local-review-harness/tests/fixtures/insecure-repo/reports/latest/llm-findings.normalized.json

{
  "generated_at": "2026-04-30T06:06:33.240219171Z",
  "findings": [
    {
      "id": "",
      "title": "Hardcoded file path for secrets",
      "severity": "high",
      "status": "suspected",
      "file": "src/handler.go",
      "line_hint": "10",
      "evidence": "const HARDCODED_PATH = \"/home/profit/secrets/key.pem\"",
      "reason": "Hardcoding a file path for a private key exposes secrets and prevents proper secret management.",
      "suggested_fix": "Move the path to an environment variable or a configuration file outside the source code.",
      "source": "llm",
      "confidence": 1,
      "check_id": "llm.review"
    },
    {
      "id": "",
      "title": "Hardcoded server IP address",
      "severity": "medium",
      "status": "suspected",
      "file": "src/handler.go",
      "line_hint": "11",
      "evidence": "const SERVER_IP = \"192.168.1.176\"",
      "reason": "Hardcoding an IP address reduces portability and may leak internal network topology.",
      "suggested_fix": "Read the server IP from an environment variable.",
      "source": "llm",
      "confidence": 1,
      "check_id": "llm.review"
    },
    {
      "id": "",
      "title": "SQL Injection vulnerability",
      "severity": "critical",
      "status": "suspected",
      "file": "src/handler.go",
      "line_hint": "15-16",
      "evidence": "q := fmt.Sprintf(\"SELECT * FROM users WHERE name = '%s'\", name)\ndb.Query(q)",
      "reason": "Using string formatting to construct SQL queries directly exposes the application to SQL injection attacks.",
      "suggested_fix": "Use parameterized queries with placeholders instead of string formatting.",
      "source": "llm",
      "confidence": 1,
      "check_id": "llm.review"
    },
    {
      "id": "",
      "title": "Unsafe shell command execution",
      "severity": "critical",
      "status": "suspected",
      "file": "src/handler.go",
      "line_hint": "19-20",
      "evidence": "exec.Command(\"bash\", \"-c\", cmd).Run()",
      "reason": "Executing arbitrary shell commands without validation allows for remote code execution.",
      "suggested_fix": "Validate and sanitize the input command strictly, or avoid using shell execution entirely.",
      "source": "llm",
      "confidence": 1,
      "check_id": "llm.review"
    },
    {
      "id": "",
      "title": "Hardcoded API key",
      "severity": "critical",
      "status": "suspected",
      "file": "src/handler.go",
      "line_hint": "23",
      "evidence": "const API_KEY = \"sk-1234567890abcdefABCDEFGHIJKLMNOPQRSTUV\"",
      "reason": "Hardcoding an API key in source code exposes sensitive credentials to anyone with access to the repository.",
      "suggested_fix": "Store the API key in a secure environment variable or secrets manager.",
      "source": "llm",
      "confidence": 1,
      "check_id": "llm.review"
    },
    {
      "id": "",
      "title": "CORS misconfiguration allows cross-origin attacks",
      "severity": "high",
      "status": "suspected",
      "file": "src/server.js",
      "line_hint": "2",
      "evidence": "res.setHeader(\"Access-Control-Allow-Origin\", \"*\");",
      "reason": "Allowing all origins (*) exposes the API to cross-site request forgery and data theft from any website.",
      "suggested_fix": "Restrict Access-Control-Allow-Origin to specific trusted domains or use credentials with a specific origin.",
      "source": "llm",
      "confidence": 1,
      "check_id": "llm.review"
    },
    {
      "id": "",
      "title": "Hardcoded AWS access key in source code",
      "severity": "critical",
      "status": "suspected",
      "file": "src/server.js",
      "line_hint": "5",
      "evidence": "const AWS_KEY = \"AKIAIOSFODNN7EXAMPLE\";",
      "reason": "Hardcoded credentials in source code pose a severe security risk as they can be easily leaked and misused.",
      "suggested_fix": "Use environment variables or a secure secrets manager to store AWS credentials.",
      "source": "llm",
      "confidence": 1,
      "check_id": "llm.review"
    },
    {
      "id": "",
      "title": "Missing authentication on user creation endpoint",
      "severity": "high",
      "status": "suspected",
      "file": "src/server.js",
      "line_hint": "7",
      "evidence": "app.post(\"/api/users\", function(req, res) { /* no auth */ });",
      "reason": "The /api/users endpoint lacks authentication, allowing anyone to create or modify user accounts.",
      "suggested_fix": "Implement authentication middleware to verify user identity before allowing POST requests.",
      "source": "llm",
      "confidence": 1,
      "check_id": "llm.review"
    },
    {
      "id": "",
      "title": "Missing authentication on admin deletion endpoint",
      "severity": "critical",
      "status": "suspected",
      "file": "src/server.js",
      "line_hint": "8",
      "evidence": "app.delete(\"/api/admin\", function(req, res) { /* no auth */ });",
      "reason": "The /api/admin endpoint lacks authentication, allowing unauthenticated users to delete administrative resources.",
      "suggested_fix": "Implement strict authentication and authorization checks for all admin endpoints.",
      "source": "llm",
      "confidence": 1,
      "check_id": "llm.review"
    }
  ],
  "summary": {
    "total": 9,
    "confirmed": 0,
    "suspected": 9,
    "rejected": 0,
    "critical": 5,
    "high": 3,
    "medium": 1,
    "low": 0,
    "by_source": {
      "llm": 9
    },
    "by_check": {
      "llm.review": 9
    }
  }
}