nyx/tests/recall_targets/xlang/rust/axum.json

76 lines
2.6 KiB
JSON

{
"_doc": "Phase 17 cross-lang recall-validation baseline for tokio-rs/axum (Rust). Re-capture by running scripts/validate_recall.sh --lang rust axum <clone_path> --capture. Placeholder: pitboss implementer agents run sandboxed without network egress; this clone was not available locally during phase 17 capture.",
"target": "axum",
"lang": "rust",
"clone_url": "https://github.com/tokio-rs/axum",
"exercises_recall_items": [],
"captured_against": "real-scan @ c853e44ffce77b771069b6df6bd5adc1b78f1b2f",
"captured_on": "2026-05-10",
"pinned_commit": "c853e44ffce77b771069b6df6bd5adc1b78f1b2f",
"findings": [
{
"rule_id": "taint-unsanitised-flow",
"path_suffix": "examples/form/src/main.rs",
"line": 71,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "taint-unsanitised-flow",
"path_suffix": "examples/stream-to-file/src/main.rs",
"line": 96,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "rs.auth.missing_ownership_check",
"path_suffix": "examples/dependency-injection/src/main.rs",
"line": 114,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "rs.auth.missing_ownership_check",
"path_suffix": "examples/dependency-injection/src/main.rs",
"line": 144,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "rs.auth.missing_ownership_check",
"path_suffix": "examples/mongodb/src/main.rs",
"line": 84,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "rs.auth.missing_ownership_check",
"path_suffix": "examples/mongodb/src/main.rs",
"line": 110,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-resource-leak",
"path_suffix": "examples/websockets-http2/assets/script.js",
"line": 1,
"severity": "Low",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "cfg-unguarded-sink",
"path_suffix": "examples/sqlx-postgres/src/main.rs",
"line": 67,
"severity": "Low",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
}
]
}