{"commit":"3fce3b5bb0236da2df6d99672afb8a719642eca7","dependencies":{"ecosystem":"cargo","pinning":{"artifacts_matched":52,"artifacts_seen":52,"declared_digests":52,"ecosystem":"cargo","lockfile":"Cargo.lock","mechanism":"Clira recomputed SHA-256 of every .crate and compared it to the checksum in Cargo.lock; cargo also fail-closes on mismatch","mismatches":[],"note":"","status":"verified","unmatched":[]},"seconds":1.6,"stage_a_fetch":{"artifacts_cached":0,"command":["cargo","fetch","--locked"],"network":"enabled","ok":true,"returncode":0,"untrusted_code":"not executed"},"stage_b_build":{"command":[],"network":"none","ok":true,"returncode":null,"untrusted_code":"executed offline"}},"environment":{"fetch_network":"enabled, no untrusted code executed","filesystem":"read-only rootfs, tmpfs /tmp","runtime":"gVisor (runsc)","sandbox_image":"clira/sandbox@sha256:62f94465b6e07ebc18f40c13553fa9b46ac1cf9c057cb72950bc7a08ce418be1","test_network":"none","toolchain":["Python 3.12.3","go version go1.22.2 linux/amd64","v22.23.2"],"user":"65534:65534"},"fixes":{"applied":0,"note":"no findings, so no patches were generated or applied","verified":0},"repo":"https://github.com/BurntSushi/ripgrep","scan":{"by_severity":{"medium":5},"files":233,"findings":[{"cwe":"CWE-78","file":"build.rs","line":40,"severity":"medium","title":"Rust: std::process::Command \u2014 verify input sanitization"},{"cwe":"CWE-78","file":"crates/cli/src/decompress.rs","line":182,"severity":"medium","title":"Rust: std::process::Command \u2014 verify input sanitization"},{"cwe":"CWE-78","file":"crates/cli/src/process.rs","line":162,"severity":"medium","title":"Rust: std::process::Command \u2014 verify input sanitization"},{"cwe":"CWE-78","file":"crates/core/flags/hiargs.rs","line":1373,"severity":"medium","title":"Rust: std::process::Command \u2014 verify input sanitization"},{"cwe":"CWE-78","file":"crates/core/search.rs","line":303,"severity":"medium","title":"Rust: std::process::Command \u2014 verify input sanitization"}],"findings_total":5,"languages":{"Ruby":1,"Rust":89},"loc":67438},"scanned_at":"2026-08-12T20:14:51Z","scanner_version":"1.0.0","schema":"clira.clearance.v3","tests":{"baseline_note":"This is the pre-existing baseline. A generated fix is judged by whether it CHANGES these numbers, not by absolute green.","command":["cargo","test","--quiet"],"failed":0,"framework":"cargo","output_tail":"................................. 87/332\n....................................................................................... 174/332\n....................................................................................... 261/332\n.......................................................................\ntest result: ok. 332 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.02s","passed":118,"ran_in_sandbox":true,"returncode":0,"seconds":23.9}}