{
  "repositoryName": "achieveradarsh/vedha",
  "overallScore": 69,
  "scanDate": "2026-07-30T16:04:55.948Z",
  "totalTests": 18,
  "summary": {
    "passed": 1,
    "warnings": 16,
    "failed": 1,
    "errors": 0
  },
  "results": [
    {
      "testSuiteId": "build-verification",
      "status": "WARN",
      "message": "No supported build manifest found for npm, Maven, Gradle, Cargo, dotnet, or Go.",
      "severity": "low",
      "executionTime": 0,
      "testName": "Suite 1 - Build Verification",
      "sectionName": "Quality"
    },
    {
      "testSuiteId": "static-code-quality",
      "status": "WARN",
      "message": "No ESLint lint script or global ESLint tool was available.",
      "severity": "medium",
      "details": {
        "staticScan": {
          "scannedFiles": 0,
          "codeSmellCount": 0,
          "unsafeAnyCount": 0,
          "duplicatedSymbolCount": 0
        }
      },
      "executionTime": 6,
      "testName": "Suite 2 - Static Code Quality",
      "sectionName": "Quality"
    },
    {
      "testSuiteId": "testing",
      "status": "WARN",
      "message": "No runnable test script was found for Jest, Vitest, Playwright, Cypress, or coverage.",
      "severity": "medium",
      "details": {
        "availableScripts": []
      },
      "executionTime": 0,
      "testName": "Suite 3 - Testing",
      "sectionName": "Quality"
    },
    {
      "testSuiteId": "sast",
      "status": "PASS",
      "message": "Fallback SAST scan did not find known risky patterns.",
      "severity": "medium",
      "details": {
        "findings": [
          {
            "name": "Unsafe eval",
            "count": 0,
            "severity": "high"
          },
          {
            "name": "Command execution",
            "count": 0,
            "severity": "high"
          },
          {
            "name": "SQL string construction",
            "count": 0,
            "severity": "high"
          },
          {
            "name": "Weak crypto",
            "count": 0,
            "severity": "medium"
          },
          {
            "name": "Prototype pollution sink",
            "count": 0,
            "severity": "medium"
          },
          {
            "name": "Path traversal risk",
            "count": 0,
            "severity": "medium"
          }
        ],
        "scannedFiles": 1
      },
      "executionTime": 6,
      "testName": "Suite 4 - SAST",
      "sectionName": "Security"
    },
    {
      "testSuiteId": "secret-detection",
      "status": "FAIL",
      "message": "Fallback secret scan found potential secrets or exposed environment files.",
      "severity": "critical",
      "details": {
        "envFiles": [],
        "findings": [
          {
            "name": "AWS access key",
            "count": 0
          },
          {
            "name": "OpenAI key",
            "count": 0
          },
          {
            "name": "Private key",
            "count": 0
          },
          {
            "name": "JWT",
            "count": 0
          },
          {
            "name": "Generic secret assignment",
            "count": 1
          }
        ],
        "scannedFiles": 3,
        "includeGitHistory": false
      },
      "executionTime": 6,
      "testName": "Suite 5 - Secret Detection",
      "sectionName": "Security"
    },
    {
      "testSuiteId": "dependency-security",
      "status": "WARN",
      "message": "No dependency security scanner or supported dependency manifest was available.",
      "severity": "medium",
      "executionTime": 7,
      "testName": "Suite 6 - Dependency Security",
      "sectionName": "Security"
    },
    {
      "testSuiteId": "web-application-security",
      "status": "WARN",
      "message": "Custom web security rules found missing or undiscovered controls.",
      "severity": "medium",
      "details": {
        "hasCsp": false,
        "missing": [
          "hasCsp",
          "hasCorsConfig",
          "hasCsrfToken",
          "hasRateLimit",
          "hasSecureCookie",
          "hasAuthzChecks"
        ],
        "hasCsrfToken": false,
        "hasRateLimit": false,
        "scannedFiles": 1,
        "hasCorsConfig": false,
        "hasAuthzChecks": false,
        "hasSecureCookie": false
      },
      "executionTime": 3,
      "testName": "Suite 7 - Web Application Security",
      "sectionName": "Security"
    },
    {
      "testSuiteId": "api-security",
      "status": "WARN",
      "message": "API security rules found missing or undiscovered JWT, authorization, or validation controls.",
      "severity": "medium",
      "details": {
        "missing": [
          "hasJwtValidation",
          "hasObjectAuthorization",
          "hasInputValidation",
          "hasGraphql"
        ],
        "hasGraphql": false,
        "openApiFiles": [],
        "scannedFiles": 1,
        "hasJwtValidation": false,
        "hasInputValidation": false,
        "hasObjectAuthorization": false
      },
      "executionTime": 1,
      "testName": "Suite 8 - API Security",
      "sectionName": "Security"
    },
    {
      "testSuiteId": "git-history-secrets",
      "status": "WARN",
      "message": "No .git directory found, so historical secret scanning could not run.",
      "severity": "medium",
      "executionTime": 0,
      "testName": "Suite 9 - Secrets in Git History",
      "sectionName": "Security"
    },
    {
      "testSuiteId": "container-security",
      "status": "WARN",
      "message": "No Dockerfile was found, so container security checks could not run.",
      "severity": "low",
      "details": {
        "dockerfiles": []
      },
      "executionTime": 0,
      "testName": "Suite 10 - Container Security",
      "sectionName": "Infrastructure"
    },
    {
      "testSuiteId": "infrastructure-as-code",
      "status": "WARN",
      "message": "No Terraform, Kubernetes, Helm, or Docker Compose files were found.",
      "severity": "low",
      "executionTime": 1,
      "testName": "Suite 11 - Infrastructure as Code",
      "sectionName": "Infrastructure"
    },
    {
      "testSuiteId": "ci-cd-security",
      "status": "WARN",
      "message": "No GitHub Actions, Azure DevOps, Jenkins, or GitLab CI definitions were found.",
      "severity": "low",
      "executionTime": 0,
      "testName": "Suite 12 - CI/CD Security",
      "sectionName": "Infrastructure"
    },
    {
      "testSuiteId": "network-readiness",
      "status": "WARN",
      "message": "No network configuration files or authorized runtime target were provided.",
      "severity": "low",
      "details": {
        "note": "Runtime Nmap or SSL analysis requires an explicit authorized target.",
        "weakTls": false,
        "openPorts": [],
        "hasDnsConfig": false,
        "scannedFiles": [],
        "publicExposure": false,
        "hasReverseProxy": false,
        "hasCertificateFiles": false
      },
      "executionTime": 1,
      "testName": "Suite 13 - Network Readiness",
      "sectionName": "Infrastructure"
    },
    {
      "testSuiteId": "repository-architecture",
      "status": "WARN",
      "message": "Architecture scan found folder-structure or layer-boundary risks.",
      "severity": "medium",
      "details": {
        "dddSignals": [],
        "scannedFiles": 1,
        "topLevelDirs": [
          "procfile"
        ],
        "layerViolations": [],
        "microserviceSignals": [],
        "cleanArchitectureSignals": []
      },
      "executionTime": 1,
      "testName": "Suite 14 - Repository Architecture",
      "sectionName": "Architecture"
    },
    {
      "testSuiteId": "frontend-security",
      "status": "WARN",
      "message": "Frontend scan found CSP, source map, backend URL, or debug endpoint gaps.",
      "severity": "medium",
      "details": {
        "hasCsp": false,
        "envFiles": [],
        "backendUrls": 0,
        "scannedFiles": 0,
        "debugEndpoints": 0,
        "exposedEnvFiles": [],
        "dangerousDomApis": 0,
        "publicSecretNames": 0,
        "sourceMapsEnabled": false
      },
      "executionTime": 0,
      "testName": "Suite 15 - Frontend Security",
      "sectionName": "Architecture"
    },
    {
      "testSuiteId": "backend-security",
      "status": "WARN",
      "message": "Backend scan found missing or undiscovered security controls.",
      "severity": "medium",
      "details": {
        "missing": [
          "hasMiddleware",
          "hasValidation",
          "hasAuthentication",
          "hasAuthorization",
          "hasLogging",
          "hasRateLimiting",
          "hasExceptionHandling"
        ],
        "hasLogging": false,
        "scannedFiles": 0,
        "hasMiddleware": false,
        "hasValidation": false,
        "hasRateLimiting": false,
        "hasAuthorization": false,
        "hasAuthentication": false,
        "hasExceptionHandling": false
      },
      "executionTime": 0,
      "testName": "Suite 16 - Backend Security",
      "sectionName": "Architecture"
    },
    {
      "testSuiteId": "data-layer",
      "status": "WARN",
      "message": "Data layer scan found missing ORM, pooling, or encryption signals.",
      "severity": "medium",
      "details": {
        "hasOrm": false,
        "hasPooling": false,
        "scannedFiles": 1,
        "hasEncryption": false,
        "databaseExposure": 0,
        "rawSqlConstruction": 0
      },
      "executionTime": 1,
      "testName": "Suite 17 - Data Layer",
      "sectionName": "Architecture"
    },
    {
      "testSuiteId": "cloud-architecture",
      "status": "WARN",
      "message": "No AWS, Azure, or GCP architecture artifacts were found.",
      "severity": "low",
      "executionTime": 1,
      "testName": "Suite 18 - Cloud Architecture",
      "sectionName": "Architecture"
    }
  ]
}