{
  "$schema": "https://docs.oasis-open.org/sarif/sarif/v2.1.0/cos02/schemas/sarif-schema-2.1.0.json",
  "runs": [
    {
      "originalUriBaseIds": {
        "DATASETROOT": {
          "uri": "./"
        }
      },
      "results": [
        {
          "level": "warning",
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": ".env",
                  "uriBaseId": "DATASETROOT"
                }
              }
            }
          ],
          "message": {
            "text": "secret-risk signal(s) at .env"
          },
          "properties": {
            "signal_codes": [
              "sensitive-config-filename"
            ]
          },
          "ruleId": "YY0201"
        },
        {
          "level": "error",
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": ".env",
                  "uriBaseId": "DATASETROOT"
                }
              }
            }
          ],
          "message": {
            "text": "uncovered by any declaration at .env"
          },
          "ruleId": "YY0301"
        },
        {
          "level": "error",
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "data/batch-b/normalized-a.txt",
                  "uriBaseId": "DATASETROOT"
                }
              }
            }
          ],
          "message": {
            "text": "uncovered by any declaration at data/batch-b/normalized-a.txt"
          },
          "ruleId": "YY0301"
        },
        {
          "level": "error",
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "data/batch-b/normalized-b.txt",
                  "uriBaseId": "DATASETROOT"
                }
              }
            }
          ],
          "message": {
            "text": "uncovered by any declaration at data/batch-b/normalized-b.txt"
          },
          "ruleId": "YY0301"
        },
        {
          "level": "error",
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "evidence/source-batch-a.txt",
                  "uriBaseId": "DATASETROOT"
                }
              }
            }
          ],
          "message": {
            "text": "uncovered by any declaration at evidence/source-batch-a.txt"
          },
          "ruleId": "YY0301"
        }
      ],
      "tool": {
        "driver": {
          "informationUri": "https://www.yycore.ai/projects/dataset-preflight",
          "name": "yy-dataset-preflight",
          "rules": [
            {
              "defaultConfiguration": {
                "level": "warning"
              },
              "fullDescription": {
                "text": "A path could not be read consistently or was skipped during the filesystem inventory (for example a symlink, reparse point, or a file that changed while being read). The specific code is carried in the result message."
              },
              "id": "YY0101",
              "name": "scan-issue",
              "shortDescription": {
                "text": "Dataset scan issue."
              }
            },
            {
              "defaultConfiguration": {
                "level": "warning"
              },
              "fullDescription": {
                "text": "A conservative, non-extractive heuristic matched a filename or small strict-UTF-8 file. Matched content and values are never included. This is not a security scan or determination of safety."
              },
              "id": "YY0201",
              "name": "secret-risk-signal",
              "shortDescription": {
                "text": "Secret-risk signal observed."
              }
            },
            {
              "defaultConfiguration": {
                "level": "error"
              },
              "fullDescription": {
                "text": "Applies only when --declarations is configured. The file matched no source/license/permission/consent/other declaration scope."
              },
              "id": "YY0301",
              "name": "declaration-uncovered-file",
              "shortDescription": {
                "text": "Inventory file is not covered by a declaration."
              }
            },
            {
              "defaultConfiguration": {
                "level": "error"
              },
              "fullDescription": {
                "text": "Applies only when --declarations is configured. A declaration named an evidence file that does not exist as a regular file in the scan."
              },
              "id": "YY0302",
              "name": "declaration-evidence-missing",
              "shortDescription": {
                "text": "Declared evidence file is absent from inventory."
              }
            },
            {
              "defaultConfiguration": {
                "level": "error"
              },
              "fullDescription": {
                "text": "Applies only when --policy is configured. An observed count exceeded the configured limit. Absence of a policy means no policy results."
              },
              "id": "YY0401",
              "name": "policy-threshold-exceeded",
              "shortDescription": {
                "text": "Configured CI threshold was exceeded."
              }
            }
          ],
          "version": "0.2.0"
        }
      }
    }
  ],
  "version": "2.1.0"
}