test: validate QWED Security v1.1 scanner across all engines - #214
test: validate QWED Security v1.1 scanner across all engines#214Rahul Dass (rahuldass19) wants to merge 9 commits into
QWED Security — FAILURE
QWED Security Verification Report
8 files scanned | 1 blocked | 8 warnings | 0 info | 2 verified
Blocked Findings
| File | Line | Context | Issue |
|---|---|---|---|
src/qwed_new/runtime_secret_demo.py |
L3 | RUNTIME_CODE |
Hardcoded credential-like material detected. |
Advisory Warnings
| File | Line | Context | Issue |
|---|---|---|---|
examples/qwed_security_test.py |
L3 | DEMO_CODE |
Hardcoded credential-like material detected. |
examples/qwed_security_test.py |
L13 | DEMO_CODE |
Dangerous eval() call can execute untrusted code. |
examples/qwed_security_test.py |
L13 | DEMO_CODE |
DYNAMIC_EXECUTION_BOUNDARY violation: eval enables arbitrary code execution. |
examples/qwed_security_test.py |
L13 | DEMO_CODE |
TAINT_FLOW_BOUNDARY violation: Tainted data from input reaches eval -- Remote code execution. Flow: input -> expression |
scripts/debug_translation.py |
L1 | RUNTIME_CODE |
Test or debug file 'scripts/debug_translation.py' is present in Docker build context. |
scripts/debug_sqlglot.py |
L1 | RUNTIME_CODE |
Test or debug file 'scripts/debug_sqlglot.py' is present in Docker build context. |
scripts/debug_security.py |
L1 | RUNTIME_CODE |
Test or debug file 'scripts/debug_security.py' is present in Docker build context. |
scripts/debug_failures.py |
L1 | RUNTIME_CODE |
Test or debug file 'scripts/debug_failures.py' is present in Docker build context. |
Engines
codeguard: ✅entropy_scan: ✅js_patterns: ✅pattern_scan:⚠️ 3 finding(s)python_ast:⚠️ 1 finding(s)python_deep_ast:⚠️ 1 finding(s)release_boundary:⚠️ 4 finding(s)secret_scan: ✅taint_analysis:⚠️ 1 finding(s)
Verified Files
.qwed.ymlexamples/demo_widget.js
Verified by QWED — deterministic security verification. No LLM used.
Details
Scan completed in 3.1s. Engines: pattern_scan, python_ast, python_deep_ast, taint_analysis, js_patterns, secret_scan, shell_safety, docker_scan, ci_scan, release_boundary, policy_config.
Annotations
Check warning on line 3 in examples/qwed_security_test.py
qwed-security / QWED Security
QWED: pattern_scan
Hardcoded credential-like material detected. Context=DEMO_CODE. Decision reason: Credential-like pattern in demo code with non-production value.
Check warning on line 13 in examples/qwed_security_test.py
qwed-security / QWED Security
QWED: pattern_scan
Dangerous eval() call can execute untrusted code. Context=DEMO_CODE. Decision reason: Pattern detected in demo/example code; surfaced as advisory.
Check warning on line 13 in examples/qwed_security_test.py
qwed-security / QWED Security
QWED: python_deep_ast
DYNAMIC_EXECUTION_BOUNDARY violation: eval enables arbitrary code execution. Context=DEMO_CODE. Decision reason: Pattern detected in demo/example code; surfaced as advisory.
Check warning on line 13 in examples/qwed_security_test.py
qwed-security / QWED Security
QWED: taint_analysis
TAINT_FLOW_BOUNDARY violation: Tainted data from input reaches eval -- Remote code execution. Flow: input -> expression Context=DEMO_CODE. Decision reason: Pattern detected in demo/example code; surfaced as advisory.
Check failure on line 3 in src/qwed_new/runtime_secret_demo.py
qwed-security / QWED Security
QWED: pattern_scan
Hardcoded credential-like material detected. Context=RUNTIME_CODE. Decision reason: Executable runtime path contains a dangerous pattern.
Check warning on line 1 in scripts/debug_translation.py
qwed-security / QWED Security
QWED: release_boundary
Test or debug file 'scripts/debug_translation.py' is present in Docker build context. Context=RUNTIME_CODE. Decision reason: Executable runtime path contains a risky but non-blocking pattern.
Check warning on line 1 in scripts/debug_sqlglot.py
qwed-security / QWED Security
QWED: release_boundary
Test or debug file 'scripts/debug_sqlglot.py' is present in Docker build context. Context=RUNTIME_CODE. Decision reason: Executable runtime path contains a risky but non-blocking pattern.
Check warning on line 1 in scripts/debug_security.py
qwed-security / QWED Security
QWED: release_boundary
Test or debug file 'scripts/debug_security.py' is present in Docker build context. Context=RUNTIME_CODE. Decision reason: Executable runtime path contains a risky but non-blocking pattern.
Check warning on line 1 in scripts/debug_failures.py
qwed-security / QWED Security
QWED: release_boundary
Test or debug file 'scripts/debug_failures.py' is present in Docker build context. Context=RUNTIME_CODE. Decision reason: Executable runtime path contains a risky but non-blocking pattern.