Open Cyber Threat Intelligence Platform
This report summarizes scanner evidence for OpenCTI-Platform/opencti, a TypeScript project with 10,231 GitHub stars. SynthScan examined 1,118,179 lines of code across 5906 source files, recording 1437 pattern matches distributed across 24 syntactic categories. The legacy adjusted pattern signal is 3.2 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.
Can maintainers explain intent, assumptions, and trade-offs? 657 finding(s).
Are imports declared and package/API names verified? 218 finding(s).
Are wrappers, guards, and repeated structures necessary? 888 finding(s).
Which changes need focused human review? 1437 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 1437 distinct pattern matches across 24 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | client-python/pycti/api/opencti_api_workspace.py | 0 | opencti playbook api class. manages playbook operations. :param api: instance of :py:class:`~pycti.api.opencti_api_clien | STRING |
| HIGH | client-python/pycti/api/opencti_api_notification.py | 0 | opencti playbook api class. manages playbook operations. :param api: instance of :py:class:`~pycti.api.opencti_api_clien | STRING |
| HIGH | client-python/pycti/api/opencti_api_draft.py | 0 | opencti playbook api class. manages playbook operations. :param api: instance of :py:class:`~pycti.api.opencti_api_clien | STRING |
| HIGH | client-python/pycti/api/opencti_api_playbook.py | 0 | opencti playbook api class. manages playbook operations. :param api: instance of :py:class:`~pycti.api.opencti_api_clien | STRING |
| HIGH | client-python/pycti/entities/opencti_campaign.py | 0 | customfieldvalues { field_id field_name int_value string_value boolean_value date_value select_value select_values } id | STRING |
| HIGH | client-python/pycti/entities/opencti_location.py | 0 | customfieldvalues { field_id field_name int_value string_value boolean_value date_value select_value select_values } id | STRING |
| HIGH | client-python/pycti/entities/opencti_language.py | 0 | customfieldvalues { field_id field_name int_value string_value boolean_value date_value select_value select_values } id | STRING |
| HIGH | …thon/pycti/entities/opencti_threat_actor_individual.py | 0 | customfieldvalues { field_id field_name int_value string_value boolean_value date_value select_value select_values } id | STRING |
| HIGH | client-python/pycti/entities/opencti_threat_actor.py | 0 | customfieldvalues { field_id field_name int_value string_value boolean_value date_value select_value select_values } id | STRING |
| HIGH | client-python/pycti/entities/opencti_identity.py | 0 | customfieldvalues { field_id field_name int_value string_value boolean_value date_value select_value select_values } id | STRING |
| HIGH | client-python/pycti/entities/opencti_intrusion_set.py | 0 | customfieldvalues { field_id field_name int_value string_value boolean_value date_value select_value select_values } id | STRING |
| HIGH | client-python/pycti/entities/opencti_infrastructure.py | 0 | customfieldvalues { field_id field_name int_value string_value boolean_value date_value select_value select_values } id | STRING |
| HIGH | client-python/pycti/entities/opencti_data_source.py | 0 | customfieldvalues { field_id field_name int_value string_value boolean_value date_value select_value select_values } id | STRING |
| HIGH | …nt-python/pycti/entities/opencti_threat_actor_group.py | 0 | customfieldvalues { field_id field_name int_value string_value boolean_value date_value select_value select_values } id | STRING |
| HIGH | client-python/pycti/entities/opencti_event.py | 0 | customfieldvalues { field_id field_name int_value string_value boolean_value date_value select_value select_values } id | STRING |
| HIGH | client-python/pycti/entities/opencti_narrative.py | 0 | customfieldvalues { field_id field_name int_value string_value boolean_value date_value select_value select_values } id | STRING |
| HIGH | client-python/pycti/entities/opencti_tool.py | 0 | customfieldvalues { field_id field_name int_value string_value boolean_value date_value select_value select_values } id | STRING |
| HIGH | client-python/pycti/entities/opencti_channel.py | 0 | customfieldvalues { field_id field_name int_value string_value boolean_value date_value select_value select_values } id | STRING |
| HIGH | client-python/pycti/entities/opencti_data_component.py | 0 | customfieldvalues { field_id field_name int_value string_value boolean_value date_value select_value select_values } id | STRING |
| HIGH | client-python/pycti/entities/opencti_malware.py | 0 | customfieldvalues { field_id field_name int_value string_value boolean_value date_value select_value select_values } id | STRING |
| HIGH | …ient-python/pycti/entities/opencti_course_of_action.py | 0 | customfieldvalues { field_id field_name int_value string_value boolean_value date_value select_value select_values } id | STRING |
| HIGH | client-python/pycti/entities/opencti_incident.py | 0 | customfieldvalues { field_id field_name int_value string_value boolean_value date_value select_value select_values } id | STRING |
| HIGH | client-python/pycti/entities/opencti_attack_pattern.py | 0 | customfieldvalues { field_id field_name int_value string_value boolean_value date_value select_value select_values } id | STRING |
| HIGH | client-python/pycti/entities/opencti_campaign.py | 0 | generate a stix id from feedback data. :param data: dictionary containing a 'name' key :type data: dict :return: stix id | STRING |
| HIGH | client-python/pycti/entities/opencti_language.py | 0 | generate a stix id from feedback data. :param data: dictionary containing a 'name' key :type data: dict :return: stix id | STRING |
| HIGH | client-python/pycti/entities/opencti_vulnerability.py | 0 | generate a stix id from feedback data. :param data: dictionary containing a 'name' key :type data: dict :return: stix id | STRING |
| HIGH | client-python/pycti/entities/opencti_intrusion_set.py | 0 | generate a stix id from feedback data. :param data: dictionary containing a 'name' key :type data: dict :return: stix id | STRING |
| HIGH | client-python/pycti/entities/opencti_infrastructure.py | 0 | generate a stix id from feedback data. :param data: dictionary containing a 'name' key :type data: dict :return: stix id | STRING |
| HIGH | client-python/pycti/entities/opencti_data_source.py | 0 | generate a stix id from feedback data. :param data: dictionary containing a 'name' key :type data: dict :return: stix id | STRING |
| HIGH | client-python/pycti/entities/opencti_event.py | 0 | generate a stix id from feedback data. :param data: dictionary containing a 'name' key :type data: dict :return: stix id | STRING |
| HIGH | client-python/pycti/entities/opencti_narrative.py | 0 | generate a stix id from feedback data. :param data: dictionary containing a 'name' key :type data: dict :return: stix id | STRING |
| HIGH | client-python/pycti/entities/opencti_tool.py | 0 | generate a stix id from feedback data. :param data: dictionary containing a 'name' key :type data: dict :return: stix id | STRING |
| HIGH | client-python/pycti/entities/opencti_channel.py | 0 | generate a stix id from feedback data. :param data: dictionary containing a 'name' key :type data: dict :return: stix id | STRING |
| HIGH | client-python/pycti/entities/opencti_data_component.py | 0 | generate a stix id from feedback data. :param data: dictionary containing a 'name' key :type data: dict :return: stix id | STRING |
| HIGH | client-python/pycti/entities/opencti_malware.py | 0 | generate a stix id from feedback data. :param data: dictionary containing a 'name' key :type data: dict :return: stix id | STRING |
| HIGH | client-python/pycti/entities/opencti_feedback.py | 0 | generate a stix id from feedback data. :param data: dictionary containing a 'name' key :type data: dict :return: stix id | STRING |
| HIGH | client-python/pycti/entities/opencti_campaign.py | 0 | list marking-definition objects. :param filters: the filters to apply :type filters: dict :param first: return the first | STRING |
| HIGH | client-python/pycti/entities/opencti_location.py | 0 | list marking-definition objects. :param filters: the filters to apply :type filters: dict :param first: return the first | STRING |
| HIGH | client-python/pycti/entities/opencti_opinion.py | 0 | list marking-definition objects. :param filters: the filters to apply :type filters: dict :param first: return the first | STRING |
| HIGH | …nt-python/pycti/entities/opencti_external_reference.py | 0 | list marking-definition objects. :param filters: the filters to apply :type filters: dict :param first: return the first | STRING |
| HIGH | client-python/pycti/entities/opencti_label.py | 0 | list marking-definition objects. :param filters: the filters to apply :type filters: dict :param first: return the first | STRING |
| HIGH | …ient-python/pycti/entities/opencti_kill_chain_phase.py | 0 | list marking-definition objects. :param filters: the filters to apply :type filters: dict :param first: return the first | STRING |
| HIGH | client-python/pycti/entities/opencti_threat_actor.py | 0 | list marking-definition objects. :param filters: the filters to apply :type filters: dict :param first: return the first | STRING |
| HIGH | client-python/pycti/entities/opencti_vulnerability.py | 0 | list marking-definition objects. :param filters: the filters to apply :type filters: dict :param first: return the first | STRING |
| HIGH | client-python/pycti/entities/opencti_identity.py | 0 | list marking-definition objects. :param filters: the filters to apply :type filters: dict :param first: return the first | STRING |
| HIGH | …nt-python/pycti/entities/opencti_marking_definition.py | 0 | list marking-definition objects. :param filters: the filters to apply :type filters: dict :param first: return the first | STRING |
| HIGH | client-python/pycti/entities/opencti_intrusion_set.py | 0 | list marking-definition objects. :param filters: the filters to apply :type filters: dict :param first: return the first | STRING |
| HIGH | client-python/pycti/entities/opencti_data_source.py | 0 | list marking-definition objects. :param filters: the filters to apply :type filters: dict :param first: return the first | STRING |
| HIGH | client-python/pycti/entities/opencti_event.py | 0 | list marking-definition objects. :param filters: the filters to apply :type filters: dict :param first: return the first | STRING |
| HIGH | client-python/pycti/entities/opencti_case_rft.py | 0 | list marking-definition objects. :param filters: the filters to apply :type filters: dict :param first: return the first | STRING |
| HIGH | client-python/pycti/entities/opencti_note.py | 0 | list marking-definition objects. :param filters: the filters to apply :type filters: dict :param first: return the first | STRING |
| HIGH | client-python/pycti/entities/opencti_tool.py | 0 | list marking-definition objects. :param filters: the filters to apply :type filters: dict :param first: return the first | STRING |
| HIGH | client-python/pycti/entities/opencti_channel.py | 0 | list marking-definition objects. :param filters: the filters to apply :type filters: dict :param first: return the first | STRING |
| HIGH | client-python/pycti/entities/opencti_audit.py | 0 | list marking-definition objects. :param filters: the filters to apply :type filters: dict :param first: return the first | STRING |
| HIGH | client-python/pycti/entities/opencti_data_component.py | 0 | list marking-definition objects. :param filters: the filters to apply :type filters: dict :param first: return the first | STRING |
| HIGH | client-python/pycti/entities/opencti_malware.py | 0 | list marking-definition objects. :param filters: the filters to apply :type filters: dict :param first: return the first | STRING |
| HIGH | …ient-python/pycti/entities/opencti_course_of_action.py | 0 | list marking-definition objects. :param filters: the filters to apply :type filters: dict :param first: return the first | STRING |
| HIGH | client-python/pycti/entities/opencti_report.py | 0 | list marking-definition objects. :param filters: the filters to apply :type filters: dict :param first: return the first | STRING |
| HIGH | client-python/pycti/entities/opencti_case_rfi.py | 0 | list marking-definition objects. :param filters: the filters to apply :type filters: dict :param first: return the first | STRING |
| HIGH | client-python/pycti/entities/opencti_grouping.py | 0 | list marking-definition objects. :param filters: the filters to apply :type filters: dict :param first: return the first | STRING |
| 225 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …ts/03-integration/01-database/indicator-domain-test.ts | 738 | // ─── Unit helpers (no DB required) ────────────────────────────────────────── | COMMENT |
| MEDIUM | …ts/03-integration/01-database/indicator-domain-test.ts | 769 | // ─── computeIndicatorDecayHistory ─────────────────────────────────────────── | COMMENT |
| MEDIUM | …ts/03-integration/01-database/indicator-domain-test.ts | 812 | // ─── computeLiveScore ──────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ts/03-integration/01-database/indicator-domain-test.ts | 849 | // ─── computeLivePoints ─────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ts/03-integration/01-database/indicator-domain-test.ts | 897 | // ─── computeIndicatorDecayPatch ────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ncti-graphql/tests/21-integration/ip-whitelist-test.ts | 9 | // ─── GraphQL Queries ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ncti-graphql/tests/21-integration/ip-whitelist-test.ts | 29 | // ─── Helpers ───────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ncti-graphql/tests/21-integration/ip-whitelist-test.ts | 53 | // ─── Tests ─────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …nit/database/middleware-restricted-entity-unit-test.ts | 3 | // ── Infrastructure stubs ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …nit/database/middleware-restricted-entity-unit-test.ts | 37 | // ── Imports (after mocks) ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …nit/database/middleware-restricted-entity-unit-test.ts | 41 | // ── Reproduction of GitHub issue #18026 ────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …nit/database/middleware-restricted-entity-unit-test.ts | 41 | // ── Reproduction of GitHub issue #18026 ────────────────────────────────────── | COMMENT |
| MEDIUM | …/01-unit/database/middleware-distribution-unit-test.ts | 3 | // ── Infrastructure stubs ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …/01-unit/database/middleware-distribution-unit-test.ts | 34 | // ── Imports (after mocks) ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …/01-unit/database/middleware-distribution-unit-test.ts | 40 | // ── Shared fixtures ────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …/01-unit/database/middleware-distribution-unit-test.ts | 55 | // ── convertAggregateDistributions: lines 778-780 and 792 ──────────────────── | COMMENT |
| MEDIUM | …/01-unit/database/middleware-distribution-unit-test.ts | 143 | // ── distributionEntities name branch: lines 902-906 ────────────────────────── | COMMENT |
| MEDIUM | …/01-unit/database/middleware-distribution-unit-test.ts | 173 | // ── distributionHistory name branch: lines 838-859 ─────────────────────────── | COMMENT |
| MEDIUM | …/opencti-graphql/tests/01-unit/database/engine-test.js | 220 | // ── Status code branch ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …/opencti-graphql/tests/01-unit/database/engine-test.js | 270 | // ── Error code branch ─────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …/opencti-graphql/tests/01-unit/database/engine-test.js | 308 | // ── Text pattern branch – message field ──────────────────────────────────── | COMMENT |
| MEDIUM | …/opencti-graphql/tests/01-unit/database/engine-test.js | 330 | // ── Text pattern branch – nested paths via collectErrorFieldValues ────────── | COMMENT |
| MEDIUM | …/opencti-graphql/tests/01-unit/database/engine-test.js | 380 | // ── Real-world production error shape (from the reported bug) ────────────── | COMMENT |
| MEDIUM | …/opencti-graphql/tests/01-unit/database/engine-test.js | 392 | // ── Circuit breaker durability ────────────────────────────────────────────── | COMMENT |
| MEDIUM | …/opencti-graphql/tests/01-unit/database/engine-test.js | 419 | // ── False cases ───────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …sts/01-unit/database/middleware-load-refs-unit-test.ts | 3 | // ── Infrastructure stubs ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …sts/01-unit/database/middleware-load-refs-unit-test.ts | 40 | // ── Imports (after mocks) ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …/01-unit/manager/notification-recipient-active-test.ts | 12 | // ─── Cache mock: getNotifications reads triggers/users/settings from cache ───── | COMMENT |
| MEDIUM | …aphql/tests/01-unit/http/ipWhitelistMiddleware-test.ts | 46 | // ─── ipMatchesWhitelist ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …aphql/tests/01-unit/http/ipWhitelistMiddleware-test.ts | 145 | // ─── isUserExcluded ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …aphql/tests/01-unit/http/ipWhitelistMiddleware-test.ts | 271 | // ─── isLoginOnlyRequest ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …aphql/tests/01-unit/http/ipWhitelistMiddleware-test.ts | 394 | // ─── ipWhitelistMiddleware ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …aphql/tests/01-unit/http/ipWhitelistMiddleware-test.ts | 583 | // ─── checkIpWhitelistForRequest ───────────────────────────────────────────── | COMMENT |
| MEDIUM | …ti-graphql/tests/01-unit/http/httpChatbotProxy-test.ts | 5 | // ── Mocks ────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ti-graphql/tests/01-unit/http/httpChatbotProxy-test.ts | 159 | // ── Imports (after mocks) ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ti-graphql/tests/01-unit/http/httpChatbotProxy-test.ts | 186 | // ── Helpers ──────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ti-graphql/tests/01-unit/http/httpChatbotProxy-test.ts | 231 | // ── Tests ────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …-graphql/tests/01-unit/modules/workflow-engine-test.ts | 141 | // ── Two-phase async execution ──────────────────────────────────────────── | COMMENT |
| MEDIUM | …phql/tests/01-unit/modules/workflow-validation-test.ts | 975 | // ── asyncActions / syncActions / requiresOrganizationInput ──────────────── | COMMENT |
| MEDIUM | …it/modules/playbook/components/ai-agent-shared-test.ts | 3 | // ── Mocks (must be declared before the SUT import below) ──────────────── | COMMENT |
| MEDIUM | …it/modules/playbook/components/ai-agent-shared-test.ts | 54 | // ── Imports (after mocks) ─────────────────────────────────────────────── | COMMENT |
| MEDIUM | …it/modules/playbook/components/ai-agent-shared-test.ts | 81 | // ── Fixtures ──────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …modules/playbook/components/ai-agent-component-test.ts | 3 | // ── Mocks (declared before the SUT import) ────────────────────────────── | COMMENT |
| MEDIUM | …modules/playbook/components/ai-agent-component-test.ts | 19 | // ── Imports (after mocks) ─────────────────────────────────────────────── | COMMENT |
| MEDIUM | …modules/playbook/components/ai-agent-component-test.ts | 34 | // ── Fixtures ──────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …modules/playbook/components/ai-agent-component-test.ts | 76 | // ── Tests ─────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …es/playbook/components/ai-agent-send-component-test.ts | 3 | // ── Mocks (declared before the SUT import) ────────────────────────────── | COMMENT |
| MEDIUM | …es/playbook/components/ai-agent-send-component-test.ts | 19 | // ── Imports (after mocks) ─────────────────────────────────────────────── | COMMENT |
| MEDIUM | …es/playbook/components/ai-agent-send-component-test.ts | 34 | // ── Fixtures ──────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …es/playbook/components/ai-agent-send-component-test.ts | 63 | // ── Tests ─────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ts/01-unit/modules/forms/form-fields-converter-test.ts | 33 | // ─── convertFieldType ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ts/01-unit/modules/forms/form-fields-converter-test.ts | 112 | // ─── transformSpecialFields ─────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ests/01-unit/modules/forms/form-bundle-builder-test.ts | 93 | // ─── Imports after mocks ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ests/01-unit/modules/forms/form-bundle-builder-test.ts | 114 | // ─── buildMainStixEntities ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ests/01-unit/modules/forms/form-bundle-builder-test.ts | 540 | // ─── buildAdditionalEntities ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ests/01-unit/modules/forms/form-bundle-builder-test.ts | 910 | // ─── buildRelationships ─────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ests/01-unit/modules/forms/form-bundle-builder-test.ts | 1107 | // ─── wrapInContainerOrPush ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ql/tests/01-unit/modules/forms/form-validation-test.ts | 5 | // ─── Helpers ──────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ql/tests/01-unit/modules/forms/form-validation-test.ts | 34 | // ─── Single entity mode ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ql/tests/01-unit/modules/forms/form-validation-test.ts | 79 | // ─── Lookup mode ───────────────────────────────────────────────────────────── | COMMENT |
| 144 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | opencti-platform/opencti-front/lang/front/zh.json | 4794 | "Simulated emails (generated by AI)": "模拟电子邮件(由人工智能生成)", | CODE |
| HIGH | opencti-platform/opencti-front/lang/front/zh.json | 5296 | "This forecast is based on the evolution of the activity of this entity (indicators, victimology, etc.). It has been g | CODE |
| HIGH⚡ | opencti-platform/opencti-front/lang/front/zh.json | 5347 | "This summary is based on the evolution of the activity of this entity (indicators, victimology, etc.). It has been ge | CODE |
| HIGH⚡ | opencti-platform/opencti-front/lang/front/zh.json | 5348 | "This summary is based on the history of this entity (internal activity). It has been generated by AI and can contain | CODE |
| HIGH⚡ | opencti-platform/opencti-front/lang/front/zh.json | 5349 | "This summary is based on the whole content of related containers (description, content and attached files). It has be | CODE |
| HIGH | opencti-platform/opencti-front/lang/front/ja.json | 4794 | "Simulated emails (generated by AI)": "模擬メール(AIが生成)", | CODE |
| HIGH | opencti-platform/opencti-front/lang/front/ja.json | 5296 | "This forecast is based on the evolution of the activity of this entity (indicators, victimology, etc.). It has been g | CODE |
| HIGH⚡ | opencti-platform/opencti-front/lang/front/ja.json | 5347 | "This summary is based on the evolution of the activity of this entity (indicators, victimology, etc.). It has been ge | CODE |
| HIGH⚡ | opencti-platform/opencti-front/lang/front/ja.json | 5348 | "This summary is based on the history of this entity (internal activity). It has been generated by AI and can contain | CODE |
| HIGH⚡ | opencti-platform/opencti-front/lang/front/ja.json | 5349 | "This summary is based on the whole content of related containers (description, content and attached files). It has be | CODE |
| HIGH | opencti-platform/opencti-front/lang/front/de.json | 4794 | "Simulated emails (generated by AI)": "Simulierte E-Mails (von AI generiert)", | CODE |
| HIGH | opencti-platform/opencti-front/lang/front/de.json | 5296 | "This forecast is based on the evolution of the activity of this entity (indicators, victimology, etc.). It has been g | CODE |
| HIGH⚡ | opencti-platform/opencti-front/lang/front/de.json | 5347 | "This summary is based on the evolution of the activity of this entity (indicators, victimology, etc.). It has been ge | CODE |
| HIGH⚡ | opencti-platform/opencti-front/lang/front/de.json | 5348 | "This summary is based on the history of this entity (internal activity). It has been generated by AI and can contain | CODE |
| HIGH⚡ | opencti-platform/opencti-front/lang/front/de.json | 5349 | "This summary is based on the whole content of related containers (description, content and attached files). It has be | CODE |
| HIGH | opencti-platform/opencti-front/lang/front/ru.json | 4794 | "Simulated emails (generated by AI)": "Имитированные электронные письма (сгенерированные искусственным интеллектом)", | CODE |
| HIGH | opencti-platform/opencti-front/lang/front/ru.json | 5296 | "This forecast is based on the evolution of the activity of this entity (indicators, victimology, etc.). It has been g | CODE |
| HIGH⚡ | opencti-platform/opencti-front/lang/front/ru.json | 5347 | "This summary is based on the evolution of the activity of this entity (indicators, victimology, etc.). It has been ge | CODE |
| HIGH⚡ | opencti-platform/opencti-front/lang/front/ru.json | 5348 | "This summary is based on the history of this entity (internal activity). It has been generated by AI and can contain | CODE |
| HIGH⚡ | opencti-platform/opencti-front/lang/front/ru.json | 5349 | "This summary is based on the whole content of related containers (description, content and attached files). It has be | CODE |
| HIGH | opencti-platform/opencti-front/lang/front/en.json | 4794 | "Simulated emails (generated by AI)": "Simulated emails (generated by AI)", | CODE |
| HIGH | opencti-platform/opencti-front/lang/front/en.json | 5296 | "This forecast is based on the evolution of the activity of this entity (indicators, victimology, etc.). It has been g | CODE |
| HIGH⚡ | opencti-platform/opencti-front/lang/front/en.json | 5347 | "This summary is based on the evolution of the activity of this entity (indicators, victimology, etc.). It has been ge | CODE |
| HIGH⚡ | opencti-platform/opencti-front/lang/front/en.json | 5348 | "This summary is based on the history of this entity (internal activity). It has been generated by AI and can contain | CODE |
| HIGH⚡ | opencti-platform/opencti-front/lang/front/en.json | 5349 | "This summary is based on the whole content of related containers (description, content and attached files). It has be | CODE |
| HIGH | opencti-platform/opencti-front/lang/front/it.json | 4794 | "Simulated emails (generated by AI)": "Simulazione di email (generate da AI)", | CODE |
| HIGH | opencti-platform/opencti-front/lang/front/it.json | 5296 | "This forecast is based on the evolution of the activity of this entity (indicators, victimology, etc.). It has been g | CODE |
| HIGH⚡ | opencti-platform/opencti-front/lang/front/it.json | 5347 | "This summary is based on the evolution of the activity of this entity (indicators, victimology, etc.). It has been ge | CODE |
| HIGH⚡ | opencti-platform/opencti-front/lang/front/it.json | 5348 | "This summary is based on the history of this entity (internal activity). It has been generated by AI and can contain | CODE |
| HIGH⚡ | opencti-platform/opencti-front/lang/front/it.json | 5349 | "This summary is based on the whole content of related containers (description, content and attached files). It has be | CODE |
| HIGH | opencti-platform/opencti-front/lang/front/fr.json | 4794 | "Simulated emails (generated by AI)": "Courriels simulés (générés par l'IA)", | CODE |
| HIGH | opencti-platform/opencti-front/lang/front/fr.json | 5296 | "This forecast is based on the evolution of the activity of this entity (indicators, victimology, etc.). It has been g | CODE |
| HIGH⚡ | opencti-platform/opencti-front/lang/front/fr.json | 5347 | "This summary is based on the evolution of the activity of this entity (indicators, victimology, etc.). It has been ge | CODE |
| HIGH⚡ | opencti-platform/opencti-front/lang/front/fr.json | 5348 | "This summary is based on the history of this entity (internal activity). It has been generated by AI and can contain | CODE |
| HIGH⚡ | opencti-platform/opencti-front/lang/front/fr.json | 5349 | "This summary is based on the whole content of related containers (description, content and attached files). It has be | CODE |
| HIGH | opencti-platform/opencti-front/lang/front/ko.json | 4794 | "Simulated emails (generated by AI)": "시뮬레이션 이메일(AI로 생성)", | CODE |
| HIGH | opencti-platform/opencti-front/lang/front/ko.json | 5296 | "This forecast is based on the evolution of the activity of this entity (indicators, victimology, etc.). It has been g | CODE |
| HIGH⚡ | opencti-platform/opencti-front/lang/front/ko.json | 5347 | "This summary is based on the evolution of the activity of this entity (indicators, victimology, etc.). It has been ge | CODE |
| HIGH⚡ | opencti-platform/opencti-front/lang/front/ko.json | 5348 | "This summary is based on the history of this entity (internal activity). It has been generated by AI and can contain | CODE |
| HIGH⚡ | opencti-platform/opencti-front/lang/front/ko.json | 5349 | "This summary is based on the whole content of related containers (description, content and attached files). It has be | CODE |
| HIGH | opencti-platform/opencti-front/lang/front/es.json | 4794 | "Simulated emails (generated by AI)": "Correos electrónicos simulados (generados por IA)", | CODE |
| HIGH | opencti-platform/opencti-front/lang/front/es.json | 5296 | "This forecast is based on the evolution of the activity of this entity (indicators, victimology, etc.). It has been g | CODE |
| HIGH⚡ | opencti-platform/opencti-front/lang/front/es.json | 5347 | "This summary is based on the evolution of the activity of this entity (indicators, victimology, etc.). It has been ge | CODE |
| HIGH⚡ | opencti-platform/opencti-front/lang/front/es.json | 5348 | "This summary is based on the history of this entity (internal activity). It has been generated by AI and can contain | CODE |
| HIGH⚡ | opencti-platform/opencti-front/lang/front/es.json | 5349 | "This summary is based on the whole content of related containers (description, content and attached files). It has be | CODE |
| HIGH | …src/private/components/common/ai/AISummaryActivity.tsx | 68 | <i>{t_i18n('This summary is based on the evolution of the activity of this entity (indicators, victimology, et | CODE |
| HIGH | …src/private/components/common/ai/AISummaryActivity.tsx | 81 | <i>{t_i18n('This summary is based on the evolution of the activity of this entity (indicators, victimology, | CODE |
| HIGH | …src/private/components/common/ai/AISummaryActivity.tsx | 92 | <i>{t_i18n('This summary is based on the evolution of the activity of this entity (indicators, victimology, | CODE |
| HIGH | …src/private/components/common/ai/AISummaryActivity.tsx | 103 | <i>{t_i18n('This summary is based on the evolution of the activity of this entity (indicators, victimology, | CODE |
| HIGH | …src/private/components/common/ai/AISummaryActivity.tsx | 114 | <i>{t_i18n('This summary is based on the evolution of the activity of this entity (indicators, victimology, | CODE |
| HIGH | …src/private/components/common/ai/AISummaryActivity.tsx | 263 | disclaimerText={t_i18n('This summary is based on the evolution of the activity of this entity (indicators, victimo | CODE |
| HIGH | …/src/private/components/common/ai/AISummaryHistory.tsx | 59 | {t_i18n('This summary is based on the history of this entity (internal activity). It has been generated by AI an | CODE |
| HIGH | …/src/private/components/common/ai/AISummaryHistory.tsx | 198 | disclaimerText={t_i18n('This summary is based on the history of this entity (internal activity). It has been gener | CODE |
| HIGH | …src/private/components/common/ai/AISummaryForecast.tsx | 59 | {t_i18n('This forecast is based on the evolution of the activity of this entity (indicators, victimology, etc.). | CODE |
| HIGH | …src/private/components/common/ai/AISummaryForecast.tsx | 202 | disclaimerText={t_i18n('This forecast is based on the evolution of the activity of this entity (indicators, victim | CODE |
| HIGH | …c/private/components/common/ai/AISummaryContainers.tsx | 108 | {t_i18n('This summary is based on the whole content of related containers (description, content and attached fil | CODE |
| HIGH | …c/private/components/common/ai/AISummaryContainers.tsx | 243 | disclaimerText={t_i18n('This summary is based on the whole content of related containers (description, content and | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …atform/opencti-graphql/src/manager/publisherManager.ts | 105 | export function resolveNotificationDataMarkings( | CODE |
| LOW | …atform/opencti-graphql/src/manager/publisherManager.ts | 221 | export async function handleSimplifiedEmailNotification( | CODE |
| LOW | …atform/opencti-graphql/src/manager/publisherManager.ts | 266 | export async function handleWebhookNotification(configurationString: string | undefined, templateData: object) { | CODE |
| LOW⚡ | opencti-platform/opencti-front/src/utils/Time.ts | 262 | export function dateFiltersValueForDisplay( | CODE |
| LOW⚡ | opencti-platform/opencti-front/src/utils/Time.ts | 266 | export function dateFiltersValueForDisplay( | CODE |
| LOW⚡ | opencti-platform/opencti-front/src/utils/Time.ts | 270 | export function dateFiltersValueForDisplay( | CODE |
| LOW⚡ | …tform/opencti-front/src/utils/filters/filtersUtils.tsx | 730 | export function normalizeFilterGroupForBackend(filterGroup: FilterGroup): GqlFilterGroup; | CODE |
| LOW⚡ | …tform/opencti-front/src/utils/filters/filtersUtils.tsx | 731 | export function normalizeFilterGroupForBackend(filterGroup?: FilterGroup | null): GqlFilterGroup | undefined; | CODE |
| LOW⚡ | …tform/opencti-front/src/utils/filters/filtersUtils.tsx | 732 | export function normalizeFilterGroupForBackend( | CODE |
| LOW | …rm/opencti-front/src/components/ExportButtons.test.tsx | 46 | function createExportButtonsInstance(props: Record<string, unknown>) { | CODE |
| LOW | …rc/private/components/data/forms/view/FormViewUtils.ts | 334 | function validateConditionalRequired(this: Yup.TestContext, value: Record<string, unknown> | undefined) { | CODE |
| LOW | …ata/playbooks/playbookFlow/playbookComponents-utils.ts | 33 | export function groupAndSortPlaybookComponents( | CODE |
| LOW | …ti-worker/tests/test_push_handler_worker_side_split.py | 50 | def test_warns_with_connector_work_and_bundle_context_when_splitting_in_worker( | CODE |
| LOW | …ti-worker/tests/test_push_handler_worker_side_split.py | 81 | def test_does_not_warn_when_bundle_is_pre_split(self): | CODE |
| LOW | opencti-worker/tests/test_push_handler_resilience.py | 39 | def test_telemetry_failure_does_not_mask_ack_result(self): | CODE |
| LOW | opencti-worker/tests/test_push_handler_resilience.py | 54 | def test_telemetry_failure_does_not_mask_nack_result(self): | CODE |
| LOW | opencti-worker/tests/test_push_handler_resilience.py | 69 | def test_telemetry_success_path_unaffected(self): | CODE |
| LOW | …worker/tests/test_message_queue_consumer_resilience.py | 23 | def test_unhandled_exception_still_acks_the_message(self): | CODE |
| LOW | …worker/tests/test_message_queue_consumer_resilience.py | 40 | def test_unhandled_exception_is_logged_with_body_excerpt(self): | CODE |
| LOW | …worker/tests/test_message_queue_consumer_resilience.py | 55 | def test_normal_ack_result_still_acks(self): | CODE |
| LOW | …worker/tests/test_message_queue_consumer_resilience.py | 66 | def test_normal_nack_result_still_nacks(self): | CODE |
| LOW | opencti-worker/src/worker.py | 243 | def listen_execution_pool_submit(task: Callable[[], None]): | CODE |
| LOW | opencti-worker/src/push_handler.py | 42 | def send_bundle_to_specific_queue( | CODE |
| LOW | client-python/tests/conftest.py | 70 | def pytest_collection_modifyitems(config, items): | CODE |
| LOW | client-python/tests/cases/connectors.py | 35 | def case_vulnerability_import() -> Dict: | CODE |
| LOW | client-python/tests/cases/entities.py | 28 | def case_identity_organization(api_client): | CODE |
| LOW⚡ | client-python/tests/cases/entities.py | 120 | def case_stix_cyber_observable_domain(api_client): | CODE |
| LOW⚡ | client-python/tests/cases/entities.py | 124 | def case_stix_cyber_observable_as(api_client): | CODE |
| LOW⚡ | client-python/tests/cases/entities.py | 128 | def case_stix_sighting_relationship(api_client): | CODE |
| LOW⚡ | client-python/tests/cases/entities.py | 136 | def case_threat_actor_individual(api_client): | CODE |
| LOW | client-python/tests/cases/entities.py | 217 | def get_compare_exception_keys(self) -> List[str]: | CODE |
| LOW | client-python/tests/cases/entities.py | 317 | def get_compare_exception_keys(self) -> List[str]: | CODE |
| LOW | client-python/tests/cases/entities.py | 509 | def get_compare_exception_keys(self) -> List[str]: | CODE |
| LOW | client-python/tests/cases/entities.py | 651 | def get_compare_exception_keys(self) -> List[str]: | CODE |
| LOW | client-python/tests/cases/entities.py | 790 | def get_compare_exception_keys(self) -> List[str]: | CODE |
| LOW | client-python/tests/cases/entities.py | 848 | def get_compare_exception_keys(self) -> List[str]: | CODE |
| LOW | client-python/tests/cases/entities.py | 915 | def get_compare_exception_keys(self) -> List[str]: | CODE |
| LOW | client-python/tests/cases/entities.py | 952 | def get_compare_exception_keys(self) -> List[str]: | CODE |
| LOW | …ython/tests/02-integration/connector/test_connector.py | 32 | def test_register_simple_connector(simple_connector, api_connector, api_work): | CODE |
| LOW | …ython/tests/02-integration/connector/test_connector.py | 79 | def test_ping_sends_connector_info_errors(simple_connector, api_client, api_connector): | CODE |
| LOW | …ython/tests/02-integration/connector/test_connector.py | 98 | def test_ping_replaces_errors_and_clears_them_with_an_empty_list( | CODE |
| LOW | …ython/tests/02-integration/connector/test_connector.py | 119 | def external_import_connector_data(request, api_client, api_connector, api_work): | CODE |
| LOW | …ython/tests/02-integration/connector/test_connector.py | 133 | def test_external_import_connector( | CODE |
| LOW | …ython/tests/02-integration/connector/test_connector.py | 174 | def internal_enrichment_connector_data(request, api_client, api_connector, api_work): | CODE |
| LOW | …ython/tests/02-integration/connector/test_connector.py | 199 | def test_internal_enrichment_connector( | CODE |
| LOW | …ython/tests/02-integration/connector/test_connector.py | 227 | def internal_import_connector_data(request, api_client, api_connector, api_work): | CODE |
| LOW | …ython/tests/02-integration/connector/test_connector.py | 248 | def test_internal_import_connector( | CODE |
| LOW | …ient-python/tests/02-integration/entities/test_user.py | 58 | def test_user_admin_token_create_remove(api_client): | CODE |
| LOW | …ent-python/tests/02-integration/entities/test_group.py | 24 | def test_group_default_markings(api_client): | CODE |
| LOW | …ent-python/tests/02-integration/entities/test_group.py | 72 | def test_group_allowed_markings(api_client): | CODE |
| LOW | …t-python/tests/02-integration/entities/test_malware.py | 4 | def test_malware_import_with_sample_refs(api_client): | CODE |
| LOW | …hon/tests/02-integration/entities/test_upload_files.py | 4 | def test_create_entity_with_embedded_file(api_client): | CODE |
| LOW | …thon/tests/02-integration/entities/test_observables.py | 6 | def test_windows_registry_key_values_creation(api_client): | CODE |
| LOW | …thon/tests/02-integration/entities/test_observables.py | 55 | def test_promote_observable_to_indicator_deprecated(api_client): | CODE |
| LOW | …thon/tests/02-integration/entities/test_observables.py | 67 | def test_certificate_creation_mapping(api_client): | CODE |
| LOW | …ython/tests/02-integration/entities/test_indicators.py | 36 | def test_indicator_stix_marshall(api_client): | CODE |
| LOW | …nt-python/tests/01-unit/test_no_libmagic_dependency.py | 21 | def test_module_does_not_import_magic(module_name): | CODE |
| LOW | …1-unit/connector_helper/test_api_listen_concurrency.py | 141 | def test_health_check_responds_while_callback_is_processing(self): | CODE |
| LOW | …1-unit/connector_helper/test_api_listen_concurrency.py | 172 | def test_concurrent_callbacks_are_serialized(self): | CODE |
| LOW | …1-unit/connector_helper/test_api_listen_concurrency.py | 206 | def test_stop_shuts_down_executor_without_pika_connection(self): | CODE |
| 263 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | opencti-platform/opencti-dev/docker-compose.yml | 94 | OPENSEARCH_HOSTS: '["http://opencti-dev-opensearch:9200"]' # Define the OpenSearch nodes that OpenSearch Dashboard | CODE |
| MEDIUM | opencti-worker/src/push_handler.py | 171 | # Create a specific channel to push the split bundles | COMMENT |
| MEDIUM | .github/labels.yml | 4 | # This file is the machine-readable companion to .github/LABELS.md and the source | COMMENT |
| MEDIUM | client-python/tests/cases/entities.py | 288 | # Create the organization | COMMENT |
| MEDIUM | …ient-python/tests/02-integration/entities/test_user.py | 64 | # Create the token | COMMENT |
| MEDIUM⚡ | …hon/tests/01-unit/api/test_opencti_api_client-proxy.py | 49 | # Create a temporary file with certificate content | COMMENT |
| MEDIUM | …hon/tests/01-unit/api/test_opencti_api_client-proxy.py | 70 | # Create a temporary file with invalid content | COMMENT |
| MEDIUM | …hon/tests/01-unit/api/test_opencti_api_client-proxy.py | 223 | # Create a real temporary directory | COMMENT |
| MEDIUM | …ent-python/examples/get_reports_about_intrusion_set.py | 14 | # Create the Intrusion Set | COMMENT |
| MEDIUM⚡ | …xamples/create_campaign_attributed-to_intrusion_set.py | 15 | # Define the date | COMMENT |
| MEDIUM⚡ | …xamples/create_campaign_attributed-to_intrusion_set.py | 18 | # Create the Intrusion Set | COMMENT |
| MEDIUM⚡ | …xamples/create_campaign_attributed-to_intrusion_set.py | 28 | # Create the Campaign | COMMENT |
| MEDIUM | …ent-python/examples/create_security_coverage_result.py | 33 | # Create a security coverage result | COMMENT |
| MEDIUM | client-python/examples/export_incident_stix2.py | 25 | # Create the bundle | COMMENT |
| MEDIUM | client-python/examples/create_intrusion_set.py | 14 | # Create the Intrusion Set | COMMENT |
| MEDIUM⚡ | …n/examples/create_incident_with_ttps_and_indicators.py | 15 | # Define the date | COMMENT |
| MEDIUM⚡ | …n/examples/create_incident_with_ttps_and_indicators.py | 22 | # Create the incident | COMMENT |
| MEDIUM⚡ | …n/examples/create_incident_with_ttps_and_indicators.py | 29 | # Create the associated report | COMMENT |
| MEDIUM | …n/examples/create_incident_with_ttps_and_indicators.py | 64 | # Create the observable and indicator and indicates to the relation | COMMENT |
| MEDIUM | …n/examples/create_incident_with_ttps_and_indicators.py | 65 | # Create the observable | COMMENT |
| MEDIUM | …n/examples/create_incident_with_ttps_and_indicators.py | 109 | # Create the relation | COMMENT |
| MEDIUM | …n/examples/create_incident_with_ttps_and_indicators.py | 124 | # Create the observable and indicator and indicates to the relation | COMMENT |
| MEDIUM | …n/examples/create_incident_with_ttps_and_indicators.py | 125 | # Create the observable | COMMENT |
| MEDIUM | …ent-python/examples/add_tool_usage_to_intrusion-set.py | 23 | # Create the relation | COMMENT |
| MEDIUM | client-python/examples/export_report_stix2.py | 14 | # Create the bundle | COMMENT |
| MEDIUM | …thon/examples/upload_file_to_intrusion_set_embedded.py | 14 | # Create the Intrusion Set | COMMENT |
| MEDIUM⚡ | client-python/examples/create_report_with_author.py | 15 | # Define the date | COMMENT |
| MEDIUM⚡ | client-python/examples/create_report_with_author.py | 18 | # Create the author (if not exists) | COMMENT |
| MEDIUM⚡ | client-python/examples/create_report_with_author.py | 26 | # Create the report | COMMENT |
| MEDIUM | client-python/examples/export_incidents_stix2.py | 14 | # Create the bundle | COMMENT |
| MEDIUM | client-python/examples/add_label_to_observable.py | 13 | # Create the observable | COMMENT |
| MEDIUM | client-python/examples/add_label_to_observable.py | 17 | # Create the tag (if not exists) | COMMENT |
| MEDIUM⚡ | …nt-python/examples/add_external_reference_to_report.py | 15 | # Define the date | COMMENT |
| MEDIUM⚡ | …nt-python/examples/add_external_reference_to_report.py | 18 | # Create the report | COMMENT |
| MEDIUM⚡ | …nt-python/examples/add_external_reference_to_report.py | 26 | # Create the external reference | COMMENT |
| MEDIUM | …on/examples/upload_file_with_intrusion_set_embedded.py | 19 | # Create the Intrusion Set | COMMENT |
| MEDIUM | client-python/examples/create_indicator_of_campaign.py | 15 | # Define the date | COMMENT |
| MEDIUM | client-python/examples/create_indicator_of_campaign.py | 18 | # Create the Campaign | COMMENT |
| MEDIUM | client-python/examples/create_indicator_of_campaign.py | 29 | # Create the indicator | COMMENT |
| MEDIUM | client-python/examples/create_indicator_of_campaign.py | 40 | # Create the relation | COMMENT |
| MEDIUM | client-python/examples/create_indicator_of_campaign.py | 53 | # Create the observables (optional) | COMMENT |
| MEDIUM | client-python/examples/create_indicator_of_campaign.py | 60 | # Create the relation between observables and the indicator | COMMENT |
| MEDIUM | client-python/examples/get_indicators_of_malware.py | 14 | # Create the Malware | COMMENT |
| MEDIUM | client-python/examples/get_malwares_of_intrusion_set.py | 14 | # Create the Intrusion Set | COMMENT |
| MEDIUM | client-python/examples/update_entity_attribute.py | 14 | # Create the Intrusion Set | COMMENT |
| MEDIUM | client-python/examples/export_intrusion_set_stix2.py | 14 | # Create the bundle | COMMENT |
| MEDIUM | client-python/examples/create_marking_definition.py | 13 | # Create the marking definition | COMMENT |
| MEDIUM | client-python/examples/upload_file_to_intrusion_set.py | 14 | # Create the Intrusion Set | COMMENT |
| MEDIUM | client-python/examples/add_label_to_malware.py | 13 | # Create the malware | COMMENT |
| MEDIUM | client-python/examples/add_label_to_malware.py | 18 | # Create the tag (if not exists) | COMMENT |
| MEDIUM | client-python/examples/add_organization_to_sector.py | 18 | # Create the organization | COMMENT |
| MEDIUM | client-python/examples/add_organization_to_sector.py | 23 | # Create the relation | COMMENT |
| MEDIUM | client-python/examples/update_observable_attributes.py | 13 | # Create an observable | COMMENT |
| MEDIUM | client-python/examples/ask_enrichment_of_observable.py | 15 | # Create the observable | COMMENT |
| MEDIUM | client-python/pycti/utils/opencti_stix2.py | 1799 | # Create the relation | STRING |
| MEDIUM | client-python/pycti/utils/opencti_stix2.py | 1894 | # Create the sighting | STRING |
| MEDIUM | …ent-python/pycti/connector/opencti_connector_helper.py | 2457 | # Initialize ConnectorInfo instance | COMMENT |
| MEDIUM | …ent-python/pycti/connector/opencti_connector_helper.py | 2509 | # Create a token | COMMENT |
| MEDIUM | client-python/pycti/api/opencti_api_client.py | 271 | # Define the dependencies | COMMENT |
| MEDIUM | client-python/pycti/api/opencti_api_client.py | 285 | # Define the entities | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …hql/tests/03-integration/02-resolvers/playbook-test.ts | 377 | filters: [{ key: ['fake_key'], values: [], operator: 'nil' }], | CODE |
| LOW | …hql/tests/03-integration/02-resolvers/playbook-test.ts | 503 | filters: [{ key: ['fake_key'], values: [], operator: 'nil' }], | CODE |
| LOW | …aphql/tests/03-integration/01-database/xtm-hub-test.ts | 21 | const xtm_hub_token = 'fake-token'; | CODE |
| LOW | …aphql/tests/03-integration/01-database/xtm-hub-test.ts | 404 | xtm_hub_token: 'fake-token', | CODE |
| LOW | …aphql/tests/03-integration/01-database/xtm-hub-test.ts | 475 | expect(consumeProvisionedNewsFeedItemsSpy).toHaveBeenCalledWith('settings_id', 'fake-token'); | CODE |
| LOW | …ation/10-modules/decayRules/decayRule-resolver-test.ts | 449 | variables: { id: 'dummy-id' }, | CODE |
| LOW | …ation/10-modules/decayRules/decayRule-resolver-test.ts | 454 | variables: { id: 'dummy-id' }, | CODE |
| LOW | …/opencti-graphql/tests/01-unit/database/engine-test.js | 197 | const emails = ['user@example.com', 'user2@example.com', 'user3@example.com']; | CODE |
| LOW | …rm/opencti-graphql/tests/01-unit/database/smtp-test.ts | 132 | oauthUser: 'user@example.com', | CODE |
| LOW | …rm/opencti-graphql/tests/01-unit/database/smtp-test.ts | 150 | user: 'user@example.com', | CODE |
| LOW | …rm/opencti-graphql/tests/01-unit/database/smtp-test.ts | 178 | expect(result).toHaveProperty('user', 'user@example.com'); | CODE |
| LOW | …rm/opencti-graphql/tests/01-unit/database/smtp-test.ts | 189 | await expect(buildSmtpAuth('oauth2', { oauthUser: 'user@example.com' })).rejects.toThrow( | CODE |
| LOW | …rm/opencti-graphql/tests/01-unit/database/smtp-test.ts | 196 | oauthUser: 'user@example.com', | CODE |
| LOW⚡ | …rm/opencti-graphql/tests/01-unit/database/smtp-test.ts | 323 | const result = await buildSmtpAuth('basic', { username: 'user@example.com', password: 'mypassword' }); | CODE |
| LOW⚡ | …rm/opencti-graphql/tests/01-unit/database/smtp-test.ts | 324 | expect(result).toStrictEqual({ user: 'user@example.com', pass: 'mypassword' }); | CODE |
| LOW⚡ | …rm/opencti-graphql/tests/01-unit/database/smtp-test.ts | 328 | const result = await buildSmtpAuth(undefined, { username: 'user@example.com', password: 'mypassword' }); | CODE |
| LOW⚡ | …rm/opencti-graphql/tests/01-unit/database/smtp-test.ts | 329 | expect(result).toStrictEqual({ user: 'user@example.com', pass: 'mypassword' }); | CODE |
| LOW⚡ | …rm/opencti-graphql/tests/01-unit/database/smtp-test.ts | 333 | const result = await buildSmtpAuth('basic', { username: 'user@example.com' }); | CODE |
| LOW⚡ | …rm/opencti-graphql/tests/01-unit/database/smtp-test.ts | 334 | expect(result).toStrictEqual({ user: 'user@example.com', pass: '' }); | CODE |
| LOW | …rm/opencti-graphql/tests/01-unit/database/smtp-test.ts | 354 | const result = await buildSmtpAuth('something-else', { username: 'user@example.com', password: 'p' }); | CODE |
| LOW | …rm/opencti-graphql/tests/01-unit/database/smtp-test.ts | 355 | expect(result).toStrictEqual({ user: 'user@example.com', pass: 'p' }); | CODE |
| LOW | …rm/opencti-graphql/tests/01-unit/database/smtp-test.ts | 371 | oauthUser: 'user@example.com', | CODE |
| LOW⚡ | …rm/opencti-graphql/tests/01-unit/database/smtp-test.ts | 621 | const result = await smtpTest('admin@example.com'); | CODE |
| LOW⚡ | …rm/opencti-graphql/tests/01-unit/database/smtp-test.ts | 625 | expect(call.to).toBe('admin@example.com'); | CODE |
| LOW⚡ | …rm/opencti-graphql/tests/01-unit/database/smtp-test.ts | 633 | await expect(smtpTest('admin@example.com')).rejects.toThrow('connection refused'); | CODE |
| LOW | …abase/stix-2-0-converter-fixtures/SCOs/payment-card.ts | 9 | holder_name: 'John Doe', | CODE |
| LOW | …abase/stix-2-0-converter-fixtures/SCOs/payment-card.ts | 26 | holder_name: 'John Doe', | CODE |
| LOW | …hql/tests/01-unit/utils/streamConsumerRegistry-test.ts | 275 | userEmail: 'admin@example.com', | CODE |
| LOW⚡ | …tform/opencti-graphql/tests/01-unit/utils/hash-test.ts | 7 | const CONTENT_1 = `Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt | CODE |
| LOW⚡ | …tform/opencti-graphql/tests/01-unit/utils/hash-test.ts | 7 | const CONTENT_1 = `Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt | CODE |
| LOW⚡ | …tform/opencti-graphql/tests/01-unit/utils/hash-test.ts | 14 | const CONTENT_2 = `Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt | CODE |
| LOW⚡ | …tform/opencti-graphql/tests/01-unit/utils/hash-test.ts | 14 | const CONTENT_2 = `Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt | CODE |
| LOW⚡ | …tform/opencti-graphql/tests/01-unit/utils/hash-test.ts | 21 | const CONTENT_3 = `Lorem ipsomme dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt | CODE |
| LOW | …graphql/tests/01-unit/manager/publisherManager-test.ts | 131 | name: 'John Doe', | CODE |
| LOW | …/modules/authenticationProvider/mappings-utils-test.ts | 39 | 'http://example.com/claims/email': 'user@example.com', | CODE |
| LOW | …/modules/authenticationProvider/mappings-utils-test.ts | 43 | expect(result).toBe('user@example.com'); | CODE |
| LOW⚡ | …/modules/authenticationProvider/mappings-utils-test.ts | 235 | const obj = { UserInfo: { Email: 'user@example.com' } }; | CODE |
| LOW⚡ | …/modules/authenticationProvider/mappings-utils-test.ts | 237 | expect(result).toBe('user@example.com'); | CODE |
| LOW⚡ | …/modules/authenticationProvider/mappings-utils-test.ts | 247 | const obj = { User_Info: { EMAIL: 'user@example.com' } }; | CODE |
| LOW⚡ | …/modules/authenticationProvider/mappings-utils-test.ts | 249 | expect(result).toBe('user@example.com'); | CODE |
| LOW | …nit/modules/configPreset/configPreset-registry-test.ts | 39 | platform_email: 'admin@example.com', | CODE |
| LOW | …nit/modules/configPreset/configPreset-registry-test.ts | 319 | ['secret', 'enterprise_license', 'admin@example.com', 'cert_auth', 'local_auth', 'otp_mandatory', 'platform_theme', | CODE |
| LOW | …les/disseminationList/disseminationList-domain-test.ts | 74 | const mockUser = { id: 'user-1', user_email: 'user@example.com' } as any; | CODE |
| LOW | …les/disseminationList/disseminationList-domain-test.ts | 125 | expect(sendMailArgs.bcc).toStrictEqual(['a@example.com', 'b@example.com', 'user@example.com']); | CODE |
| LOW | …graphql/tests/01-unit/modules/user/user-domain-test.ts | 40 | user_email: 'test@test.com', | CODE |
| LOW | …graphql/tests/01-unit/modules/user/user-domain-test.ts | 218 | expect(input.value).toEqual(['test@test.com']); | CODE |
| LOW | …aphql/tests/01-unit/modules/user/user-resolver-test.ts | 48 | const self = { id: 'user-id', name: 'John Doe', entity_type: ENTITY_TYPE_USER }; | CODE |
| LOW | …aphql/tests/01-unit/modules/user/user-resolver-test.ts | 49 | expect(resolveField(memberResolvers.name, self, { user: { id: 'user-id' } })).toEqual('John Doe'); | CODE |
| LOW | …hql/tests/01-unit/modules/user/user-definition-test.ts | 25 | expect(extractStixRepresentative(convertUserToStix(buildUser('John Doe')))).toEqual('John Doe'); | CODE |
| LOW | …phql/tests/01-unit/modules/user/user-converter-test.ts | 16 | name: 'John Doe', | CODE |
| LOW | …pencti-graphql/tests/01-unit/modules/user/user-test.ts | 29 | updateAttribute: vi.fn().mockResolvedValue({ element: { id: 'mock-id', user_email: 'test@test.com' } }), | CODE |
| LOW | …s/01-unit/modules/user/user-api-token-security-test.ts | 213 | const result = await sessionLogin(context, { email: 'user@example.com', password: 'pass' }); | CODE |
| LOW | …s/01-unit/modules/user/user-api-token-security-test.ts | 226 | await sessionLogin(context, { email: 'user@example.com', password: 'pass' }); | CODE |
| LOW | …s/01-unit/modules/user/user-api-token-security-test.ts | 255 | sessionLogin(context, { email: 'user@example.com', password: 'pass' }), | CODE |
| LOW | …s/01-unit/modules/user/user-api-token-security-test.ts | 276 | const result = await sessionLogin(context, { email: 'user@example.com', password: 'pass' }); | CODE |
| LOW | …encti-graphql/tests/01-unit/domain/form-intake-test.ts | 9 | const entity = { entity_type: 'Individual', name: 'John Doe' } as StoreEntity; | CODE |
| LOW | …encti-graphql/tests/01-unit/domain/form-intake-test.ts | 29 | const entity = { entity_type: 'Individual', name: 'Jane Doe' } as StoreEntity; | CODE |
| LOW | …orm/opencti-graphql/tests/data/DATA-TEST-STIX2_v2.json | 558 | "name": "John Doe", | CODE |
| LOW | …orm/opencti-graphql/tests/data/data-test-stix-e2e.json | 352 | "name": "John Doe", | CODE |
| LOW | …ncti-graphql/tests/data/filters/DATA-TEST-FILTERS.json | 454 | "name": "John Doe", | CODE |
| 47 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | …ql/tests/03-integration/02-resolvers/connector-test.ts | 489 | expect(queryResult.data.pingConnector.connector_info.next_run_datetime.toISOString()).toBe(datetimeNextRun.toISOStri | CODE |
| CRITICAL | …ql/tests/03-integration/02-resolvers/connector-test.ts | 490 | expect(queryResult.data.pingConnector.connector_info.last_run_datetime.toISOString()).toBe(datetimeLastRun.toISOStri | CODE |
| CRITICAL | …/playbookComponents/create-indicator-component-test.ts | 745 | const titles = schema.properties.types.items.oneOf.map((e: { | CODE |
| CRITICAL | …tests/20-rules/report-refs-observable-based-on-test.js | 178 | const inferenceEdge = queryResult.data.report.objects.edges.find((e) => e.node.standard_id === 'indicator--b05c9d2 | CODE |
| CRITICAL | …latform/opencti-graphql/src/graphql/telemetryPlugin.js | 35 | type: requestError ? sendContext.response.body.singleResult.errors.at(0)?.name ?? requestError.name : undefine | CODE |
| CRITICAL | …s/fields/markdownField/hooks/useMarkdownImages.test.ts | 68 | const attachment = hook.result.current.registryRef.current.createTempAttachment(file); | CODE |
| CRITICAL | …s/fields/markdownField/hooks/useMarkdownImages.test.ts | 71 | hook.result.current.pendingCleanupTimeoutRef.current.set(token, timeoutId); | CODE |
| CRITICAL | …s/fields/markdownField/hooks/useMarkdownImages.test.ts | 87 | expect(hook.result.current.pendingCleanupTimeoutRef.current.has(token)).toBe(false); | CODE |
| CRITICAL | …s/fields/markdownField/hooks/useMarkdownImages.test.ts | 88 | expect(hook.result.current.registryRef.current.getAttachment(token)).toBeUndefined(); | CODE |
| CRITICAL | …_domain_objects/StixDomainObjectVictimologySectors.jsx | 150 | sectors: n.node.to.sectors.edges.map( | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …l/tests/03-integration/02-resolvers/user-token-test.ts | 181 | COMMENT | |
| LOW | …3-integration/02-resolvers/connector-migration-test.ts | 321 | }); | COMMENT |
| LOW | …3-integration/02-resolvers/connector-migration-test.ts | 341 | // FUNCTIONAL_ERROR, | COMMENT |
| LOW | …3-integration/02-resolvers/connector-migration-test.ts | 361 | // 'Connector not found', | COMMENT |
| LOW | …3-integration/02-resolvers/connector-migration-test.ts | 381 | // expect(standaloneConnector.connector_user_id).toMatch(userId); | COMMENT |
| LOW | …s/03-integration/05-parser/importCsv-connector-test.ts | 41 | workId: work.id, | COMMENT |
| LOW | …s/03-integration/05-parser/importCsv-connector-test.ts | 61 | // next 5 lines: | COMMENT |
| LOW | …latform/opencti-graphql/tests/utils/testQueryHelper.ts | 21 | import { ADMIN_USER, getAuthUser, getOrganizationIdByName, type OrganizationTestData, testContext, type UserTestData } f | COMMENT |
| LOW | …ql/tests/20-rules/report-refs-identity-part-of-test.js | 21 | const createdElements = []; | COMMENT |
| LOW | …tests/20-rules/report-refs-observable-based-on-test.js | 21 | COMMENT | |
| LOW | …nit/database/middleware-restricted-entity-unit-test.ts | 41 | // ── Reproduction of GitHub issue #18026 ────────────────────────────────────── | COMMENT |
| LOW | …s/01-unit/modules/workflow-lifecycle-benchmark-test.ts | 1 | import { beforeEach, describe, expect, it, vi } from 'vitest'; | COMMENT |
| LOW | …tform/opencti-graphql/src/types/stix-2-1-extensions.ts | 1 | // Common attribute of OCTI added to every entities | COMMENT |
| LOW | …pencti-graphql/src/python/runtime/snort/snort_dicts.py | 81 | # systems. | COMMENT |
| LOW | …pencti-graphql/src/python/runtime/snort/snort_dicts.py | 121 | # content in the packet payload and trigger | COMMENT |
| LOW | …pencti-graphql/src/python/runtime/snort/snort_dicts.py | 141 | # The nocase keyword allows the rule writer to | COMMENT |
| LOW | …pencti-graphql/src/python/runtime/snort/snort_dicts.py | 161 | # ignore before starting to search for the | COMMENT |
| LOW | …pencti-graphql/src/python/runtime/snort/snort_dicts.py | 181 | # that restricts the search to the extracted | COMMENT |
| LOW | …pencti-graphql/src/python/runtime/snort/snort_dicts.py | 201 | # that restricts the search to the extracted | COMMENT |
| LOW | …pencti-graphql/src/python/runtime/snort/snort_dicts.py | 221 | # the same content. | COMMENT |
| LOW | …pencti-graphql/src/python/runtime/snort/snort_dicts.py | 241 | # NOTE: The http_stat_msg modifier is not allowed | COMMENT |
| LOW | …pencti-graphql/src/python/runtime/snort/snort_dicts.py | 261 | # 1. http_cookie, | COMMENT |
| LOW | …pencti-graphql/src/python/runtime/snort/snort_dicts.py | 281 | # with the fast pattern matcher. | COMMENT |
| LOW | …pencti-graphql/src/python/runtime/snort/snort_dicts.py | 301 | # option, check the manual for pitfalls. | COMMENT |
| LOW | …pencti-graphql/src/python/runtime/snort/snort_dicts.py | 321 | # 7. SMTP/POP/IMAP data body | COMMENT |
| LOW | …pencti-graphql/src/python/runtime/snort/snort_dicts.py | 341 | # TODO: check for options. | COMMENT |
| LOW | …pencti-graphql/src/python/runtime/snort/snort_dicts.py | 361 | # value and a specified value or | COMMENT |
| LOW | …pencti-graphql/src/python/runtime/snort/snort_dicts.py | 381 | # to set flow-bits based on a client bind to a | COMMENT |
| LOW | …pencti-graphql/src/python/runtime/snort/snort_dicts.py | 401 | # codes specified matches the status codes of | COMMENT |
| LOW | …pencti-graphql/src/python/runtime/snort/snort_dicts.py | 421 | # TODO: identify also gtp message types, but for | COMMENT |
| LOW | …pencti-graphql/src/python/runtime/snort/snort_dicts.py | 461 | "id", | COMMENT |
| LOW | …pencti-graphql/src/python/runtime/snort/snort_dicts.py | 481 | "flags", | COMMENT |
| LOW | …pencti-graphql/src/python/runtime/snort/snort_dicts.py | 501 | # a specific TCP window size | COMMENT |
| LOW | …pencti-graphql/src/python/runtime/snort/snort_dicts.py | 521 | "sameip", | COMMENT |
| LOW | …pencti-graphql/src/python/runtime/snort/snort_dicts.py | 561 | # This keyword implements an ability for users to | COMMENT |
| LOW | opencti-platform/opencti-graphql/src/utils/refang.js | 21 | // Refang common obfuscations (all patterns from both functions) | COMMENT |
| LOW | opencti-platform/opencti-graphql/src/utils/refang.js | 41 | // Replace [://] or similar with :// | COMMENT |
| LOW | …ti-platform/opencti-graphql/src/resolvers/container.js | 61 | relatedContainers: (container, args, context) => relatedContainers(context, context.user, container.id, args), | COMMENT |
| LOW | …-platform/opencti-graphql/src/http/httpChatbotProxy.ts | 21 | COMMENT | |
| LOW | …-platform/opencti-graphql/src/http/httpChatbotProxy.ts | 381 | COMMENT | |
| LOW | …-platform/opencti-graphql/src/http/httpChatbotProxy.ts | 761 | logApp.warn('Chatbot file download rejected due to invalid draft context', { cause: draftErr }); | COMMENT |
| LOW | …-platform/opencti-graphql/src/http/httpChatbotProxy.ts | 1121 | res.setHeader('X-Accel-Buffering', 'no'); | COMMENT |
| LOW | …-platform/opencti-graphql/src/http/httpChatbotProxy.ts | 1201 | // so validate the draft context explicitly before either serving a cached | COMMENT |
| LOW | opencti-platform/opencti-graphql/src/http/httpUtils.ts | 61 | // Keep only the pathname and search to prevent OPEN REDIRECT CWE-601 | COMMENT |
| LOW | …opencti-graphql/src/telemetry/TelemetryMeterManager.ts | 61 | // whole helper exists to withhold. Callers treat '' as "no usable identity". | COMMENT |
| LOW | opencti-platform/opencti-front/vitest.d.ts | 1 | import type { TestingLibraryMatchers } from '@testing-library/jest-dom/matchers'; | COMMENT |
| LOW | opencti-platform/opencti-front/playwright.config.ts | 101 | width: 1920, | COMMENT |
| LOW | opencti-platform/opencti-front/playwright.config.ts | 201 | // } | COMMENT |
| LOW | …opencti-front/tests_e2e/trash/createTrashEntry.spec.ts | 1 | // TODO: uncomment when feature flag is removed, since e2e backend tests currently use default feature flag config | COMMENT |
| LOW | …opencti-front/tests_e2e/trash/createTrashEntry.spec.ts | 21 | // await page.getByRole('link', { name: reportName }).first().getByRole('checkbox').click(); | COMMENT |
| LOW | …cti-front/tests_e2e/model/field/TextField.pageModel.ts | 41 | this.parentLocator = root.getByText(label).locator('../..'); | COMMENT |
| LOW | …platform/opencti-front/tests_e2e/report/report.spec.ts | 381 | // scoped to the dialog — name = "Jeanne Mitchel Report" — so the name can no longer be | COMMENT |
| LOW | …platform/opencti-front/tests_e2e/report/report.spec.ts | 401 | // only the colour can report itself missing. The other mount — the shared | COMMENT |
| LOW | …platform/opencti-front/tests_e2e/report/report.spec.ts | 461 | await entitiesTab.addEntity('This is a note'); | COMMENT |
| LOW | …platform/opencti-front/tests_e2e/report/report.spec.ts | 481 | // await toolbar.launchDelete(); | COMMENT |
| LOW | …m/opencti-front/tests_e2e/report/assets/report.test.md | 1 | # Test report e2e | COMMENT |
| LOW | …nt/tests_e2e/incidentResponse/incidentResponse.spec.ts | 321 | // Create author from the incident response creation form | COMMENT |
| LOW | …nt/tests_e2e/incidentResponse/incidentResponse.spec.ts | 341 | // | COMMENT |
| LOW | …s_e2e/incidentResponse/assets/incidentResponse.test.md | 1 | # incident response test md | COMMENT |
| LOW | …-platform/opencti-front/src/components/SearchInput.jsx | 281 | const nlqNoAgentAvailable = useXtmOne && nlqAgentsFetched && nlqAgents.length === 0; | COMMENT |
| 17 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …m/opencti-graphql/src/python/testing/local_uploader.py | 1 | CODE | |
| LOW | client-python/pycti/__init__.py | 4 | CODE | |
| LOW | client-python/pycti/__init__.py | 5 | CODE | |
| LOW | client-python/pycti/__init__.py | 6 | CODE | |
| LOW | client-python/pycti/__init__.py | 7 | CODE | |
| LOW | client-python/pycti/__init__.py | 7 | CODE | |
| LOW | client-python/pycti/__init__.py | 8 | CODE | |
| LOW | client-python/pycti/__init__.py | 8 | CODE | |
| LOW | client-python/pycti/__init__.py | 12 | CODE | |
| LOW | client-python/pycti/__init__.py | 13 | CODE | |
| LOW | client-python/pycti/__init__.py | 14 | CODE | |
| LOW | client-python/pycti/__init__.py | 15 | CODE | |
| LOW | client-python/pycti/__init__.py | 16 | CODE | |
| LOW | client-python/pycti/__init__.py | 17 | CODE | |
| LOW | client-python/pycti/__init__.py | 18 | CODE | |
| LOW | client-python/pycti/__init__.py | 19 | CODE | |
| LOW | client-python/pycti/__init__.py | 20 | CODE | |
| LOW | client-python/pycti/__init__.py | 21 | CODE | |
| LOW | client-python/pycti/__init__.py | 22 | CODE | |
| LOW | client-python/pycti/__init__.py | 23 | CODE | |
| LOW | client-python/pycti/__init__.py | 24 | CODE | |
| LOW | client-python/pycti/__init__.py | 25 | CODE | |
| LOW | client-python/pycti/__init__.py | 26 | CODE | |
| LOW | client-python/pycti/__init__.py | 27 | CODE | |
| LOW | client-python/pycti/__init__.py | 28 | CODE | |
| LOW | client-python/pycti/__init__.py | 29 | CODE | |
| LOW | client-python/pycti/__init__.py | 30 | CODE | |
| LOW | client-python/pycti/__init__.py | 31 | CODE | |
| LOW | client-python/pycti/__init__.py | 32 | CODE | |
| LOW | client-python/pycti/__init__.py | 33 | CODE | |
| LOW | client-python/pycti/__init__.py | 34 | CODE | |
| LOW | client-python/pycti/__init__.py | 35 | CODE | |
| LOW | client-python/pycti/__init__.py | 36 | CODE | |
| LOW | client-python/pycti/__init__.py | 37 | CODE | |
| LOW | client-python/pycti/__init__.py | 38 | CODE | |
| LOW | client-python/pycti/__init__.py | 39 | CODE | |
| LOW | client-python/pycti/__init__.py | 40 | CODE | |
| LOW | client-python/pycti/__init__.py | 41 | CODE | |
| LOW | client-python/pycti/__init__.py | 42 | CODE | |
| LOW | client-python/pycti/__init__.py | 43 | CODE | |
| LOW | client-python/pycti/__init__.py | 44 | CODE | |
| LOW | client-python/pycti/__init__.py | 45 | CODE | |
| LOW | client-python/pycti/__init__.py | 46 | CODE | |
| LOW | client-python/pycti/__init__.py | 47 | CODE | |
| LOW | client-python/pycti/__init__.py | 48 | CODE | |
| LOW | client-python/pycti/__init__.py | 49 | CODE | |
| LOW | client-python/pycti/__init__.py | 50 | CODE | |
| LOW | client-python/pycti/__init__.py | 51 | CODE | |
| LOW | client-python/pycti/__init__.py | 52 | CODE | |
| LOW | client-python/pycti/__init__.py | 53 | CODE | |
| LOW | client-python/pycti/__init__.py | 54 | CODE | |
| LOW | client-python/pycti/__init__.py | 55 | CODE | |
| LOW | client-python/pycti/__init__.py | 56 | CODE | |
| LOW | client-python/pycti/__init__.py | 57 | CODE | |
| LOW | client-python/pycti/__init__.py | 60 | CODE | |
| LOW | client-python/pycti/__init__.py | 61 | CODE | |
| LOW | client-python/pycti/__init__.py | 62 | CODE | |
| LOW | client-python/pycti/__init__.py | 63 | CODE | |
| LOW | client-python/pycti/__init__.py | 64 | CODE | |
| LOW | client-python/pycti/__init__.py | 65 | CODE | |
| 36 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …ncti-graphql/src/python/runtime/utils/runtime_utils.py | 11 | except Exception as e: | CODE |
| MEDIUM | …ncti-graphql/src/python/runtime/utils/runtime_utils.py | 7 | def return_data(data): | CODE |
| LOW | …encti-graphql/src/python/runtime/snort/snort_parser.py | 190 | except Exception as e: | CODE |
| LOW | …encti-graphql/src/python/runtime/snort/snort_parser.py | 204 | except Exception as e: | CODE |
| LOW | …encti-graphql/src/python/runtime/snort/snort_parser.py | 265 | except Exception as e: | CODE |
| LOW | …encti-graphql/src/python/runtime/snort/snort_parser.py | 360 | except Exception as perror: | CODE |
| LOW | …encti-graphql/src/python/runtime/snort/snort_parser.py | 368 | except Exception as serror: | CODE |
| LOW | …m/opencti-graphql/src/python/testing/local_importer.py | 32 | except Exception as e: # pylint: disable=broad-except | CODE |
| LOW | …m/opencti-graphql/src/python/testing/local_uploader.py | 36 | except Exception as e: # pylint: disable=broad-except | CODE |
| LOW | …m/opencti-graphql/src/python/testing/local_exporter.py | 59 | except Exception as e: # pylint: disable=broad-except | CODE |
| LOW | …encti-graphql/src/python/testing/local_synchronizer.py | 130 | except Exception as e: # pylint: disable=broad-except | CODE |
| LOW | docs/docs/development/connectors.md | 170 | except Exception as e: | CODE |
| LOW | docs/docs/development/connectors.md | 195 | except Exception as e: | CODE |
| LOW | docs/docs/development/connectors.md | 383 | except Exception as ex: | CODE |
| LOW | docs/docs/development/connectors.md | 433 | except Exception as ex: | CODE |
| LOW | opencti-worker/src/worker.py | 340 | except Exception as e: # pylint: disable=broad-except | CODE |
| LOW | opencti-worker/src/message_queue_consumer.py | 49 | except Exception as e: | CODE |
| LOW | opencti-worker/src/message_queue_consumer.py | 98 | except Exception as e: | CODE |
| MEDIUM | opencti-worker/src/message_queue_consumer.py | 69 | def consume_queue(self) -> None: | CODE |
| LOW | opencti-worker/src/listen_handler.py | 78 | except Exception as ex: | CODE |
| LOW | opencti-worker/src/push_handler.py | 89 | except Exception as e: | CODE |
| LOW | opencti-worker/src/push_handler.py | 138 | except Exception as err: # pylint: disable=broad-except | CODE |
| LOW | opencti-worker/src/push_handler.py | 178 | except Exception as err: # pylint: disable=broad-except | CODE |
| LOW | opencti-worker/src/push_handler.py | 271 | except Exception as ex: | CODE |
| LOW | opencti-worker/src/push_handler.py | 281 | except Exception as telemetry_ex: # pylint: disable=broad-except | CODE |
| LOW | client-python/pycti/utils/opencti_stix2.py | 3839 | except Exception as ex: # pylint: disable=broad-except | CODE |
| LOW | client-python/pycti/utils/opencti_stix2.py | 1037 | except Exception: | STRING |
| LOW | client-python/pycti/utils/opencti_stix2_update.py | 523 | except Exception as err: | CODE |
| MEDIUM | …ent-python/pycti/connector/opencti_connector_helper.py | 1840 | def _sanitize_connector_error(error) -> Optional[Dict]: | CODE |
| MEDIUM | …ent-python/pycti/connector/opencti_connector_helper.py | 1859 | def _sanitize_connector_errors(errors) -> List[Dict]: | CODE |
| LOW⚡ | …ent-python/pycti/connector/opencti_connector_helper.py | 911 | except Exception as err: # pylint: disable=broad-except | CODE |
| LOW⚡ | …ent-python/pycti/connector/opencti_connector_helper.py | 919 | except Exception as err: # pylint: disable=broad-except | CODE |
| LOW⚡ | …ent-python/pycti/connector/opencti_connector_helper.py | 922 | except Exception as errInException: | CODE |
| LOW⚡ | …ent-python/pycti/connector/opencti_connector_helper.py | 1855 | except Exception: # pylint: disable=broad-except | CODE |
| LOW⚡ | …ent-python/pycti/connector/opencti_connector_helper.py | 1866 | except Exception: # pylint: disable=broad-except | CODE |
| LOW | …ent-python/pycti/connector/opencti_connector_helper.py | 749 | except Exception as e: # pylint: disable=broad-except | CODE |
| LOW | …ent-python/pycti/connector/opencti_connector_helper.py | 758 | except Exception: # pylint: disable=broad-except | CODE |
| LOW | …ent-python/pycti/connector/opencti_connector_helper.py | 787 | except Exception as e: | CODE |
| LOW | …ent-python/pycti/connector/opencti_connector_helper.py | 839 | except Exception as e: | CODE |
| LOW | …ent-python/pycti/connector/opencti_connector_helper.py | 1079 | except Exception as e: # pylint: disable=broad-except | CODE |
| LOW | …ent-python/pycti/connector/opencti_connector_helper.py | 1155 | except Exception as ex: | CODE |
| LOW | …ent-python/pycti/connector/opencti_connector_helper.py | 1525 | except Exception as e: | CODE |
| LOW | …ent-python/pycti/connector/opencti_connector_helper.py | 1791 | except Exception as ex: | CODE |
| LOW | …ent-python/pycti/connector/opencti_connector_helper.py | 2890 | except Exception as e: | CODE |
| LOW | …ent-python/pycti/connector/opencti_connector_helper.py | 2936 | except Exception as e: | CODE |
| LOW | …ent-python/pycti/connector/opencti_connector_helper.py | 3121 | except Exception as err: | CODE |
| LOW | …ent-python/pycti/connector/opencti_connector_helper.py | 3180 | except Exception as err: | CODE |
| LOW | …ent-python/pycti/connector/opencti_connector_helper.py | 3214 | except Exception as err: | CODE |
| LOW | …ent-python/pycti/connector/opencti_connector_helper.py | 3244 | except Exception as err: | CODE |
| LOW | …ent-python/pycti/connector/opencti_connector_helper.py | 3314 | except Exception as err: | CODE |
| LOW | …ent-python/pycti/connector/opencti_connector_helper.py | 3393 | except Exception as err: | CODE |
| LOW | …ent-python/pycti/connector/opencti_connector_helper.py | 3990 | except Exception as err: # pylint: disable=broad-except | CODE |
| LOW | …ent-python/pycti/connector/opencti_connector_helper.py | 3084 | except Exception as e: # pylint: disable=broad-except | STRING |
| LOW | …ent-python/pycti/connector/opencti_connector_helper.py | 3105 | except Exception as err: | STRING |
| LOW | client-python/pycti/api/opencti_api_work.py | 112 | except Exception: | STRING |
| LOW | client-python/pycti/api/opencti_api_work.py | 141 | except Exception: | STRING |
| LOW | client-python/pycti/api/opencti_api_work.py | 179 | except Exception: | STRING |
| LOW | client-python/pycti/api/opencti_api_client.py | 438 | except Exception as e: | CODE |
| LOW | client-python/pycti/api/opencti_api_client.py | 485 | except Exception as e: | CODE |
| LOW | client-python/pycti/api/opencti_api_client.py | 806 | except Exception as e: | CODE |
| 2 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …graphql/tests/03-integration/02-resolvers/user-test.ts | 2099 | // Step 1: set policy to 0 (should clear dates) | COMMENT |
| LOW | …graphql/tests/03-integration/02-resolvers/user-test.ts | 2116 | // Step 2: set policy to 1 (should give now+1 day) | COMMENT |
| LOW | …front/tests_e2e/drafts/threatAdvisoryHappyFlow.spec.ts | 179 | // Step 18: the "Report created" playbook sets the final authorized members. | COMMENT |
| LOW | …nt/tests_e2e/securityCoverage/securityCoverage.spec.ts | 50 | // Step 3 : select entities to cover (none for an empty report) | COMMENT |
| LOW⚡ | …/securityCoverage/securityCoverageResultUpdate.spec.ts | 64 | // Step 1: select the result to update | COMMENT |
| LOW⚡ | …/securityCoverage/securityCoverageResultUpdate.spec.ts | 67 | // Step 2: details, prefilled with the values of the result | COMMENT |
| LOW⚡ | …/securityCoverage/securityCoverageResultUpdate.spec.ts | 72 | // Step 3: entities already covered by the result are hidden | COMMENT |
| LOW⚡ | …/securityCoverage/securityCoverageResultUpdate.spec.ts | 80 | // Step 4: has-covered relationships | COMMENT |
| LOW | docs/docs/usage/playbook-creation.md | 31 | ## Step 1: Set your event source | COMMENT |
| LOW | docs/docs/usage/playbook-creation.md | 37 | ## Step 2: Build your workflow with Playbook Components | COMMENT |
| LOW | docs/docs/usage/playbook-creation.md | 55 | ## Step 3: End your playbook | COMMENT |
| LOW | docs/docs/usage/playbook-creation.md | 67 | ## Step 4: Start your playbook | COMMENT |
| LOW | docs/docs/deployment/integration-manager/quick-start.md | 13 | ## Step 1: Generate RSA private key | COMMENT |
| LOW | docs/docs/deployment/integration-manager/quick-start.md | 21 | ## Step 2: Basic configuration | COMMENT |
| LOW | docs/docs/deployment/integration-manager/quick-start.md | 59 | ## Step 3: Choose your orchestration platform | COMMENT |
| LOW | docs/docs/deployment/integration-manager/quick-start.md | 99 | ## Step 4: Run XTM Composer | COMMENT |
| LOW | docs/docs/deployment/integration-manager/quick-start.md | 118 | ## Step 5: Verify connection | COMMENT |
| LOW | docs/docs/deployment/integration-manager/quick-start.md | 138 | ## Step 6: Verify in OpenCTI | COMMENT |
| LOW⚡ | docs/docs/deployment/integration-manager/migration.md | 19 | ## Step 1 : Verify that the connector is compatible with the integration manager | COMMENT |
| LOW⚡ | docs/docs/deployment/integration-manager/migration.md | 26 | ## Step 2 : Get the current configuration of the connector instance | COMMENT |
| LOW⚡ | docs/docs/deployment/integration-manager/migration.md | 32 | ## Step 3 : Deploy the new instance | COMMENT |
| LOW⚡ | docs/docs/deployment/integration-manager/migration.md | 40 | ## Step 4 : Start the new instance | COMMENT |
| LOW⚡ | docs/docs/deployment/integration-manager/migration.md | 46 | ## Step 5 : Delete the old instance | COMMENT |
| LOW⚡ | .github/agents/codebase-pattern-finder.agent.md | 44 | ### Step 1: Identify Pattern Types | COMMENT |
| LOW⚡ | .github/agents/codebase-pattern-finder.agent.md | 53 | ### Step 2: Search! | COMMENT |
| LOW⚡ | .github/agents/codebase-pattern-finder.agent.md | 57 | ### Step 3: Read and Extract | COMMENT |
| LOW⚡ | .github/agents/codebase-analyzer.agent.md | 56 | ### Step 1: Read Entry Points | COMMENT |
| LOW⚡ | .github/agents/codebase-analyzer.agent.md | 62 | ### Step 2: Follow the Code Path | COMMENT |
| LOW⚡ | .github/agents/codebase-analyzer.agent.md | 70 | ### Step 3: Document Key Logic | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …encti-graphql/src/python/runtime/snort/snort_parser.py | 100 | CODE | |
| LOW | …encti-graphql/src/python/runtime/snort/snort_parser.py | 147 | CODE | |
| LOW | …encti-graphql/src/python/testing/local_synchronizer.py | 60 | CODE | |
| LOW | docs/hooks/shared_assets.py | 82 | CODE | |
| LOW | opencti-worker/src/worker.py | 228 | CODE | |
| LOW | opencti-worker/src/push_handler.py | 83 | CODE | |
| LOW | client-python/tests/utils.py | 69 | CODE | |
| LOW | …thon/tests/02-integration/entities/test_entity_crud.py | 45 | CODE | |
| LOW | …thon/tests/02-integration/entities/test_observables.py | 67 | CODE | |
| LOW | …hon/tests/01-unit/api/test_opencti_api_client-proxy.py | 251 | CODE | |
| LOW | …n/examples/cmd_line_tag_latest_indicators_of_threat.py | 17 | CODE | |
| LOW | client-python/pycti/utils/opencti_stix2.py | 387 | CODE | |
| LOW | client-python/pycti/utils/opencti_stix2.py | 431 | CODE | |
| LOW | client-python/pycti/utils/opencti_stix2.py | 575 | CODE | |
| LOW | client-python/pycti/utils/opencti_stix2.py | 1470 | CODE | |
| LOW | client-python/pycti/utils/opencti_stix2.py | 1720 | CODE | |
| LOW | client-python/pycti/utils/opencti_stix2.py | 1985 | CODE | |
| LOW | client-python/pycti/utils/opencti_stix2.py | 2260 | CODE | |
| LOW | client-python/pycti/utils/opencti_stix2.py | 3029 | CODE | |
| LOW | client-python/pycti/utils/opencti_stix2.py | 3175 | CODE | |
| LOW | client-python/pycti/utils/opencti_stix2.py | 3435 | CODE | |
| LOW | client-python/pycti/utils/opencti_stix2.py | 3484 | CODE | |
| LOW | client-python/pycti/utils/opencti_stix2.py | 3620 | CODE | |
| LOW | client-python/pycti/utils/opencti_stix2.py | 3796 | CODE | |
| LOW | client-python/pycti/utils/opencti_stix2.py | 3930 | CODE | |
| LOW | client-python/pycti/utils/opencti_stix2_utils.py | 409 | CODE | |
| LOW | client-python/pycti/utils/opencti_stix2_splitter.py | 80 | CODE | |
| LOW | …ti/utils/opencti_stix2_markdown_embedded_file_utils.py | 4 | CODE | |
| LOW | client-python/pycti/utils/opencti_stix2_update.py | 23 | CODE | |
| LOW | client-python/pycti/utils/opencti_stix2_update.py | 57 | CODE | |
| LOW | client-python/pycti/utils/opencti_stix2_update.py | 228 | CODE | |
| LOW | client-python/pycti/utils/opencti_stix2_update.py | 284 | CODE | |
| LOW | client-python/pycti/utils/opencti_stix2_update.py | 429 | CODE | |
| LOW | client-python/pycti/utils/opencti_stix2_update.py | 474 | CODE | |
| LOW | …ent-python/pycti/connector/opencti_connector_helper.py | 604 | CODE | |
| LOW | …ent-python/pycti/connector/opencti_connector_helper.py | 868 | CODE | |
| LOW | …ent-python/pycti/connector/opencti_connector_helper.py | 1128 | CODE | |
| LOW | …ent-python/pycti/connector/opencti_connector_helper.py | 1218 | CODE | |
| LOW | …ent-python/pycti/connector/opencti_connector_helper.py | 1392 | CODE | |
| LOW | …ent-python/pycti/connector/opencti_connector_helper.py | 1656 | CODE | |
| LOW | …ent-python/pycti/connector/opencti_connector_helper.py | 2185 | CODE | |
| LOW | …ent-python/pycti/connector/opencti_connector_helper.py | 2897 | CODE | |
| LOW | …ent-python/pycti/connector/opencti_connector_helper.py | 3734 | CODE | |
| LOW | …ient-python/pycti/connector/opencti_connector_build.py | 36 | CODE | |
| LOW | client-python/pycti/api/opencti_api_client.py | 98 | CODE | |
| LOW | client-python/pycti/api/opencti_api_client.py | 354 | CODE | |
| LOW | client-python/pycti/api/opencti_api_client.py | 444 | CODE | |
| LOW | client-python/pycti/api/opencti_api_client.py | 635 | CODE | |
| LOW | client-python/pycti/api/opencti_api_client.py | 852 | CODE | |
| LOW | client-python/pycti/entities/opencti_location.py | 282 | CODE | |
| LOW | client-python/pycti/entities/opencti_location.py | 624 | CODE | |
| LOW | …ython/pycti/entities/opencti_stix_core_relationship.py | 605 | CODE | |
| LOW | client-python/pycti/entities/opencti_identity.py | 496 | CODE | |
| LOW | client-python/pycti/entities/opencti_identity.py | 698 | CODE | |
| LOW | …nt-python/pycti/entities/opencti_marking_definition.py | 302 | CODE | |
| LOW | …ient-python/pycti/entities/opencti_course_of_action.py | 599 | CODE | |
| LOW | …python/pycti/entities/opencti_stix_cyber_observable.py | 278 | CODE | |
| LOW | …nt-python/pycti/entities/opencti_stix_domain_object.py | 1323 | CODE | |
| LOW | client-python/pycti/entities/opencti_attack_pattern.py | 636 | CODE | |
| LOW | …n/pycti/entities/opencti_stix_sighting_relationship.py | 515 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM⚡ | …encti-graphql/tests/01-unit/parser/json-mapper-misp.ts | 3946 | "content": "## Executive Summary\\r\\n\\r\\n Lumen’s Black Lotus Labs has uncovered a longstanding campa | CODE |
| MEDIUM⚡ | …encti-graphql/tests/01-unit/parser/json-mapper-misp.ts | 3946 | "content": "## Executive Summary\\r\\n\\r\\n Lumen’s Black Lotus Labs has uncovered a longstanding campa | CODE |
| MEDIUM⚡ | …encti-graphql/tests/01-unit/parser/json-mapper-misp.ts | 3946 | "content": "## Executive Summary\\r\\n\\r\\n Lumen’s Black Lotus Labs has uncovered a longstanding campa | CODE |
| MEDIUM⚡ | …encti-graphql/tests/01-unit/parser/json-mapper-misp.ts | 3946 | "content": "## Executive Summary\\r\\n\\r\\n Lumen’s Black Lotus Labs has uncovered a longstanding campa | CODE |
| MEDIUM | …pencti-graphql/src/python/runtime/snort/snort_dicts.py | 250 | # be used in conjunction with each other for the | COMMENT |
| MEDIUM⚡ | opencti-platform/opencti-graphql/src/parser/misp.json | 2673 | "content": "## Executive Summary\r\n\r\n Lumen’s Black Lotus Labs has uncovered a longstanding campaign orchestr | CODE |
| MEDIUM⚡ | opencti-platform/opencti-graphql/src/parser/misp.json | 2673 | "content": "## Executive Summary\r\n\r\n Lumen’s Black Lotus Labs has uncovered a longstanding campaign orchestr | CODE |
| MEDIUM⚡ | opencti-platform/opencti-graphql/src/parser/misp.json | 2673 | "content": "## Executive Summary\r\n\r\n Lumen’s Black Lotus Labs has uncovered a longstanding campaign orchestr | CODE |
| MEDIUM⚡ | opencti-platform/opencti-graphql/src/parser/misp.json | 2673 | "content": "## Executive Summary\r\n\r\n Lumen’s Black Lotus Labs has uncovered a longstanding campaign orchestr | CODE |
| MEDIUM⚡ | opencti-platform/opencti-graphql/src/parser/bundle.json | 11608 | "content": "## Executive Summary\r\n\r\n Lumen\u2019s Black Lotus Labs has uncovered a longstanding campaign orche | CODE |
| MEDIUM⚡ | opencti-platform/opencti-graphql/src/parser/bundle.json | 11608 | "content": "## Executive Summary\r\n\r\n Lumen\u2019s Black Lotus Labs has uncovered a longstanding campaign orche | CODE |
| MEDIUM⚡ | opencti-platform/opencti-graphql/src/parser/bundle.json | 11608 | "content": "## Executive Summary\r\n\r\n Lumen\u2019s Black Lotus Labs has uncovered a longstanding campaign orche | CODE |
| MEDIUM⚡ | opencti-platform/opencti-graphql/src/parser/bundle.json | 11608 | "content": "## Executive Summary\r\n\r\n Lumen\u2019s Black Lotus Labs has uncovered a longstanding campaign orche | CODE |
| MEDIUM | …graphql/src/modules/workflow/domain/workflow-domain.ts | 294 | // Find existing instance via entity_id attribute directly (more robust than relationship) | COMMENT |
| MEDIUM | …form/opencti-graphql/src/domain/stixCyberObservable.js | 433 | // Use both MIME type AND file extension for robust detection of Office Open XML files | COMMENT |
| LOW | client-python/pycti/utils/opencti_stix2.py | 3444 | # If data is stix, just use the generic stix function for deletion | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …ython/tests/02-integration/connector/test_connector.py | 26 | except ValueError: | CODE |
| HIGH | …ests/01-unit/connector/test_schedule_process_errors.py | 267 | except SystemExit: | CODE |
| HIGH | …ent-python/pycti/connector/opencti_connector_helper.py | 3055 | except: # pylint: disable=bare-except # noqa: E722 | CODE |
| HIGH | …ent-python/pycti/connector/opencti_connector_helper.py | 1749 | except queue.Full: | CODE |
| HIGH | …ent-python/pycti/connector/opencti_connector_helper.py | 1258 | except queue.Full: | CODE |
| HIGH | client-python/pycti/api/opencti_api_client.py | 1306 | except Exception: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …-python/examples/create_observable_x509_certificate.py | 29 | "basic_constraints": '{"is_ca":null,"max_path_len":null}', | CODE |
| HIGH | …-python/examples/create_observable_x509_certificate.py | 33 | "key_usage": '{"certificate_sign":null,"content_commitment":null,"crl_sign":null,"data_encipherment":null,"decip | CODE |
| HIGH | client-python/pycti/api/opencti_api_client.py | 614 | # caller (as opposed to an explicit None/null). | COMMENT |
| HIGH | client-python/pycti/api/opencti_api_client.py | 658 | # If yes, transform variable (file to null) and create multipart query | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …graphql/tests/03-integration/02-resolvers/user-test.ts | 2099 | // Step 1: set policy to 0 (should clear dates) | COMMENT |
| LOW | …graphql/tests/03-integration/02-resolvers/user-test.ts | 2116 | // Step 2: set policy to 1 (should give now+1 day) | COMMENT |
| LOW | …ti-platform/opencti-graphql/src/database/middleware.ts | 2657 | // If user ask for aliases modification, we need to check if it not already belong to another entity. | COMMENT |
| LOW | …-platform/opencti-graphql/src/database/file-storage.ts | 207 | // 03. Check if metadata contains an entity_id, we need to check if the user has real access to this instance | COMMENT |
| LOW | …-platform/opencti-graphql/src/utils/clean-relations.js | 100 | // For each relations of the platform we need to check if the from and the to are available. | COMMENT |
| LOW | …orm/opencti-graphql/src/manager/notificationManager.ts | 631 | // For each event we need to check ifs | COMMENT |
| LOW | …graphql/src/manager/playbookManager/playbookManager.ts | 99 | // For each event we need to check ifs | COMMENT |
| LOW | …front/tests_e2e/drafts/threatAdvisoryHappyFlow.spec.ts | 179 | // Step 18: the "Report created" playbook sets the final authorized members. | COMMENT |
| LOW | …nt/tests_e2e/securityCoverage/securityCoverage.spec.ts | 50 | // Step 3 : select entities to cover (none for an empty report) | COMMENT |
| LOW⚡ | …/securityCoverage/securityCoverageResultUpdate.spec.ts | 64 | // Step 1: select the result to update | COMMENT |
| LOW⚡ | …/securityCoverage/securityCoverageResultUpdate.spec.ts | 67 | // Step 2: details, prefilled with the values of the result | COMMENT |
| LOW⚡ | …/securityCoverage/securityCoverageResultUpdate.spec.ts | 72 | // Step 3: entities already covered by the result are hidden | COMMENT |
| LOW⚡ | …/securityCoverage/securityCoverageResultUpdate.spec.ts | 80 | // Step 4: has-covered relationships | COMMENT |
| LOW | client-python/pycti/utils/opencti_stix2_splitter.py | 113 | # We need to check if this ref is not already a reference | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | opencti-platform/opencti-dev/docker-compose.yml | 77 | soft: -1 # Set memlock to unlimited (no soft or hard limit) | CODE |
| LOW | opencti-worker/src/worker.py | 179 | # Check if openCTI is available | COMMENT |
| LOW | opencti-worker/src/worker.py | 259 | # Check if all queues are consumed | COMMENT |
| LOW | .github/workflows/pr-add-labels.yml | 44 | # Check if any new files were added in the migrations directory | COMMENT |
| LOW | client-python/pycti/utils/opencti_stix2.py | 3959 | # Check if the bundle is correctly formatted | COMMENT |
| LOW | …ent-python/pycti/connector/opencti_connector_helper.py | 4137 | # Check if item are native STIX 2 lib | COMMENT |
| LOW | client-python/pycti/api/opencti_api_client.py | 348 | # Check if openCTI is available | COMMENT |
| LOW | client-python/pycti/api/opencti_api_client.py | 458 | # Check if it's inline certificate content (starts with PEM header) | COMMENT |
| LOW | client-python/pycti/api/opencti_api_client.py | 465 | # Check if it's a file path | COMMENT |
| LOW | client-python/pycti/api/opencti_api_client.py | 792 | # Check if request was successful | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …-platform/opencti-graphql/src/http/httpChatbotProxy.ts | 458 | // The user's agentic quota for the composer's quota indicator. XTM One | COMMENT |
| MEDIUM | docs/docs/development/integration-manager.md | 144 | │ └── orchestrator/ # Container orchestration | CODE |
| MEDIUM | docs/docs/deployment/integration-manager/quick-start.md | 59 | ## Step 3: Choose your orchestration platform | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …i-platform/opencti-graphql/src/utils/exclusionLists.ts | 90 | // If element is present at mid, return True | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …modules/playbook/components/ai-agent-component-test.ts | 284 | const agentResponse = `Sure, here you go: ${bundleJson} let me know if you need anything else.`; | CODE |
| LOW | …ql/src/modules/fintelTemplate/fintelTemplate-domain.ts | 44 | // (don't forget to check the capa if it's not done via a @auth in graphql of your function) | COMMENT |
| LOW | …ti-platform/opencti-front/src/utils/resizeObservers.ts | 5 | * Don't forget to stop observing when not needed anymore. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | client-python/pycti/__init__.py | 109 | __all__ = [ | CODE |
| LOW | …ent-python/pycti/connector/opencti_connector_helper.py | 1205 | def set_heartbeat_queue(self, q: Queue) -> None: | CODE |
| LOW | …ent-python/pycti/connector/opencti_connector_helper.py | 1308 | def set_heartbeat_queue(self, q: Queue) -> None: | CODE |
| LOW | …ent-python/pycti/connector/opencti_connector_helper.py | 1562 | def set_heartbeat_queue(self, q: Queue) -> None: | CODE |
| LOW | …ent-python/pycti/connector/opencti_connector_helper.py | 3027 | def set_state(self, state) -> None: | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …ent-python/pycti/connector/opencti_connector_helper.py | 1906 | CODE | |
| LOW | …ent-python/pycti/connector/opencti_connector_helper.py | 3431 | CODE | |
| LOW | client-python/pycti/api/opencti_api_client.py | 190 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …latform/opencti-graphql/tests/utils/XTMComposerMock.ts | 761 | // Example usage | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …encti-graphql/src/python/runtime/snort/snort_parser.py | 417 | # TODO: implement this feature | COMMENT |