Mark/osint-hub
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

[Security] HIGH: 111 issue(s) found in osint_hub #59

New issue
Closed
opened 2026-05-14 23:22:33 +00:00 by Mark · 1 comment
Mark commented 2026-05-14 23:22:33 +00:00
Owner
Copy link

Security Scan Results for osint_hub

Severity: HIGH
Findings: 111

1. secret_in_diff

  • Details: Potential Password in URL found in commit ecfce79d
  • Commit: ecfce79d
  • Pattern: Password in URL

2. secret_in_diff

  • Details: Potential AWS Secret Key found in commit 2f0f0d2d
  • Commit: 2f0f0d2d
  • Pattern: AWS Secret Key

3. secret_in_diff

  • Details: Potential Password in URL found in commit d88891bd
  • Commit: d88891bd
  • Pattern: Password in URL

4. secret_in_diff

  • Details: Potential AWS Secret Key found in commit a9a3bd39
  • Commit: a9a3bd39
  • Pattern: AWS Secret Key

5. secret_in_diff

  • Details: Potential AWS Secret Key found in commit 327f39d9
  • Commit: 327f39d9
  • Pattern: AWS Secret Key

6. secret_in_diff

  • Details: Potential AWS Secret Key found in commit 54dac6ec
  • Commit: 54dac6ec
  • Pattern: AWS Secret Key

7. secret_in_diff

  • Details: Potential AWS Secret Key found in commit b652b46b
  • Commit: b652b46b
  • Pattern: AWS Secret Key

8. secret_in_diff

  • Details: Potential AWS Secret Key found in commit 00040f8c
  • Commit: 00040f8c
  • Pattern: AWS Secret Key

9. secret_in_diff

  • Details: Potential AWS Secret Key found in commit c8dcbed8
  • Commit: c8dcbed8
  • Pattern: AWS Secret Key

10. secret_in_diff

  • Details: Potential Password in URL found in commit 5a8b3655
  • Commit: 5a8b3655
  • Pattern: Password in URL

11. secret_in_diff

  • Details: Potential Password in URL found in commit ca918477
  • Commit: ca918477
  • Pattern: Password in URL

12. secret_in_diff

  • Details: Potential AWS Secret Key found in commit 9948d8cf
  • Commit: 9948d8cf
  • Pattern: AWS Secret Key

13. secret_in_diff

  • Details: Potential AWS Secret Key found in commit 9e680c0d
  • Commit: 9e680c0d
  • Pattern: AWS Secret Key

14. secret_in_diff

  • Details: Potential AWS Secret Key found in commit 17a33df6
  • Commit: 17a33df6
  • Pattern: AWS Secret Key

15. secret_in_diff

  • Details: Potential AWS Secret Key found in commit 034598a3
  • Commit: 034598a3
  • Pattern: AWS Secret Key

16. secret_in_diff

  • Details: Potential AWS Secret Key found in commit 4671811f
  • Commit: 4671811f
  • Pattern: AWS Secret Key

17. secret_in_diff

  • Details: Potential AWS Secret Key found in commit 02ed9f46
  • Commit: 02ed9f46
  • Pattern: AWS Secret Key

18. secret_in_diff

  • Details: Potential AWS Secret Key found in commit d6c910fb
  • Commit: d6c910fb
  • Pattern: AWS Secret Key

19. secret_in_diff

  • Details: Potential AWS Secret Key found in commit 0a4339fb
  • Commit: 0a4339fb
  • Pattern: AWS Secret Key

20. secret_in_diff

  • Details: Potential AWS Secret Key found in commit 8c8c0216
  • Commit: 8c8c0216
  • Pattern: AWS Secret Key

21. secret_in_diff

  • Details: Potential AWS Secret Key found in commit 43fd4d0e
  • Commit: 43fd4d0e
  • Pattern: AWS Secret Key

22. secret_in_diff

  • Details: Potential AWS Secret Key found in commit ca35a9d5
  • Commit: ca35a9d5
  • Pattern: AWS Secret Key

23. secret_in_diff

  • Details: Potential AWS Secret Key found in commit b72faca4
  • Commit: b72faca4
  • Pattern: AWS Secret Key

24. secret_in_diff

  • Details: Potential AWS Secret Key found in commit d0773b61
  • Commit: d0773b61
  • Pattern: AWS Secret Key

25. secret_in_diff

  • Details: Potential AWS Secret Key found in commit e1c96af7
  • Commit: e1c96af7
  • Pattern: AWS Secret Key

26. secret_in_diff

  • Details: Potential AWS Secret Key found in commit c42a3078
  • Commit: c42a3078
  • Pattern: AWS Secret Key

27. secret_in_diff

  • Details: Potential AWS Secret Key found in commit b724f82b
  • Commit: b724f82b
  • Pattern: AWS Secret Key

28. secret_in_diff

  • Details: Potential AWS Secret Key found in commit 965b7a58
  • Commit: 965b7a58
  • Pattern: AWS Secret Key

29. secret_in_diff

  • Details: Potential Password in URL found in commit b70adfd0
  • Commit: b70adfd0
  • Pattern: Password in URL

30. secret_in_diff

  • Details: Potential AWS Secret Key found in commit 64f3d49a
  • Commit: 64f3d49a
  • Pattern: AWS Secret Key

31. secret_in_diff

  • Details: Potential AWS Secret Key found in commit 0ed5b434
  • Commit: 0ed5b434
  • Pattern: AWS Secret Key

32. secret_in_diff

  • Details: Potential AWS Secret Key found in commit 0b984779
  • Commit: 0b984779
  • Pattern: AWS Secret Key

33. secret_in_diff

  • Details: Potential Password in URL found in commit abadcb96
  • Commit: abadcb96
  • Pattern: Password in URL

34. secret_in_diff

  • Details: Potential AWS Secret Key found in commit 021ec76d
  • Commit: 021ec76d
  • Pattern: AWS Secret Key

35. secret_in_diff

  • Details: Potential AWS Secret Key found in commit e98c22d7
  • Commit: e98c22d7
  • Pattern: AWS Secret Key

36. secret_in_diff

  • Details: Potential Password in URL found in commit bb1e6570
  • Commit: bb1e6570
  • Pattern: Password in URL

37. secret_in_diff

  • Details: Potential Password in URL found in commit abc1d379
  • Commit: abc1d379
  • Pattern: Password in URL

38. secret_in_diff

  • Details: Potential Password in URL found in commit 5b4fc21b
  • Commit: 5b4fc21b
  • Pattern: Password in URL

39. secret_in_diff

  • Details: Potential Password in URL found in commit 346e92ba
  • Commit: 346e92ba
  • Pattern: Password in URL

40. secret_in_diff

  • Details: Potential Password in URL found in commit 206fcf7b
  • Commit: 206fcf7b
  • Pattern: Password in URL

41. secret_in_diff

  • Details: Potential Password in URL found in commit 76553de5
  • Commit: 76553de5
  • Pattern: Password in URL

42. secret_in_diff

  • Details: Potential AWS Secret Key found in commit 545099f3
  • Commit: 545099f3
  • Pattern: AWS Secret Key

43. secret_in_diff

  • Details: Potential AWS Secret Key found in commit 95eeb1dd
  • Commit: 95eeb1dd
  • Pattern: AWS Secret Key

44. secret_in_diff

  • Details: Potential Password in URL found in commit 7966dcce
  • Commit: 7966dcce
  • Pattern: Password in URL

45. secret_in_diff

  • Details: Potential AWS Secret Key found in commit 837973be
  • Commit: 837973be
  • Pattern: AWS Secret Key

46. auth_flaw

  • Details: Potential security issue (exec_usage) in htmlcov/coverage_html_cb_dd2e7eb5.js
  • File: htmlcov/coverage_html_cb_dd2e7eb5.js
  • Pattern: exec_usage

47. auth_flaw

  • Details: Potential security issue (exec_usage) in backend/test_entity_investigation.py
  • File: backend/test_entity_investigation.py
  • Pattern: exec_usage

48. auth_flaw

  • Details: Potential security issue (exec_usage) in backend/app/monitoring.py
  • File: backend/app/monitoring.py
  • Pattern: exec_usage

49. auth_flaw

  • Details: Potential security issue (exec_usage) in backend/app/init_db.py
  • File: backend/app/init_db.py
  • Pattern: exec_usage

50. auth_flaw

  • Details: Potential security issue (exec_usage) in backend/app/deps.py
  • File: backend/app/deps.py
  • Pattern: exec_usage

51. auth_flaw

  • Details: Potential security issue (exec_usage) in backend/app/tasks.py
  • File: backend/app/tasks.py
  • Pattern: exec_usage

52. auth_flaw

  • Details: Potential security issue (exec_usage) in backend/app/import_seed.py
  • File: backend/app/import_seed.py
  • Pattern: exec_usage

53. auth_flaw

  • Details: Potential security issue (exec_usage) in backend/app/routers/monitoring.py
  • File: backend/app/routers/monitoring.py
  • Pattern: exec_usage

54. auth_flaw

  • Details: Potential security issue (exec_usage) in backend/app/routers/findings.py
  • File: backend/app/routers/findings.py
  • Pattern: exec_usage

55. auth_flaw

  • Details: Potential security issue (exec_usage) in backend/app/routers/leads.py
  • File: backend/app/routers/leads.py
  • Pattern: exec_usage

56. auth_flaw

  • Details: Potential security issue (exec_usage) in backend/app/routers/contacts.py
  • File: backend/app/routers/contacts.py
  • Pattern: exec_usage

57. auth_flaw

  • Details: Potential security issue (exec_usage) in backend/app/routers/orgs.py
  • File: backend/app/routers/orgs.py
  • Pattern: exec_usage

58. auth_flaw

  • Details: Potential security issue (exec_usage) in backend/app/routers/gather.py
  • File: backend/app/routers/gather.py
  • Pattern: exec_usage

59. auth_flaw

  • Details: Potential security issue (exec_usage) in backend/app/routers/entities.py
  • File: backend/app/routers/entities.py
  • Pattern: exec_usage

60. auth_flaw

  • Details: Potential security issue (exec_usage) in backend/app/routers/auth.py
  • File: backend/app/routers/auth.py
  • Pattern: exec_usage

61. auth_flaw

  • Details: Potential security issue (exec_usage) in backend/app/routers/sources.py
  • File: backend/app/routers/sources.py
  • Pattern: exec_usage

62. auth_flaw

  • Details: Potential security issue (exec_usage) in backend/app/routers/reports.py
  • File: backend/app/routers/reports.py
  • Pattern: exec_usage

63. auth_flaw

  • Details: Potential security issue (exec_usage) in backend/app/routers/cases.py
  • File: backend/app/routers/cases.py
  • Pattern: exec_usage

64. auth_flaw

  • Details: Potential security issue (exec_usage) in backend/app/routers/audit.py
  • File: backend/app/routers/audit.py
  • Pattern: exec_usage

65. auth_flaw

  • Details: Potential security issue (exec_usage) in backend/app/routers/people.py
  • File: backend/app/routers/people.py
  • Pattern: exec_usage

66. auth_flaw

  • Details: Potential security issue (exec_usage) in backend/app/routers/dashboard.py
  • File: backend/app/routers/dashboard.py
  • Pattern: exec_usage

67. auth_flaw

  • Details: Potential security issue (exec_usage) in backend/app/routers/evidence.py
  • File: backend/app/routers/evidence.py
  • Pattern: exec_usage

68. auth_flaw

  • Details: Potential security issue (exec_usage) in backend/app/routers/relationships.py
  • File: backend/app/routers/relationships.py
  • Pattern: exec_usage

69. auth_flaw

  • Details: Potential security issue (exec_usage) in backend/app/routers/users.py
  • File: backend/app/routers/users.py
  • Pattern: exec_usage

70. auth_flaw

  • Details: Potential security issue (exec_usage) in backend/app/routers/investigations.py
  • File: backend/app/routers/investigations.py
  • Pattern: exec_usage

71. auth_flaw

  • Details: Potential security issue (exec_usage) in backend/app/routers/settings.py
  • File: backend/app/routers/settings.py
  • Pattern: exec_usage

72. auth_flaw

  • Details: Potential security issue (exec_usage) in backend/app/modules/osint_playbook.py
  • File: backend/app/modules/osint_playbook.py
  • Pattern: exec_usage

73. auth_flaw

  • Details: Potential security issue (exec_usage) in backend/app/modules/search_aggregator.py
  • File: backend/app/modules/search_aggregator.py
  • Pattern: exec_usage

74. auth_flaw

  • Details: Potential security issue (exec_usage) in backend/app/modules/dashboard_summary.py
  • File: backend/app/modules/dashboard_summary.py
  • Pattern: exec_usage

75. auth_flaw

  • Details: Potential security issue (exec_usage) in backend/app/modules/local_deep_research.py
  • File: backend/app/modules/local_deep_research.py
  • Pattern: exec_usage

76. auth_flaw

  • Details: Potential security issue (exec_usage) in backend/app/services/enrichment.py
  • File: backend/app/services/enrichment.py
  • Pattern: exec_usage

77. auth_flaw

  • Details: Potential security issue (exec_usage) in backend/app/services/semantic_retrieval.py
  • File: backend/app/services/semantic_retrieval.py
  • Pattern: exec_usage

78. auth_flaw

  • Details: Potential security issue (exec_usage) in backend/app/services/investigations/entity_extraction.py
  • File: backend/app/services/investigations/entity_extraction.py
  • Pattern: exec_usage

79. auth_flaw

  • Details: Potential security issue (exec_usage) in backend/app/services/investigations/state_machine.py
  • File: backend/app/services/investigations/state_machine.py
  • Pattern: exec_usage

80. auth_flaw

  • Details: Potential security issue (exec_usage) in backend/app/services/investigations/async_executor.py
  • File: backend/app/services/investigations/async_executor.py
  • Pattern: exec_usage

81. auth_flaw

  • Details: Potential security issue (exec_usage) in backend/app/services/investigations/entity_tools.py
  • File: backend/app/services/investigations/entity_tools.py
  • Pattern: exec_usage

82. auth_flaw

  • Details: Potential security issue (exec_usage) in backend/app/services/investigations/entity_dispatcher.py
  • File: backend/app/services/investigations/entity_dispatcher.py
  • Pattern: exec_usage

83. auth_flaw

  • Details: Potential security issue (exec_usage) in backend/app/services/investigations/orchestrator_enhanced.py
  • File: backend/app/services/investigations/orchestrator_enhanced.py
  • Pattern: exec_usage

84. auth_flaw

  • Details: Potential security issue (exec_usage) in backend/app/services/investigations/llm_entity_extraction.py
  • File: backend/app/services/investigations/llm_entity_extraction.py
  • Pattern: exec_usage

85. auth_flaw

  • Details: Potential security issue (eval_usage) in backend/app/services/investigations/orchestrator_v3.py
  • File: backend/app/services/investigations/orchestrator_v3.py
  • Pattern: eval_usage

86. auth_flaw

  • Details: Potential security issue (exec_usage) in backend/app/services/investigations/queue_manager.py
  • File: backend/app/services/investigations/queue_manager.py
  • Pattern: exec_usage

87. auth_flaw

  • Details: Potential security issue (exec_usage) in backend/app/services/investigations/scheduler.py
  • File: backend/app/services/investigations/scheduler.py
  • Pattern: exec_usage

88. auth_flaw

  • Details: Potential security issue (exec_usage) in backend/app/services/investigations/orchestrator.py
  • File: backend/app/services/investigations/orchestrator.py
  • Pattern: exec_usage

89. auth_flaw

  • Details: Potential security issue (exec_usage) in backend/app/services/investigations/evidence_tracker.py
  • File: backend/app/services/investigations/evidence_tracker.py
  • Pattern: exec_usage

90. auth_flaw

  • Details: Potential security issue (exec_usage) in backend/app/services/investigations/pipeline/consolidator.py
  • File: backend/app/services/investigations/pipeline/consolidator.py
  • Pattern: exec_usage

91. auth_flaw

  • Details: Potential security issue (exec_usage) in backend/app/services/investigations/pipeline/executor.py
  • File: backend/app/services/investigations/pipeline/executor.py
  • Pattern: exec_usage

92. auth_flaw

  • Details: Potential security issue (exec_usage) in backend/app/services/investigations/pipeline/runner.py
  • File: backend/app/services/investigations/pipeline/runner.py
  • Pattern: exec_usage

93. auth_flaw

  • Details: Potential security issue (exec_usage) in backend/htmlcov/coverage_html_cb_dd2e7eb5.js
  • File: backend/htmlcov/coverage_html_cb_dd2e7eb5.js
  • Pattern: exec_usage

94. auth_flaw

  • Details: Potential security issue (exec_usage) in backend/tests/live_orchestrator_test.py
  • File: backend/tests/live_orchestrator_test.py
  • Pattern: exec_usage

95. auth_flaw

  • Details: Potential security issue (exec_usage) in backend/tests/test_investigation_entity_tools.py
  • File: backend/tests/test_investigation_entity_tools.py
  • Pattern: exec_usage

96. auth_flaw

  • Details: Potential security issue (exec_usage) in backend/tests/test_parse_evidence_api.py
  • File: backend/tests/test_parse_evidence_api.py
  • Pattern: exec_usage

97. auth_flaw

  • Details: Potential security issue (exec_usage) in backend/tests/performance/test_db_performance.py
  • File: backend/tests/performance/test_db_performance.py
  • Pattern: exec_usage

98. auth_flaw

  • Details: Potential security issue (exec_usage) in backend/tests/integration/test_integration_module_flow.py
  • File: backend/tests/integration/test_integration_module_flow.py
  • Pattern: exec_usage

99. auth_flaw

  • Details: Potential security issue (exec_usage) in backend/tests/integration/test_integration_concurrent.py
  • File: backend/tests/integration/test_integration_concurrent.py
  • Pattern: exec_usage

100. auth_flaw

  • Details: Potential security issue (exec_usage) in backend/tests/integration/test_integration_workflow.py
  • File: backend/tests/integration/test_integration_workflow.py
  • Pattern: exec_usage

101. auth_flaw

  • Details: Potential security issue (exec_usage) in backend/tests/integration/test_integration_resilience.py
  • File: backend/tests/integration/test_integration_resilience.py
  • Pattern: exec_usage

102. auth_flaw

  • Details: Potential security issue (exec_usage) in backend/tests/integration/test_api_cases.py
  • File: backend/tests/integration/test_api_cases.py
  • Pattern: exec_usage

103. auth_flaw

  • Details: Potential security issue (exec_usage) in backend/tests/integration/test_modules_integration.py
  • File: backend/tests/integration/test_modules_integration.py
  • Pattern: exec_usage

104. auth_flaw

  • Details: Potential security issue (exec_usage) in backend/tests/integration/test_api_reports.py
  • File: backend/tests/integration/test_api_reports.py
  • Pattern: exec_usage

105. auth_flaw

  • Details: Potential security issue (exec_usage) in backend/tests/integration/test_api_auth.py
  • File: backend/tests/integration/test_api_auth.py
  • Pattern: exec_usage

106. auth_flaw

  • Details: Potential security issue (exec_usage) in backend/tests/unit/test_evidence_review.py
  • File: backend/tests/unit/test_evidence_review.py
  • Pattern: exec_usage

107. auth_flaw

  • Details: Potential security issue (exec_usage) in backend/tests/unit/test_stress_full_pipeline.py
  • File: backend/tests/unit/test_stress_full_pipeline.py
  • Pattern: exec_usage

108. auth_flaw

  • Details: Potential security issue (exec_usage) in backend/tests/unit/test_auto_gather_consolidation.py
  • File: backend/tests/unit/test_auto_gather_consolidation.py
  • Pattern: exec_usage

109. auth_flaw

  • Details: Potential security issue (exec_usage) in backend/tests/unit/test_module_benchmarks.py
  • File: backend/tests/unit/test_module_benchmarks.py
  • Pattern: exec_usage

110. auth_flaw

  • Details: Potential security issue (exec_usage) in backend/tests/unit/test_structured_golden_determinism.py
  • File: backend/tests/unit/test_structured_golden_determinism.py
  • Pattern: exec_usage

111. auth_flaw

  • Details: Potential security issue (exec_usage) in backend/tests/unit/test_llm_extraction_quality.py
  • File: backend/tests/unit/test_llm_extraction_quality.py
  • Pattern: exec_usage

This issue was auto-generated by the security sweep cron job.

## Security Scan Results for `osint_hub` **Severity:** HIGH **Findings:** 111 ### 1. secret_in_diff - **Details:** Potential Password in URL found in commit ecfce79d - **Commit:** `ecfce79d` - **Pattern:** `Password in URL` ### 2. secret_in_diff - **Details:** Potential AWS Secret Key found in commit 2f0f0d2d - **Commit:** `2f0f0d2d` - **Pattern:** `AWS Secret Key` ### 3. secret_in_diff - **Details:** Potential Password in URL found in commit d88891bd - **Commit:** `d88891bd` - **Pattern:** `Password in URL` ### 4. secret_in_diff - **Details:** Potential AWS Secret Key found in commit a9a3bd39 - **Commit:** `a9a3bd39` - **Pattern:** `AWS Secret Key` ### 5. secret_in_diff - **Details:** Potential AWS Secret Key found in commit 327f39d9 - **Commit:** `327f39d9` - **Pattern:** `AWS Secret Key` ### 6. secret_in_diff - **Details:** Potential AWS Secret Key found in commit 54dac6ec - **Commit:** `54dac6ec` - **Pattern:** `AWS Secret Key` ### 7. secret_in_diff - **Details:** Potential AWS Secret Key found in commit b652b46b - **Commit:** `b652b46b` - **Pattern:** `AWS Secret Key` ### 8. secret_in_diff - **Details:** Potential AWS Secret Key found in commit 00040f8c - **Commit:** `00040f8c` - **Pattern:** `AWS Secret Key` ### 9. secret_in_diff - **Details:** Potential AWS Secret Key found in commit c8dcbed8 - **Commit:** `c8dcbed8` - **Pattern:** `AWS Secret Key` ### 10. secret_in_diff - **Details:** Potential Password in URL found in commit 5a8b3655 - **Commit:** `5a8b3655` - **Pattern:** `Password in URL` ### 11. secret_in_diff - **Details:** Potential Password in URL found in commit ca918477 - **Commit:** `ca918477` - **Pattern:** `Password in URL` ### 12. secret_in_diff - **Details:** Potential AWS Secret Key found in commit 9948d8cf - **Commit:** `9948d8cf` - **Pattern:** `AWS Secret Key` ### 13. secret_in_diff - **Details:** Potential AWS Secret Key found in commit 9e680c0d - **Commit:** `9e680c0d` - **Pattern:** `AWS Secret Key` ### 14. secret_in_diff - **Details:** Potential AWS Secret Key found in commit 17a33df6 - **Commit:** `17a33df6` - **Pattern:** `AWS Secret Key` ### 15. secret_in_diff - **Details:** Potential AWS Secret Key found in commit 034598a3 - **Commit:** `034598a3` - **Pattern:** `AWS Secret Key` ### 16. secret_in_diff - **Details:** Potential AWS Secret Key found in commit 4671811f - **Commit:** `4671811f` - **Pattern:** `AWS Secret Key` ### 17. secret_in_diff - **Details:** Potential AWS Secret Key found in commit 02ed9f46 - **Commit:** `02ed9f46` - **Pattern:** `AWS Secret Key` ### 18. secret_in_diff - **Details:** Potential AWS Secret Key found in commit d6c910fb - **Commit:** `d6c910fb` - **Pattern:** `AWS Secret Key` ### 19. secret_in_diff - **Details:** Potential AWS Secret Key found in commit 0a4339fb - **Commit:** `0a4339fb` - **Pattern:** `AWS Secret Key` ### 20. secret_in_diff - **Details:** Potential AWS Secret Key found in commit 8c8c0216 - **Commit:** `8c8c0216` - **Pattern:** `AWS Secret Key` ### 21. secret_in_diff - **Details:** Potential AWS Secret Key found in commit 43fd4d0e - **Commit:** `43fd4d0e` - **Pattern:** `AWS Secret Key` ### 22. secret_in_diff - **Details:** Potential AWS Secret Key found in commit ca35a9d5 - **Commit:** `ca35a9d5` - **Pattern:** `AWS Secret Key` ### 23. secret_in_diff - **Details:** Potential AWS Secret Key found in commit b72faca4 - **Commit:** `b72faca4` - **Pattern:** `AWS Secret Key` ### 24. secret_in_diff - **Details:** Potential AWS Secret Key found in commit d0773b61 - **Commit:** `d0773b61` - **Pattern:** `AWS Secret Key` ### 25. secret_in_diff - **Details:** Potential AWS Secret Key found in commit e1c96af7 - **Commit:** `e1c96af7` - **Pattern:** `AWS Secret Key` ### 26. secret_in_diff - **Details:** Potential AWS Secret Key found in commit c42a3078 - **Commit:** `c42a3078` - **Pattern:** `AWS Secret Key` ### 27. secret_in_diff - **Details:** Potential AWS Secret Key found in commit b724f82b - **Commit:** `b724f82b` - **Pattern:** `AWS Secret Key` ### 28. secret_in_diff - **Details:** Potential AWS Secret Key found in commit 965b7a58 - **Commit:** `965b7a58` - **Pattern:** `AWS Secret Key` ### 29. secret_in_diff - **Details:** Potential Password in URL found in commit b70adfd0 - **Commit:** `b70adfd0` - **Pattern:** `Password in URL` ### 30. secret_in_diff - **Details:** Potential AWS Secret Key found in commit 64f3d49a - **Commit:** `64f3d49a` - **Pattern:** `AWS Secret Key` ### 31. secret_in_diff - **Details:** Potential AWS Secret Key found in commit 0ed5b434 - **Commit:** `0ed5b434` - **Pattern:** `AWS Secret Key` ### 32. secret_in_diff - **Details:** Potential AWS Secret Key found in commit 0b984779 - **Commit:** `0b984779` - **Pattern:** `AWS Secret Key` ### 33. secret_in_diff - **Details:** Potential Password in URL found in commit abadcb96 - **Commit:** `abadcb96` - **Pattern:** `Password in URL` ### 34. secret_in_diff - **Details:** Potential AWS Secret Key found in commit 021ec76d - **Commit:** `021ec76d` - **Pattern:** `AWS Secret Key` ### 35. secret_in_diff - **Details:** Potential AWS Secret Key found in commit e98c22d7 - **Commit:** `e98c22d7` - **Pattern:** `AWS Secret Key` ### 36. secret_in_diff - **Details:** Potential Password in URL found in commit bb1e6570 - **Commit:** `bb1e6570` - **Pattern:** `Password in URL` ### 37. secret_in_diff - **Details:** Potential Password in URL found in commit abc1d379 - **Commit:** `abc1d379` - **Pattern:** `Password in URL` ### 38. secret_in_diff - **Details:** Potential Password in URL found in commit 5b4fc21b - **Commit:** `5b4fc21b` - **Pattern:** `Password in URL` ### 39. secret_in_diff - **Details:** Potential Password in URL found in commit 346e92ba - **Commit:** `346e92ba` - **Pattern:** `Password in URL` ### 40. secret_in_diff - **Details:** Potential Password in URL found in commit 206fcf7b - **Commit:** `206fcf7b` - **Pattern:** `Password in URL` ### 41. secret_in_diff - **Details:** Potential Password in URL found in commit 76553de5 - **Commit:** `76553de5` - **Pattern:** `Password in URL` ### 42. secret_in_diff - **Details:** Potential AWS Secret Key found in commit 545099f3 - **Commit:** `545099f3` - **Pattern:** `AWS Secret Key` ### 43. secret_in_diff - **Details:** Potential AWS Secret Key found in commit 95eeb1dd - **Commit:** `95eeb1dd` - **Pattern:** `AWS Secret Key` ### 44. secret_in_diff - **Details:** Potential Password in URL found in commit 7966dcce - **Commit:** `7966dcce` - **Pattern:** `Password in URL` ### 45. secret_in_diff - **Details:** Potential AWS Secret Key found in commit 837973be - **Commit:** `837973be` - **Pattern:** `AWS Secret Key` ### 46. auth_flaw - **Details:** Potential security issue (exec_usage) in htmlcov/coverage_html_cb_dd2e7eb5.js - **File:** `htmlcov/coverage_html_cb_dd2e7eb5.js` - **Pattern:** `exec_usage` ### 47. auth_flaw - **Details:** Potential security issue (exec_usage) in backend/test_entity_investigation.py - **File:** `backend/test_entity_investigation.py` - **Pattern:** `exec_usage` ### 48. auth_flaw - **Details:** Potential security issue (exec_usage) in backend/app/monitoring.py - **File:** `backend/app/monitoring.py` - **Pattern:** `exec_usage` ### 49. auth_flaw - **Details:** Potential security issue (exec_usage) in backend/app/init_db.py - **File:** `backend/app/init_db.py` - **Pattern:** `exec_usage` ### 50. auth_flaw - **Details:** Potential security issue (exec_usage) in backend/app/deps.py - **File:** `backend/app/deps.py` - **Pattern:** `exec_usage` ### 51. auth_flaw - **Details:** Potential security issue (exec_usage) in backend/app/tasks.py - **File:** `backend/app/tasks.py` - **Pattern:** `exec_usage` ### 52. auth_flaw - **Details:** Potential security issue (exec_usage) in backend/app/import_seed.py - **File:** `backend/app/import_seed.py` - **Pattern:** `exec_usage` ### 53. auth_flaw - **Details:** Potential security issue (exec_usage) in backend/app/routers/monitoring.py - **File:** `backend/app/routers/monitoring.py` - **Pattern:** `exec_usage` ### 54. auth_flaw - **Details:** Potential security issue (exec_usage) in backend/app/routers/findings.py - **File:** `backend/app/routers/findings.py` - **Pattern:** `exec_usage` ### 55. auth_flaw - **Details:** Potential security issue (exec_usage) in backend/app/routers/leads.py - **File:** `backend/app/routers/leads.py` - **Pattern:** `exec_usage` ### 56. auth_flaw - **Details:** Potential security issue (exec_usage) in backend/app/routers/contacts.py - **File:** `backend/app/routers/contacts.py` - **Pattern:** `exec_usage` ### 57. auth_flaw - **Details:** Potential security issue (exec_usage) in backend/app/routers/orgs.py - **File:** `backend/app/routers/orgs.py` - **Pattern:** `exec_usage` ### 58. auth_flaw - **Details:** Potential security issue (exec_usage) in backend/app/routers/gather.py - **File:** `backend/app/routers/gather.py` - **Pattern:** `exec_usage` ### 59. auth_flaw - **Details:** Potential security issue (exec_usage) in backend/app/routers/entities.py - **File:** `backend/app/routers/entities.py` - **Pattern:** `exec_usage` ### 60. auth_flaw - **Details:** Potential security issue (exec_usage) in backend/app/routers/auth.py - **File:** `backend/app/routers/auth.py` - **Pattern:** `exec_usage` ### 61. auth_flaw - **Details:** Potential security issue (exec_usage) in backend/app/routers/sources.py - **File:** `backend/app/routers/sources.py` - **Pattern:** `exec_usage` ### 62. auth_flaw - **Details:** Potential security issue (exec_usage) in backend/app/routers/reports.py - **File:** `backend/app/routers/reports.py` - **Pattern:** `exec_usage` ### 63. auth_flaw - **Details:** Potential security issue (exec_usage) in backend/app/routers/cases.py - **File:** `backend/app/routers/cases.py` - **Pattern:** `exec_usage` ### 64. auth_flaw - **Details:** Potential security issue (exec_usage) in backend/app/routers/audit.py - **File:** `backend/app/routers/audit.py` - **Pattern:** `exec_usage` ### 65. auth_flaw - **Details:** Potential security issue (exec_usage) in backend/app/routers/people.py - **File:** `backend/app/routers/people.py` - **Pattern:** `exec_usage` ### 66. auth_flaw - **Details:** Potential security issue (exec_usage) in backend/app/routers/dashboard.py - **File:** `backend/app/routers/dashboard.py` - **Pattern:** `exec_usage` ### 67. auth_flaw - **Details:** Potential security issue (exec_usage) in backend/app/routers/evidence.py - **File:** `backend/app/routers/evidence.py` - **Pattern:** `exec_usage` ### 68. auth_flaw - **Details:** Potential security issue (exec_usage) in backend/app/routers/relationships.py - **File:** `backend/app/routers/relationships.py` - **Pattern:** `exec_usage` ### 69. auth_flaw - **Details:** Potential security issue (exec_usage) in backend/app/routers/users.py - **File:** `backend/app/routers/users.py` - **Pattern:** `exec_usage` ### 70. auth_flaw - **Details:** Potential security issue (exec_usage) in backend/app/routers/investigations.py - **File:** `backend/app/routers/investigations.py` - **Pattern:** `exec_usage` ### 71. auth_flaw - **Details:** Potential security issue (exec_usage) in backend/app/routers/settings.py - **File:** `backend/app/routers/settings.py` - **Pattern:** `exec_usage` ### 72. auth_flaw - **Details:** Potential security issue (exec_usage) in backend/app/modules/osint_playbook.py - **File:** `backend/app/modules/osint_playbook.py` - **Pattern:** `exec_usage` ### 73. auth_flaw - **Details:** Potential security issue (exec_usage) in backend/app/modules/search_aggregator.py - **File:** `backend/app/modules/search_aggregator.py` - **Pattern:** `exec_usage` ### 74. auth_flaw - **Details:** Potential security issue (exec_usage) in backend/app/modules/dashboard_summary.py - **File:** `backend/app/modules/dashboard_summary.py` - **Pattern:** `exec_usage` ### 75. auth_flaw - **Details:** Potential security issue (exec_usage) in backend/app/modules/local_deep_research.py - **File:** `backend/app/modules/local_deep_research.py` - **Pattern:** `exec_usage` ### 76. auth_flaw - **Details:** Potential security issue (exec_usage) in backend/app/services/enrichment.py - **File:** `backend/app/services/enrichment.py` - **Pattern:** `exec_usage` ### 77. auth_flaw - **Details:** Potential security issue (exec_usage) in backend/app/services/semantic_retrieval.py - **File:** `backend/app/services/semantic_retrieval.py` - **Pattern:** `exec_usage` ### 78. auth_flaw - **Details:** Potential security issue (exec_usage) in backend/app/services/investigations/entity_extraction.py - **File:** `backend/app/services/investigations/entity_extraction.py` - **Pattern:** `exec_usage` ### 79. auth_flaw - **Details:** Potential security issue (exec_usage) in backend/app/services/investigations/state_machine.py - **File:** `backend/app/services/investigations/state_machine.py` - **Pattern:** `exec_usage` ### 80. auth_flaw - **Details:** Potential security issue (exec_usage) in backend/app/services/investigations/async_executor.py - **File:** `backend/app/services/investigations/async_executor.py` - **Pattern:** `exec_usage` ### 81. auth_flaw - **Details:** Potential security issue (exec_usage) in backend/app/services/investigations/entity_tools.py - **File:** `backend/app/services/investigations/entity_tools.py` - **Pattern:** `exec_usage` ### 82. auth_flaw - **Details:** Potential security issue (exec_usage) in backend/app/services/investigations/entity_dispatcher.py - **File:** `backend/app/services/investigations/entity_dispatcher.py` - **Pattern:** `exec_usage` ### 83. auth_flaw - **Details:** Potential security issue (exec_usage) in backend/app/services/investigations/orchestrator_enhanced.py - **File:** `backend/app/services/investigations/orchestrator_enhanced.py` - **Pattern:** `exec_usage` ### 84. auth_flaw - **Details:** Potential security issue (exec_usage) in backend/app/services/investigations/llm_entity_extraction.py - **File:** `backend/app/services/investigations/llm_entity_extraction.py` - **Pattern:** `exec_usage` ### 85. auth_flaw - **Details:** Potential security issue (eval_usage) in backend/app/services/investigations/orchestrator_v3.py - **File:** `backend/app/services/investigations/orchestrator_v3.py` - **Pattern:** `eval_usage` ### 86. auth_flaw - **Details:** Potential security issue (exec_usage) in backend/app/services/investigations/queue_manager.py - **File:** `backend/app/services/investigations/queue_manager.py` - **Pattern:** `exec_usage` ### 87. auth_flaw - **Details:** Potential security issue (exec_usage) in backend/app/services/investigations/scheduler.py - **File:** `backend/app/services/investigations/scheduler.py` - **Pattern:** `exec_usage` ### 88. auth_flaw - **Details:** Potential security issue (exec_usage) in backend/app/services/investigations/orchestrator.py - **File:** `backend/app/services/investigations/orchestrator.py` - **Pattern:** `exec_usage` ### 89. auth_flaw - **Details:** Potential security issue (exec_usage) in backend/app/services/investigations/evidence_tracker.py - **File:** `backend/app/services/investigations/evidence_tracker.py` - **Pattern:** `exec_usage` ### 90. auth_flaw - **Details:** Potential security issue (exec_usage) in backend/app/services/investigations/pipeline/consolidator.py - **File:** `backend/app/services/investigations/pipeline/consolidator.py` - **Pattern:** `exec_usage` ### 91. auth_flaw - **Details:** Potential security issue (exec_usage) in backend/app/services/investigations/pipeline/executor.py - **File:** `backend/app/services/investigations/pipeline/executor.py` - **Pattern:** `exec_usage` ### 92. auth_flaw - **Details:** Potential security issue (exec_usage) in backend/app/services/investigations/pipeline/runner.py - **File:** `backend/app/services/investigations/pipeline/runner.py` - **Pattern:** `exec_usage` ### 93. auth_flaw - **Details:** Potential security issue (exec_usage) in backend/htmlcov/coverage_html_cb_dd2e7eb5.js - **File:** `backend/htmlcov/coverage_html_cb_dd2e7eb5.js` - **Pattern:** `exec_usage` ### 94. auth_flaw - **Details:** Potential security issue (exec_usage) in backend/tests/live_orchestrator_test.py - **File:** `backend/tests/live_orchestrator_test.py` - **Pattern:** `exec_usage` ### 95. auth_flaw - **Details:** Potential security issue (exec_usage) in backend/tests/test_investigation_entity_tools.py - **File:** `backend/tests/test_investigation_entity_tools.py` - **Pattern:** `exec_usage` ### 96. auth_flaw - **Details:** Potential security issue (exec_usage) in backend/tests/test_parse_evidence_api.py - **File:** `backend/tests/test_parse_evidence_api.py` - **Pattern:** `exec_usage` ### 97. auth_flaw - **Details:** Potential security issue (exec_usage) in backend/tests/performance/test_db_performance.py - **File:** `backend/tests/performance/test_db_performance.py` - **Pattern:** `exec_usage` ### 98. auth_flaw - **Details:** Potential security issue (exec_usage) in backend/tests/integration/test_integration_module_flow.py - **File:** `backend/tests/integration/test_integration_module_flow.py` - **Pattern:** `exec_usage` ### 99. auth_flaw - **Details:** Potential security issue (exec_usage) in backend/tests/integration/test_integration_concurrent.py - **File:** `backend/tests/integration/test_integration_concurrent.py` - **Pattern:** `exec_usage` ### 100. auth_flaw - **Details:** Potential security issue (exec_usage) in backend/tests/integration/test_integration_workflow.py - **File:** `backend/tests/integration/test_integration_workflow.py` - **Pattern:** `exec_usage` ### 101. auth_flaw - **Details:** Potential security issue (exec_usage) in backend/tests/integration/test_integration_resilience.py - **File:** `backend/tests/integration/test_integration_resilience.py` - **Pattern:** `exec_usage` ### 102. auth_flaw - **Details:** Potential security issue (exec_usage) in backend/tests/integration/test_api_cases.py - **File:** `backend/tests/integration/test_api_cases.py` - **Pattern:** `exec_usage` ### 103. auth_flaw - **Details:** Potential security issue (exec_usage) in backend/tests/integration/test_modules_integration.py - **File:** `backend/tests/integration/test_modules_integration.py` - **Pattern:** `exec_usage` ### 104. auth_flaw - **Details:** Potential security issue (exec_usage) in backend/tests/integration/test_api_reports.py - **File:** `backend/tests/integration/test_api_reports.py` - **Pattern:** `exec_usage` ### 105. auth_flaw - **Details:** Potential security issue (exec_usage) in backend/tests/integration/test_api_auth.py - **File:** `backend/tests/integration/test_api_auth.py` - **Pattern:** `exec_usage` ### 106. auth_flaw - **Details:** Potential security issue (exec_usage) in backend/tests/unit/test_evidence_review.py - **File:** `backend/tests/unit/test_evidence_review.py` - **Pattern:** `exec_usage` ### 107. auth_flaw - **Details:** Potential security issue (exec_usage) in backend/tests/unit/test_stress_full_pipeline.py - **File:** `backend/tests/unit/test_stress_full_pipeline.py` - **Pattern:** `exec_usage` ### 108. auth_flaw - **Details:** Potential security issue (exec_usage) in backend/tests/unit/test_auto_gather_consolidation.py - **File:** `backend/tests/unit/test_auto_gather_consolidation.py` - **Pattern:** `exec_usage` ### 109. auth_flaw - **Details:** Potential security issue (exec_usage) in backend/tests/unit/test_module_benchmarks.py - **File:** `backend/tests/unit/test_module_benchmarks.py` - **Pattern:** `exec_usage` ### 110. auth_flaw - **Details:** Potential security issue (exec_usage) in backend/tests/unit/test_structured_golden_determinism.py - **File:** `backend/tests/unit/test_structured_golden_determinism.py` - **Pattern:** `exec_usage` ### 111. auth_flaw - **Details:** Potential security issue (exec_usage) in backend/tests/unit/test_llm_extraction_quality.py - **File:** `backend/tests/unit/test_llm_extraction_quality.py` - **Pattern:** `exec_usage` --- *This issue was auto-generated by the security sweep cron job.*
Mark commented 2026-05-19 13:55:20 +00:00
Author
Owner
Copy link

Closing as noise. The security scanner generates false positives from package-lock.json integrity hashes, stale dist/ artifacts, and transitive npm vulns. Issue filed on hermes-scripts#29 to fix the scanner.

Closing as noise. The security scanner generates false positives from package-lock.json integrity hashes, stale dist/ artifacts, and transitive npm vulns. Issue filed on hermes-scripts#29 to fix the scanner.
Mark closed this issue 2026-05-19 13:55:20 +00:00
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
main
No results found.
Labels
Clear labels   
agentic-osint

Agentic OSINT features

  
audit

   
blocked:commit-ready-failed

   
blocked:gate-fetch

   
blocked:gate-fetch

   
blocked:gate-lint

   
blocked:gate-plan

   
blocked:gate-research

   
blocked:needs-decision

   
blocked:needs-human

   
blocked:no-changes

   
blocked:preflight

Repo has dirty lint; kilo-gsd preflight refuses to dispatch until lint-cleanup lands

  
blocked:verify-failed

   
bug

Something is not working

  
chore

Config/cleanup item

  
deferred

Deferred — will revisit later

  
enhancement

Enhancement request

  
feature-request

   
in-progress

   
lint-baseline

   
lint-cleanup

kilo-gsd preflight lint gate: repo has dirty ruff state, cleanup required before fixer dispatch

  
needs-decompose

Issue needs decompose processing

  
needs-triage

   
performance

   
quickfix

   
security/medium

Medium severity security issue

  
triage-approved

Approved by triage

No labels
agentic-osint
audit
blocked:commit-ready-failed
blocked:gate-fetch
blocked:gate-fetch
blocked:gate-lint
blocked:gate-plan
blocked:gate-research
blocked:needs-decision
blocked:needs-human
blocked:no-changes
blocked:preflight
blocked:verify-failed
bug
chore
deferred
enhancement
feature-request
in-progress
lint-baseline
lint-cleanup
needs-decompose
needs-triage
performance
quickfix
security/medium
triage-approved
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
Mark/osint-hub#59
No description provided.