^ikarR^HarU(wwPzu8B9g#a", "ln": 4146, "col": 18, "line": 76 }, { "b": "wO#Q7BA[#Sx(mA%B.2i7xcpQ\u0026arR^HarUfmz/Y$Kv@bN/z6i+qay/tjzGGDgv@bN/z6iLgayMyevrV^nx(\u003e^DvqG:\u003exk8l@aARp9BrCWswGU5)A+=18arR^HaA8oyviv]", "ln": 4605, "col": 47, "line": 82 }, { "b": "arUJjwPP5pxK@q#z!%ldCwg@cay/tcwncd1z/fRS3jm)#arR^Hc$aLEs-nB9zfo]wazkziwGUA0C{43ExK#ibA+e-{Aa@)3BAnNyw/#hewGU5)A+=!oATA{iarR^HarR^Hl$HyMC42GbC4z^$z/PSmayMy5z/x$Az!pblxLzJgoLF0FzGxwJayPd#3jm)#arR^Hc$jRFs-nB9zfo]way!\u00265B7DF5zH0vwz!9M]x\u003ep/$w[=6)B0bNyay!\u00262A^n^DA=k/ezE)Zcaz#atx\u003e7Z}3lQDlarR^HarR!FByxo9zF78lxKM09s-nB9v}Yp*xjUP@Bzbkdw[=6)B2$HMzE:7YarR^HarS7xdiI=i", "ln": 5166, "col": 5, "line": 92 }, { "b": "arR^Hc$B+HnOf8!xK@q/z/PRox(mA%B.268ayMxppes?XlQ-gwBy/Ysazbt7wGUA5aAg+fBrCHlazC}s3lQDlarR^HarR!qx(!xpx\u003c#jbx(v(uaARpdzxJw9C{2H^A+L", "ln": 5749, "col": 3, "line": 106 }, { "b": "zF%RtzeS%0w{CIvxK@qWx\u003e7Z(B7D%Ds-nB9zddYjvpS)\u003es-nC6aA8EwayPwlA+P09BzkVh3lQDlarR^HarR!Az//Y6wPF#rx([35zxItUA+PY9Bzk]faxJG4yJyP", "ln": 6543, "col": 14, "line": 117 }, { "b": "BzkVhB1N!barR^+e*ablvpS}^vrcd8e*abbx(+y\u003cx\u003e7Z(B7DF8z!i#jzF%Rtxl4A#BrCKlA=2JiB7]MgaARJAB-RapBzbkdBAg/2wEoL5arR^HzEEx[B1wCQA:-G\u0026zddE2B1wCPwPz%dv}u^1vrcd8efF\u003eKaAhvtwozy7az$R8wPF#jw/#hewGTVXv}xL0z/NxoarR^HarUluv}xR3ayPslA+flkx(W=}azbLjaAz44B8L@8vR/P#vqYP#v%8\u003cmz/5{6C{4lJwGUY8ay]58v@=o)x(mMaBzbj)arR^HarUPyx\u003eIc$aA7\u003cmBzbkds8Sa{ayPd#aAz4jA=kGhv}/*[aARpd", "ln": 7725, "col": 44, "line": 136 } ], "depth": 1, "facts": { "metrics": { "file": { "size": 11357, "entropy": 4.43 }, "binary": { "peak_region_bytes": 11264, "peak_region_entropy": 4.62 } } }, "id": 1, "path": "github.com-jenkins-x-jenkins-x-platform-v0.0.3885.zip!!github.com/jenkins-x/jenkins-x-platform@v0.0.3885/LICENSE", "pid": 1101, "risk": 1, "sha": "c71d239df91726fc519c6eb72d318ec65820627232b2f796219e87dcf35d0ab4", "size": 11357, "traits": [ { "id": "metadata/permission/prose::permission-grant-verb-english", "conf": 0.9, "crit": 2, "desc": "Grant or authorization verb text", "spans": [ [ 5219, 0 ] ] }, { "id": "metadata/permission/prose::permission-mandatory-language-english", "conf": 0.9, "crit": 2, "desc": "Forced or mandatory instruction wording", "spans": [ [ 7897, 0 ] ] }, { "id": "metadata/permission/prose::permission-permission-term-english", "conf": 0.9, "crit": 2, "desc": "Permission or access term", "spans": [ [ 7779, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/content-word::data-access-verb-token", "conf": 0.88, "crit": 1, "desc": "Data-access verb token", "spans": [ [ 5289, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/content-word::data-transfer-verb-token", "conf": 0.88, "crit": 1, "desc": "Data-transfer verb token", "spans": [ [ 2684, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/content-word::english-edit-verb-token", "conf": 0.88, "crit": 1, "desc": "English edit-action verb token", "spans": [ [ 6575, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "spans": [ [ 270, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-2", "conf": 0.8, "crit": 1, "desc": "English function-word token \"and\"", "spans": [ [ 167, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-3", "conf": 0.8, "crit": 1, "desc": "English function-word token \"that\"", "spans": [ [ 493, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-4", "conf": 0.8, "crit": 1, "desc": "English function-word token \"have\"", "spans": [ [ 4194, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "spans": [ [ 182, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-6", "conf": 0.8, "crit": 1, "desc": "English function-word token \"with\"", "spans": [ [ 683, 0 ] ] }, { "id": "metadata/lang/natural/vocabulary/function-word::lang-english--atom-7", "conf": 0.8, "crit": 1, "desc": "English function-word token \"this\"", "spans": [ [ 379, 0 ] ] }, { "id": "micro-behaviors/data/llm/repository-directive::control-action-prose-fragment", "conf": 0.88, "crit": 1, "desc": "Control-action verb followed by prose", "spans": [ [ 3508, 0 ] ] }, { "id": "micro-behaviors/data/llm/repository-directive::repository-agent-directive-marker", "conf": 0.88, "crit": 1, "desc": "Marks text as an agent directive", "spans": [ [ 1733, 0 ] ] } ], "type": "text" }, { "ctx": [ { "b": "lR6Hvr9@J(p!@h{jS[AWBz%n]fkt6oyIvWceQe\u003cSxKL}6zfo]hB.%f0fGp-", "n": [ { "c": 3, "d": "HTTP alternate port 8080", "i": "micro-behaviors/communications/http/url/port::http-alt-port-8080", "o": 42, "z": 5, "cf": 0.699999988079071 }, { "c": 2, "d": "Several local variable assignments", "i": "metadata/file/metrics::shell-multiple-local-assignments", "o": 0, "z": 18, "cf": 0.6000000238418579 }, { "c": 2, "d": "CI/CD pipeline HTTP usage", "i": "micro-behaviors/os/service/legitimate::ci-cd-pipeline", "o": 21, "z": 7, "cf": 0.800000011920929 } ], "ln": 1, "addr": 0 }, { "b": "pc?PyauzUdygRo#x(m#zCM", "ln": 2, "addr": 48 }, { "b": "pG5w%jS(0#B7/c3y-)\u003ervqPN8", "ln": 3, "addr": 66 }, { "b": "qBKnFk#QiVrZ/[+nL-87iZ1Phd066ky?$keCR9@Ey?m3@wI57pA=U@kzyC", "ln": 4, "addr": 87 }, { "b": "njuiDauzUdxK#0%", "ln": 5, "addr": 134 }, { "b": "", "ln": 6, "addr": 147 }, { "b": "lR6Hvr83v\u003emo95?lScuvq^SK6qxO1-as5vRxK#0@ay!\u00264atmhDx(4r\u003eAXz9AzdLwfvrlc)eN-^zxF1vFwPxzrB8L}B", "n": [ { "c": 1, "d": "CRED credential label", "i": "objectives/credential-access/theft/keywords::cred-upper", "o": 160, "z": 4, "cf": 0.44999998807907104 } ], "ln": 7, "addr": 148 }, { "b": "lR6Hvr83v\u003emo95?lScuvq^Sv1s0fK!as5vRxK#0@ay!\u00264atmhDx(4r\u003eAXz9AzdLwfvrlc)eN-^zxF1giB8@%GB8L}B", "ln": 8, "addr": 221 }, { "b": "", "ln": 9, "addr": 294 }, { "b": "B7GDoA5]aQzFsg", "ln": 13, "addr": 330 }, { "b": "2{Z]\u0026mncA8aAz4jzY\u0026F0wftSiazt\u003esA5]T9v}Yp\u003eBzVewwP.\u0026xygRo#x(m#zCRiYG", "ln": 14, "addr": 342 }, { "b": "2{Z]\u0026mncA8aAz4jzY\u0026F0wftP7v%8l?Bz(gxxMOunB2\u003e%cyJT8$A=bDgwPGCkxKL}6B1I9zv%8l?Bz(gLB98tvvp%d7xk.Z3y?m3]x(+[pz/2", "n": [ { "c": 1, "d": "Regex component marker", "i": "objectives/command-and-control/dropper/delivery/http::suspicious-cloud-image-object--rx-1", "o": 459, "z": 22, "cf": 0.8600000143051147 } ], "ln": 15, "addr": 395 }, { "b": "2{Z]\u0026mncA8aAz4jzY\u0026F0wft@nvpB4:azt\u003esAc15[fkCYtwPzW1By/IBv}Yp\u003eBAo6QBz(hdxjSYdz/oo8wNPK(B1Q%vz2", "ln": 16, "addr": 482 }, { "b": "2{Z]\u0026mncA8aAz4jzY\u0026F0wft-czF%3cy*?ubxMOunB2\u003e%cxK#0%e[X)uxMW=px(tUwz/fG6B.\u003eGb", "ln": 17, "addr": 556 }, { "b": "", "ln": 26, "addr": 800 }, { "b": "x(n0lvqG:vay/k0vqWiewPS6layYFcy?9", "n": [ { "c": 2, "d": "Makefile all target", "i": "metadata/build/make::all-target-assignment", "o": 805, "z": 4, "cf": 1.0 } ], "ln": 27, "addr": 801 }, { "b": "2{Z]\u0026mncA8aA.ToA:-G\u0026at2fQwNY^{at2fVzGx]dy?$jtc@965mjxui", "ln": 28, "addr": 828 }, { "b": "2{Z]\u0026mncA8ay]51wPRGaeIg{:A+w@abQ=zNo*{G", "ln": 37, "addr": 1005 }, { "b": "", "ln": 38, "addr": 1037 }, { "b": "v@bZ+zAn)", "n": [ { "c": 2, "d": "Makefile clean target", "i": "metadata/build/make::clean-target-assignment", "o": 1038, "z": 6, "cf": 1.0 } ], "ln": 39, "addr": 1038 }, { "b": "336(9ePLCCygRo#x(m#zCR9(Jvrua1A=0EtxKL}6A@", "n": [ { "c": 3, "d": "Recursively deletes a directory tree", "i": "micro-behaviors/fs/directory/delete::recursive-delete", "o": 1047, "z": 6, "cf": 0.8500000238418579 } ], "ln": 40, "addr": 1046 }, { "b": "336(9ePLCCygRo#x(m#zCR9(Jvrua1A=0DPDRM\u003e3msuTrBz2[", "ln": 41, "addr": 1080 }, { "b": "336(9ePLCCygRo#x(m#zCR9(Jvrua1A=0EIwPq\u003cbA+f90zGG}Ly\u0026r*0", "ln": 42, "addr": 1120 }, { "b": "", "ln": 43, "addr": 1165 }, { "b": "31)%]ay/tbze18meNY+Nz6g3ywO+{^B7DEtc@JGcml%\u003cvuSGP[q+o+WdiY(^eN-Eiz*9^Aze:Px", "ln": 53, "addr": 1469 }, { "b": "31)%]aAR48at4hlaA/1UqBKnFk#QiVrZ/[+nL-8gat4BMb2R#*wNPT\u003eaA?spB7]Mgas5vkmnccoq:\u003e4]mn^5QpFJt.", "ln": 54, "addr": 1530 }, { "b": "31)%]aAhEAxDRklx\u003eIc$aA/1UqBKnFk#QiVrZ/[+nL-8g", "ln": 55, "addr": 1603 }, { "b": "2{Z]\u0026mncA8aAg+0yHH\u003c!azLF9yIvWceQe\u003c^y*?A$z/PW", "ln": 56, "addr": 1640 }, { "b": "31F9#y-\u003eqYw)]y\u0026at4ZUbQ=2Jk#HVRrz#s^o\u003cZm=mmp6Yrz#^AiWuavni{cMo\u0026UaXrzu*/qBJ#LuR\u003cW5diHh]wmoN*eN\u0026BivrcSob0Wz4pc?Pydj]HPvrua1A=0xNc@JGcml%\u003cvuSGP[q+o+Wdk2ZPDlKESc{{J\u003eqDd13mnM=efjw*lfjOW7A==v", "n": [ { "c": 4, "d": "Curl command with data-bearing POST parameter", "i": "objectives/exfiltration/http/upload::curl-exfil", "o": 1742, "z": 16, "cf": 0.8999999761581421 }, { "c": 3, "d": "curl command uses silent or fail flags", "i": "micro-behaviors/communications/http/download/curl::curl-silent", "o": 1677, "z": 11, "cf": 0.800000011920929 } ], "ln": 57, "addr": 1676 }, { "b": "320)^z6i\u003egAbM\u003ewAaAy0wD", "ln": 58, "addr": 1824 }, { "b": "336(9ePLCCbZSoLo*%EWe{7-L", "ln": 59, "addr": 1842 }, { "b": "33yh$vru6\u0026z/^avB-RjFC4CYnx(v(ieIg:LzE:(bvqxA%lR6Hvr9@V{qD3d.p9p/gqBKnFk#QiVrZ/[+nL-8g", "ln": 60, "addr": 1863 }, { "b": "33yh$vru6\u0026z/^avB-RjFA+e({CPXOUar\u003cAWuR\u003cAZr7oUYo\u003cZ{\u0026qD3d.pcy0TdK=L:eP@lZc@JGcml%\u003cvuSGP[q+o+WdiJ8xx(4rjB7+", "ln": 61, "addr": 1932 } ], "depth": 1, "facts": { "metrics": { "ast": { "max_depth": 8.0, "bind_count": 7.0, "call_count": 4.0, "node_count": 409.0, "identifier_count": 19.0 }, "file": { "size": 2106.0, "entropy": 5.42, "size_bytes": 2106.0 }, "text": { "tab_count": 31.0, "digit_ratio": 0.0, "space_count": 154.0, "total_lines": 63.0, "char_entropy": 5.42, "unique_chars": 68.0, "avg_line_length": 32.43, "max_line_length": 147.0, "empty_line_ratio": 0.17, "last_line_length": 34.0, "whitespace_ratio": 0.12, "most_common_ratio": 0.06, "identifier_density": 1.63, "line_length_stddev": 29.36, "most_common_char_is_null": 0.0, "max_inline_whitespace_run": 1.0, "trailing_whitespace_lines": 1.0, "most_common_char_codepoint": 101.0, "normalized_unique_identifiers": 4.52 }, "binds": { "count": 7.0 }, "calls": { "count": 4.0 }, "binary": { "overall_entropy": 5.42, "peak_region_bytes": 2048.0, "peak_region_entropy": 5.46 }, "source": { "function_count": 10.0 }, "functions": { "count": 10.0 }, "identifiers": { "count": 19.0, "total": 103.0, "avg_length": 9.19, "max_length": 24.0, "min_length": 2.0, "avg_entropy": 2.59, "reuse_ratio": 0.26, "unique_count": 27.0, "length_stddev": 6.55, "high_entropy_count": 5.0, "high_entropy_ratio": 0.19, "all_lowercase_ratio": 0.37, "all_uppercase_ratio": 0.26 } } }, "id": 2, "mol": "H₂(Cm₃F)", "path": "github.com-jenkins-x-jenkins-x-platform-v0.0.3885.zip!!github.com/jenkins-x/jenkins-x-platform@v0.0.3885/Makefile", "pid": 0, "risk": 2, "sha": "d855e0c9536669c7ed946a5334aee21ec65b2c83f4363336df2ff1593bea79ce", "size": 2106, "traits": [ { "id": "micro-behaviors/communications/http/upload::curl-data-binary", "conf": 0.699999988079071, "crit": 3, "desc": "curl uploads raw binary body", "spans": [ [ 1742, 13 ] ] }, { "id": "micro-behaviors/communications/http/download/curl::curl-silent", "atk": "T1105", "conf": 0.800000011920929, "crit": 3, "desc": "curl command uses silent or fail flags", "spans": [ [ 1677, 11 ] ] }, { "id": "micro-behaviors/communications/http/upload::curl-post-binary-upload", "conf": 0.7799999713897705, "crit": 3, "desc": "Curl binary data upload to external URL", "spans": [ [ 1742, 16 ] ] }, { "id": "micro-behaviors/communications/http/url/port::http-alt-port-8080", "conf": 0.699999988079071, "crit": 3, "desc": "HTTP alternate port 8080", "spans": [ [ 42, 5 ] ] }, { "id": "micro-behaviors/fs/directory/delete::rm-rf", "atk": "T1070.004", "mbc": "C0047", "conf": 0.800000011920929, "crit": 3, "desc": "References rm -rf recursive deletion command", "spans": [ [ 1047, 6 ] ] }, { "id": "micro-behaviors/communications/http/download/curl::curl-cmd", "atk": "T1105", "conf": 0.699999988079071, "crit": 3, "desc": "curl command includes URL or option", "spans": [ [ 1676, 12 ] ] } ], "type": "makefile" }, { "ctx": [ { "b": "B1IR*Cv+l8x()]tdiJtCayPdgx(n37xl4B5wN(]JnGYVelQS5oy*?A$z/PXqw]zYjvqZukolBYPA=bDgwPF#7y\u0026%/vwPw]iAV!\u003edz/]OyarTP%ze:r5azC.mByx04vruj4zxJ\u003efayX]6BrCHlayYw5wN({4AaJ]fB8Mhwv}u^7z!s9nvrb{4w]zYjwmY{}y\u0026sobzF782zE:(gB-88hzF782AbYScv{%E[z/fRsx(k5nxK@q@y\u0026sDbe^.}!xKM0gB0bgmv@co#wN({4B-X:Aw/#hewGUD2CS#JxD(%KOarR^HarR^HarR^HarR^HarR^HarR^HarR^HarR^HD(%KOarR^HarR^HarR^HarQ", "ln": 71, "col": 47, "line": 3 }, { "b": "eIeLaeIeLaeIeLaeIeLaeIeLaaBCp-eIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaeIeLaaBBJzaZmMIzFJ%7B6QhcBAzFyiXJdbvrTtpx([3hvS=:6A:%39By/uie[n*pfkt6oyIvWceQe{-wO#o$zGvyOePtJmBy]Diz7/:mB97#lfkkoixjVcqygRo#x(m#AAbGqqarR!OaywFFwO#o$zGxe(at1Z9B.\u003e(tazC.nwOl3(By!#9lReyNavwKtB8L(qBzkVhaA}KwxDRkjx(mT6zEES#wfueeBrC7oB98tqx(^Y(y?j-dx(ET1x(mH6ayPd#az2Clx(XcfzdNQbB0b\u0026qD)8Y)z/f07BA}?pawMG)B-OVYt{%xdBz#pZfe4uOCp)JxBzb/aB-Rbmv@DmbwO#Pxv@DiqygRo#x(m#zCRr/yzFJ%7B1IR*Abn%8w]zZbfkUcsBy/FCx(do\u003ewPGIxwQ5use]UYvdiK0XuTDMtCY!7muMZ{yl2}6Yw)]g\u003eaAz4jz/YSmz/QaCc#:0Bxj\u003eTZy?j-gzY\u003cmnay!?$aAI:vByO#bCwhejavg3\u0026x\u003ey^-Bz(hBdiK0BD)8YYxKL}6zfo]hB.$zjxMOunB2\u003e%cA::eAxk8E3BZ/GmwPzp0zGGDcBs}6wz7/TnzFJ%7B1IR\u0026ygRo#x(m#zCR9(Jvrua1A=0EDvrlK4AXzczvp%d)fjOW7A==evB7GGhe]UYvdiK0XuTDflvrcEbB-Rbpzc{S)eG^O}y\u00267pZxKL}6aAz4jz/YSmz/QaCc}E]=z6iLlaARpdaz(4rBrCKvAck#9AV!1$vR6N$wPRH8aAg+0yHH\u003c!az\u003eL8vp%d(aA.:pwft#jazC.mByx04ayPd#aA.ToA:-G\u0026aBd)FAV!!fAbok#vruj4zGvmO3vB13o(B]/v%8P@A:p8bBAzFyiXJdbvrTtpx([3hvS=:6A:%39By/uie[n*pfkt6oyIvWceQe{-wO#o$zGvyOePtJmBy]Diz7/:mB97#lfkkoixjVcqvRG}4vqPZhAbGqqaBCqsuRLDRz!0{avrbZZat1ZqwNV=ZnG.R-AV/Bmvrb\u003c\u003ex(mMavqYP#wnc9{z*2Yjx(mManm=QOavx*JA==vBD\u003cQiHvrlYpBz\u0026pozGx]dy?$k5wmPQ@B0bNyay/tbwIaq%boPM}B97\u0026byZHIJwGVbpwGUz7lRH5]Bz(8lay!?@y?mc1twwy*c$)ZAAc15[fk20vxMW=pv@DiqygRo#x(m#zCRr/RdiJ.JazC.nwPzi?BrC^wBz8^?wO#o$zGu}5e*8oaz/M$mzGx]dy\u00260K4x(v(iu$%{]ay]51wOkB[wPF#ozY?OZy\u00267pyolBYPA=bDgwPF$\u003cvpK7YxjSi5vqYH^wPxjxw]zYjx(n0lvqG:haA.To", "ln": 396, "col": 16, "line": 8 }, { "b": "z/]Okl1szyB-8pzCwhejayMx.z/oo8wGT/\u0026z!-\u0026[BrCToBAIKNazbLdy\u0026sIuBzbxfaz++fyANkcAV!^kw].D]aARTrvqE5{y\u0026si7aA}KwxDOMRfFBRVA+e=}BrCmsBz#pZfe3*NzGx-jwIdFez/]Oyxk.Z3y?kkez/4dtA+e*7A+O@#3jpfGu\u003cZT[", "ln": 1901, "col": 43, "line": 25 }, { "b": "vqG:5n[z)Qx(m#msrI*4Bz8!lx(mT2BZ!]m3jompA=VsBx(n0lvqG:5Bzbkdno]e=A+/xhay]IbC4CXpxMOunB2\u003e%cxk8E3BZ=$kz/4dyBZ!{5zE){3B1.xAzFr)evR4i4y\u0026r=ozddHcwPxCmz!0\u0026wwo8ycwPz\u0026AzdB(8D2NtnyIv(xwo8ycwPwa+u%)vHxk8Dgv@c73wGUVdBz#pZfe3%LBzb/ae[n*pfkt6oyIvWceQe{Uy\u0026sDbeOe*yx(XcfzdNQbB08!Ray!}8v@c7awg.wgC4\u003e#nzF-%5BAm!7CPZHpwNPW(ay/kgB97#laz\u003e?gx\u003e}\u003c2wGSMRy\u0026r/(y+odkz/]OxwO#W9A=k\u0026jwO#PMBAhIn3sEmH3jn15avfHEwPI{bzF782AbYScv{%E[z/fR63r.p\u0026ay!?$az++kBrCWswGUMeBy/GgvqE5^qCqcOB-Rb8aARJAvpJ!UB8@EjAbYScv{%E[z/fRsz/cXyz/{7yyJT8$A=bDgwPF#7y\u0026%/vwPw]5C{4cIzF\u003cfaxf3xcu%\u003csRCPZ{zwO}\u0026.u%\u003crGbo[r#A+e=)zGGP3y\u0026Y{\u003cra]#!aAz4jzY/", "ln": 2155, "col": 34, "line": 34 } ], "depth": 1, "facts": { "metrics": { "file": { "size": 2975, "entropy": 4.86 }, "text": { "lines": 61, "top_char": 101, "max_ws_run": 39, "digit_ratio": 0, "space_count": 434, "char_entropy": 4.86, "unique_chars": 73, "top_char_null": 0, "lines_over_200": 4, "top_char_ratio": 0.07, "ascii_art_lines": 2, "avg_line_length": 47.77, "max_line_length": 252, "empty_line_ratio": 0.33, "last_line_length": 39, "long_token_count": 3, "whitespace_ratio": 0.17, "line_length_stddev": 68.19, "repeated_char_sequences": 5 }, "binary": { "peak_region_bytes": 2975, "peak_region_entropy": 4.86 } } }, "id": 3, "mol": "H₃(Cm₂DbPo)", "path": "github.com-jenkins-x-jenkins-x-platform-v0.0.3885.zip!!github.com/jenkins-x/jenkins-x-platform@v0.0.3885/README.md", "pid": 0, "risk": 3, "sha": "983008ea2b8c8c7f60db76c3760c74d8b092853eb5f61dcedea4111272d0af9d", "size": 2975, "traits": [ { "id": "metadata/lang/natural::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "spans": [ [ 258, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-2", "conf": 0.8, "crit": 1, "desc": "English function-word token \"and\"", "spans": [ [ 230, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "spans": [ [ 119, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-6", "conf": 0.8, "crit": 1, "desc": "English function-word token \"with\"", "spans": [ [ 613, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-7", "conf": 0.8, "crit": 1, "desc": "English function-word token \"this\"", "spans": [ [ 1949, 0 ] ] }, { "id": "micro-behaviors/communications/http/url/forge::github-raw-url", "conf": 0.92, "crit": 3, "desc": "GitHub raw-content URL", "spans": [ [ 471, 34 ] ] }, { "id": "micro-behaviors/communications/http/url/forge::public-code-forge-url", "conf": 0.9, "crit": 3, "desc": "References a public code-forge URL", "spans": [ [ 1369, 19 ] ] }, { "id": "micro-behaviors/communications/http/url/path::image-file-url", "conf": 0.85, "crit": 3, "desc": "HTTP URL targets an image file", "spans": [ [ 471, 88 ], [ 698, 86 ], [ 884, 92 ], [ 1135, 88 ] ] }, { "id": "micro-behaviors/data/format/html::markdown-remote-image-source", "conf": 0.9, "crit": 3, "desc": "Markdown references a remote image", "spans": [ [ 460, 99 ], [ 677, 107 ], [ 869, 107 ], [ 1122, 101 ] ] }, { "id": "micro-behaviors/process/create/vcs/git::git-clone-command", "atk": "T1105", "conf": 0.9, "crit": 3, "desc": "Git clone command", "spans": [ [ 2307, 57 ] ] }, { "id": "micro-behaviors/process/create/vcs/git::public-forge-git-clone", "atk": "T1105", "conf": 0.92, "crit": 3, "desc": "Git clones a public code forge", "uses": [ 6, 9 ], "spans": [ [ 2219, 19 ], [ 2307, 57 ] ] } ], "type": "markdown" }, { "ctx": [ { "b": "boPu\u0026wNPF0z#", "n": [ { "c": 1, "d": "Document or config file extension", "i": "metadata/file/extension/identity::doc-or-config-extension", "o": 0, "z": 9, "cf": 1.0 } ], "ln": 0 } ], "depth": 1, "facts": { "metrics": { "file": { "size": 9.0, "entropy": 3.17, "size_bytes": 9.0 }, "text": { "space_count": 1.0, "total_lines": 1.0, "char_entropy": 3.17, "unique_chars": 9.0, "avg_line_length": 9.0, "max_line_length": 9.0, "last_line_length": 9.0, "whitespace_ratio": 0.11, "most_common_ratio": 0.11, "most_common_char_is_null": 0.0, "max_inline_whitespace_run": 1.0, "most_common_char_codepoint": 117.0 }, "binary": { "overall_entropy": 3.17, "peak_region_bytes": 9.0, "peak_region_entropy": 3.17 } } }, "id": 4, "path": "github.com-jenkins-x-jenkins-x-platform-v0.0.3885.zip!!github.com/jenkins-x/jenkins-x-platform@v0.0.3885/jenkins-x-platform/cleanup/README.md", "pid": 0, "sha": "437514a474884a82c955314617da4a61c712e6cca1fe1fb8943659e62495780d", "size": 9, "traits": [ { "id": "metadata/file/extension/identity::markdown-file-basename", "conf": 1.0, "crit": 1, "desc": "Markdown document file extension", "spans": [ [ 0, 9 ] ] }, { "id": "metadata/file/extension/identity::doc-or-config-extension", "conf": 1.0, "crit": 1, "desc": "Document or config file extension", "spans": [ [ 0, 9 ] ] }, { "id": "metadata/package/quality/source::azion-cli-readme-basename", "conf": 1.0, "crit": 1, "desc": "Markdown README basename", "spans": [ [ 0, 9 ] ] } ], "type": "markdown" }, { "id": 5, "sha": "8205dc12ef113faf05bed6ec5f2ea55c74bfdf5af1c63afd6d8e4ddd7d129314", "path": "github.com-jenkins-x-jenkins-x-platform-v0.0.3885.zip!!github.com/jenkins-x/jenkins-x-platform@v0.0.3885/jenkins-x-platform/images/bitnami.png", "size": 8694, "type": "png", "depth": 1 }, { "id": 6, "sha": "cd936b705fe1d1eae97fa92e5a1e708095699e3b163ac172b774f92b3cab4558", "path": "github.com-jenkins-x-jenkins-x-platform-v0.0.3885.zip!!github.com/jenkins-x/jenkins-x-platform@v0.0.3885/jenkins-x-platform/images/chartmuseum.png", "size": 9334, "type": "png", "depth": 1 }, { "id": 7, "sha": "a5f3cb45e0b279f929e4c314e176d6cb04428a4d88504e7eec8df1a5f8b35de5", "path": "github.com-jenkins-x-jenkins-x-platform-v0.0.3885.zip!!github.com/jenkins-x/jenkins-x-platform@v0.0.3885/jenkins-x-platform/images/cpp.png", "size": 46138, "type": "png", "depth": 1 }, { "id": 8, "sha": "7ba92fd353dafdaf0002bdcd436fd3c23fde87d7b7396bcbf5bfa1de90539d03", "path": "github.com-jenkins-x-jenkins-x-platform-v0.0.3885.zip!!github.com/jenkins-x/jenkins-x-platform@v0.0.3885/jenkins-x-platform/images/csharp.png", "size": 90438, "type": "png", "depth": 1 }, { "id": 9, "sha": "d8fa4b425b592b5b5ae662cb439d65ab350802b40cb2b7e822b7049df911c561", "path": "github.com-jenkins-x-jenkins-x-platform-v0.0.3885.zip!!github.com/jenkins-x/jenkins-x-platform@v0.0.3885/jenkins-x-platform/images/d.png", "size": 24194, "type": "png", "depth": 1 }, { "id": 10, "sha": "9827aff9b763917645b0b1157fc27e2eb6afad2da80ea1ca9a677c5d4bac0aed", "path": "github.com-jenkins-x-jenkins-x-platform-v0.0.3885.zip!!github.com/jenkins-x/jenkins-x-platform@v0.0.3885/jenkins-x-platform/images/go.png", "size": 92761, "type": "png", "depth": 1 }, { "id": 11, "sha": "b580f42db83ff1ae7c79d1c9215b15102f2a53e59e484e688b4bec9a5608d2d1", "path": "github.com-jenkins-x-jenkins-x-platform-v0.0.3885.zip!!github.com/jenkins-x/jenkins-x-platform@v0.0.3885/jenkins-x-platform/images/grafana.png", "size": 17127, "type": "png", "depth": 1 }, { "id": 12, "sha": "e4fec4c3feee5e048eb57aae38c41c485bd178bb1a2e8fde3e75843fdef55ec0", "path": "github.com-jenkins-x-jenkins-x-platform-v0.0.3885.zip!!github.com/jenkins-x/jenkins-x-platform@v0.0.3885/jenkins-x-platform/images/java.png", "size": 40730, "type": "png", "depth": 1 }, { "id": 13, "sha": "e6f646477155e019e286beca8660aa53a7299c31017f10564ed851db05726d18", "path": "github.com-jenkins-x-jenkins-x-platform-v0.0.3885.zip!!github.com/jenkins-x/jenkins-x-platform@v0.0.3885/jenkins-x-platform/images/jenkins.png", "size": 19759, "type": "png", "depth": 1 }, { "id": 14, "sha": "9aed1ee08df0ee5ae2a5957ffe72e55f9ef7712b7a98e5e23106efb0d7938bcd", "path": "github.com-jenkins-x-jenkins-x-platform-v0.0.3885.zip!!github.com/jenkins-x/jenkins-x-platform@v0.0.3885/jenkins-x-platform/images/kubernetes.png", "size": 56463, "type": "png", "depth": 1 }, { "id": 15, "sha": "992c576323983249c1b56192533e41ab87f482804fc59bce768715cba5c49d30", "path": "github.com-jenkins-x-jenkins-x-platform-v0.0.3885.zip!!github.com/jenkins-x/jenkins-x-platform@v0.0.3885/jenkins-x-platform/images/liberty.png", "size": 91070, "type": "png", "depth": 1 }, { "id": 16, "sha": "d7847560488881d8ca383604fb2f24d270cbbe2e69ca8439347cde2a2f9073c8", "path": "github.com-jenkins-x-jenkins-x-platform-v0.0.3885.zip!!github.com/jenkins-x/jenkins-x-platform@v0.0.3885/jenkins-x-platform/images/nexus.png", "size": 4258, "type": "png", "depth": 1 }, { "id": 17, "sha": "8edde76a4493878fd3699bce915d79277aecfe99d22c5a770caa9e51f6daf397", "path": "github.com-jenkins-x-jenkins-x-platform-v0.0.3885.zip!!github.com/jenkins-x/jenkins-x-platform@v0.0.3885/jenkins-x-platform/images/nodejs.png", "size": 29748, "type": "png", "depth": 1 }, { "id": 18, "sha": "6f56dfb33cb88eed29de90e8ce142d2c7dea562c0323cea09ef231821c773da7", "path": "github.com-jenkins-x-jenkins-x-platform-v0.0.3885.zip!!github.com/jenkins-x/jenkins-x-platform@v0.0.3885/jenkins-x-platform/images/php.png", "size": 7701, "type": "png", "depth": 1 }, { "id": 19, "sha": "211b8a506e76d0690e5cd95bf84d216ef6fd5ef647a23870b45b52798a9a7187", "path": "github.com-jenkins-x-jenkins-x-platform-v0.0.3885.zip!!github.com/jenkins-x/jenkins-x-platform@v0.0.3885/jenkins-x-platform/images/prometheus.png", "size": 6908, "type": "png", "depth": 1 }, { "id": 20, "sha": "fd04e86f3b8992bd599bab7ec407223aebd14541b7b055f5725d6d55398708c5", "path": "github.com-jenkins-x-jenkins-x-platform-v0.0.3885.zip!!github.com/jenkins-x/jenkins-x-platform@v0.0.3885/jenkins-x-platform/images/python.png", "size": 7821, "type": "png", "depth": 1 }, { "id": 21, "sha": "f20c75a641a305e5ce0167f5baa27b925e01148ca33647592a062ae3ce99df3d", "path": "github.com-jenkins-x-jenkins-x-platform-v0.0.3885.zip!!github.com/jenkins-x/jenkins-x-platform@v0.0.3885/jenkins-x-platform/images/ruby.png", "size": 69793, "type": "png", "depth": 1 }, { "id": 22, "sha": "3590e5ac1e6ed21915045f7fb6670a4d47558da014c80bd69cb2c9bb548ad10c", "path": "github.com-jenkins-x-jenkins-x-platform-v0.0.3885.zip!!github.com/jenkins-x/jenkins-x-platform@v0.0.3885/jenkins-x-platform/images/rust.png", "size": 33647, "type": "png", "depth": 1 }, { "id": 23, "sha": "27db5469553c23a634cb21b9e224853880616ddabea112e8208ff31e90b2e9b5", "path": "github.com-jenkins-x-jenkins-x-platform-v0.0.3885.zip!!github.com/jenkins-x/jenkins-x-platform@v0.0.3885/jenkins-x-platform/images/swift.png", "size": 106610, "type": "png", "depth": 1 }, { "id": 24, "sha": "fe27474b22791715e4aace0d0209adda7796dca7394b8dc906127fda405640aa", "path": "github.com-jenkins-x-jenkins-x-platform-v0.0.3885.zip!!github.com/jenkins-x/jenkins-x-platform@v0.0.3885/jenkins-x-platform/pipelinecontroller/README.md", "size": 21, "type": "markdown", "depth": 1 }, { "id": 25, "sha": "f11158707b17c8537f677976d0d239c0c3aad62aa6fe54e6384c493a0a5f1ec5", "path": "github.com-jenkins-x-jenkins-x-platform-v0.0.3885.zip!!github.com/jenkins-x/jenkins-x-platform@v0.0.3885/jenkins-x-platform/pipelinecontroller/pipeline.png", "size": 27135, "type": "png", "depth": 1 }, { "id": 26, "sha": "24beaafb3b5e2d827ab720588a378b9c7a34351858067115a3b0665acc6d9d70", "path": "github.com-jenkins-x-jenkins-x-platform-v0.0.3885.zip!!github.com/jenkins-x/jenkins-x-platform@v0.0.3885/jenkins-x-platform/pipelines/README.md", "size": 11, "type": "markdown", "depth": 1 }, { "ctx": [ { "b": "boXZHx(kOkvrl8?3uG^2at4eEzY\u003c1kAaJS\u0026x(1a-nLIGvmn(t{c$uXcazLF9yIvWceQe\u003c^y*?A$z/PXFC42ifwPGFHvqP*6D)06xwPe+-zdd6*aBCqAA+fhjxjC%8D)0Gwwfrmvfg*1?xjTaDfe1X43jpx/zEW^5z/cXgwPRo\u0026x\u003eI0#BsnNXDKp(ry\u0026r/(y-)Cevp%dmbRYSGaz+$avqE6dvp}.Gg72cDy\u0026r/(y-)+fxk8BeA^o![gysEiay/Lmy-(%\u0026arR^HeIh3Ty?mHaay2l@arR^UeOFZ7wmY^7b0/ZGwPh-LayPkdy?Wx/BzkVhflRkze[w)gyH}JswncabA+P09BzkVhe]t3mx\u003ey{$Bs}.(d@6czzxZid3lQDlar\u003eGvBz#pZfe1O\u003ewOkZ#BAhTWB$$Y@x(do\u003ewIm[ezFrY]B98ERbY)Eca%qmuarR^Hyh\u003evFAV=.Zv@Dl%x\u003eG5ex\u003eI0#BsdAz3jpx/zEW^5z/cXgwPRo[zdd6*uT[1(w[+[2A::67z/c%LaBsCraz+$avqE62zdd6*jTq-?arUGsv{%f@wnbW/B96L\u003cg72cDy\u0026r/(y-)+fxk8BeA^o![gysEiavw}1r6:8Jmn^FWpFKwJm)eaCv%8*dat2f^x(4u#BrAd!y\u0026r/(BzkVhar\u003eGvBz#pZfe1O\u003ewOkZ#BAhTWB$$Y@x(do\u003ewImIez^)=vbXgR4wPI@qaBCqDAuD\u0026Nasw^Kz/fV9x(mH5uT[1(w[+)9dgdgux\u003ewF(toCgUpFK\u003ePnLRYLuQEQ:mOc8)jV%]izGP=ia%pe%j0nSUwO}?$arR!rv}Y^6b2@I?vR/P#Bz\u0026plx(mD7x(do\u003ewG?D/bv#alBrApBarUog3vJl*w]zYjnLIGvmiDqZas6JMk$svxj0n6L3jgoNxM21snLIGvmg6u5nMnkRrA9s6mmPG^DR3{$m[1TLfmsflpc?PyjTtwQnMnkRrA9s6mmOT+dT.T", "ln": 0, "col": 1, "line": 1 } ], "depth": 1, "facts": { "imp": [ [ "", "set" ], [ "", "cat" ], [ "", "grep" ], [ "", "grep" ], [ "", "sed" ], [ "", "curl" ], [ "", "jq" ], [ "", "curl" ], [ "", "jq" ], [ "", "echo" ], [ "", "echo" ], [ "", "get_digest" ], [ "", "get_image_configuration" ] ], "tgt": [ "cat", "curl", "echo", "get_digest", "get_image_configuration", "grep", "jq", "sed", "set" ], "funcs": [ [ "get_digest", 122 ], [ "get_image_configuration", 382 ] ], "metrics": { "ast": { "op.eq": 1, "op.mod": 1, "max_depth": 9, "call_count": 13, "node_count": 269, "op_density.eq": 0, "op_density.mod": 0 }, "file": { "size": 934, "entropy": 5.38 }, "text": { "lines": 42, "top_char": 101, "tab_count": 6, "max_ws_run": 1, "digit_ratio": 0.02, "space_count": 112, "char_entropy": 5.38, "mixed_indent": 1, "unique_chars": 70, "top_char_null": 0, "string_density": 0.19, "top_char_ratio": 0.05, "avg_line_length": 21.24, "max_line_length": 118, "empty_line_ratio": 0.24, "last_line_length": 4, "whitespace_ratio": 0.17, "identifier_density": 1.86, "line_length_stddev": 25.26, "normalized_string_count": 1.23, "trailing_whitespace_lines": 1, "normalized_unique_identifiers": 5.93 }, "binds": { "count": 13 }, "binary": { "peak_region_bytes": 934, "peak_region_entropy": 5.38 }, "source": { "function_count": 2 }, "strings": { "bytes": 209, "count": 8, "url_count": 2, "avg_length": 26.13, "max_length": 60, "avg_entropy": 3.42, "entropy_stddev": 0.83 }, "comments": { "chars": 23, "count": 4, "lines": 4, "to_code_ratio": 0.11 }, "functions": { "count": 2, "density": 4.76, "avg_params": 4.5, "code_ratio": 0.52, "max_params": 5, "avg_name_length": 16.5, "avg_length_lines": 11, "max_length_lines": 11, "min_length_lines": 11, "high_entropy_names": 1, "avg_param_name_length": 41.11 }, "identifiers": { "count": 78, "unique": 32, "avg_length": 6.75, "max_length": 30, "min_length": 1, "avg_entropy": 2.13, "reuse_ratio": 0.41, "length_stddev": 6.12, "has_digit_ratio": 0.09, "single_char_count": 3, "single_char_ratio": 0.09, "high_entropy_count": 2, "high_entropy_ratio": 0.06, "all_lowercase_ratio": 0.47, "all_uppercase_ratio": 0.22 } } }, "id": 27, "mol": "H(Cm₃)", "path": "github.com-jenkins-x-jenkins-x-platform-v0.0.3885.zip!!github.com/jenkins-x/jenkins-x-platform@v0.0.3885/jx/scripts/test.sh", "pid": 0, "risk": 2, "sha": "067873dcbd9371d5e1be07df8514f210d26724ebaf8ad178e1f6379f6fbb8f3e", "size": 934, "traits": [ { "id": "metadata/file/extension/identity::shell-a", "conf": 1.0, "crit": 2, "desc": "POSIX shell script extension" }, { "id": "metadata/lang/natural::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "spans": [ [ 688, 0 ] ] }, { "id": "micro-behaviors/communications/http/download/cli::curl-command-call", "atk": "T1105", "conf": 0.96, "crit": 3, "desc": "Shell invokes the curl command", "spans": [ [ 201, 4 ] ] }, { "id": "micro-behaviors/communications/http/download/curl::curl-silent-long-flag-url", "conf": 0.9, "crit": 3, "desc": "Curl silent option with remote URL", "spans": [ [ 496, 34 ] ] }, { "id": "micro-behaviors/communications/http/download/curl::curl-silent-short-flag-url", "conf": 0.9, "crit": 3, "desc": "Curl silent flag with remote URL", "spans": [ [ 496, 34 ] ] }, { "id": "micro-behaviors/communications/http/download/curl::subshell-curl", "atk": "T1105", "conf": 0.9, "crit": 3, "desc": "curl invoked inside command substitution", "spans": [ [ 494, 6 ] ] }, { "id": "micro-behaviors/communications/http/download/shell::fetch-command-with-var", "atk": "T1105", "conf": 0.9, "crit": 3, "desc": "curl or wget references shell variable", "spans": [ [ 495, 68 ] ] }, { "id": "micro-behaviors/communications/http/download/shell::fetch-variable-host-url", "atk": "T1105", "conf": 0.88, "crit": 3, "desc": "Fetch URL host is a variable", "spans": [ [ 306, 17 ] ] }, { "id": "micro-behaviors/communications/http/download/shell::shell-curl-url-call", "atk": "T1105", "conf": 0.8, "crit": 3, "desc": "curl call names an HTTP URL", "spans": [ [ 201, 4 ] ] }, { "id": "micro-behaviors/communications/http/download/curl::curl-cmd", "atk": "T1105", "conf": 0.7, "crit": 2, "desc": "curl command includes URL or option", "spans": [ [ 495, 0 ] ] }, { "id": "micro-behaviors/communications/http/download/curl::curl-silent-fail-flags-text", "atk": "T1105", "conf": 0.86, "crit": 3, "desc": "curl text contains silent or fail flags", "spans": [ [ 201, 19 ], [ 496, 13 ] ] }, { "id": "micro-behaviors/communications/http/download/curl::curl", "atk": "T1105", "conf": 0.66, "crit": 3, "desc": "Download via curl", "uses": [ 9 ], "spans": [ [ 495, 14 ] ] }, { "id": "micro-behaviors/communications/http/download/curl::curl-silent", "atk": "T1105", "conf": 0.92, "crit": 3, "desc": "curl command uses silent or fail flags", "uses": [ 2, 10 ], "spans": [ [ 201, 4 ] ] } ], "type": "shell" }, { "id": 28, "sha": "f3365528988dedb6698a0be903bbedfdef320792a0fc3775b727947a2b63ebe8", "path": "github.com_jenkins-x_jenkins-x-platform@v0.0.3885.registry.json", "size": 821, "type": "registry", "depth": 1 } ], "omitted_files": 23, "v": "8" } }