{
  "repositoryName": "local-upload/ShiftOps-master",
  "overallScore": 55,
  "scanDate": "2026-07-17T17:27:05.543Z",
  "totalTests": 6,
  "summary": {
    "passed": 1,
    "warnings": 2,
    "failed": 3,
    "errors": 0
  },
  "results": [
    {
      "testSuiteId": "sast",
      "status": "FAIL",
      "message": "semgrep reported SAST findings.",
      "severity": "critical",
      "details": {
        "tool": "semgrep",
        "output": "spawn EINVAL"
      },
      "executionTime": 1,
      "testName": "Suite 4 - SAST",
      "sectionName": "Security"
    },
    {
      "testSuiteId": "secret-detection",
      "status": "FAIL",
      "message": "gitleaks reported potential secrets.",
      "severity": "critical",
      "details": {
        "tool": "gitleaks",
        "output": "spawn EINVAL"
      },
      "executionTime": 1,
      "testName": "Suite 5 - Secret Detection",
      "sectionName": "Security"
    },
    {
      "testSuiteId": "dependency-security",
      "status": "FAIL",
      "message": "Dependency audit reported vulnerable packages.",
      "severity": "critical",
      "details": {
        "tool": "pnpm audit",
        "output": "spawn EINVAL"
      },
      "executionTime": 1,
      "testName": "Suite 6 - Dependency Security",
      "sectionName": "Security"
    },
    {
      "testSuiteId": "web-application-security",
      "status": "WARN",
      "message": "OWASP ZAP is installed, but no authorized target URL was provided for DAST.",
      "severity": "medium",
      "executionTime": 1,
      "testName": "Suite 7 - Web Application Security",
      "sectionName": "Security"
    },
    {
      "testSuiteId": "api-security",
      "status": "PASS",
      "message": "API security rules found core validation and authorization signals.",
      "severity": "medium",
      "details": {
        "missing": [
          "hasObjectAuthorization"
        ],
        "hasGraphql": true,
        "openApiFiles": [],
        "scannedFiles": 26,
        "hasJwtValidation": true,
        "hasInputValidation": true,
        "hasObjectAuthorization": false
      },
      "executionTime": 19,
      "testName": "Suite 8 - API Security",
      "sectionName": "Security"
    },
    {
      "testSuiteId": "git-history-secrets",
      "status": "WARN",
      "message": "No .git directory found, so historical secret scanning could not run.",
      "severity": "medium",
      "executionTime": 0,
      "testName": "Suite 9 - Secrets in Git History",
      "sectionName": "Security"
    }
  ]
}