{
  "schema": "coda-vet/1",
  "blocked": true,
  "axes": {
    "ran": [
      "V0-security-delta",
      "V2-vacuous-tests",
      "V3-public-contract",
      "V4-blast-radius",
      "V1-ingested-diagnostics"
    ],
    "skipped": []
  },
  "files": 1,
  "blocking": [
    {
      "confidence": "High",
      "cwe": [
        78
      ],
      "file": "./app.py",
      "has_fix": false,
      "id": "SF-1",
      "is_new": true,
      "kind": "Vulnerability",
      "line": 7,
      "message": "Taint flow: os.environ() (line 7) → os.system() (line 7) via var '<inline>'",
      "owasp": [
        "A03:2021"
      ],
      "rule": "TAINT-COMMAND-INJECTION",
      "severity": "Critical",
      "taint": {
        "hops": 0,
        "sink": "os.system",
        "sink_line": 7,
        "source": "os.environ",
        "source_line": 7,
        "var": "<inline>"
      },
      "tier": "confirmed"
    }
  ],
  "advisory": [],
  "ingested": [
    {
      "tool": "tsc",
      "file": "app.py",
      "line": 7,
      "severity": "error",
      "rule": "TS0001",
      "message": "erro simulado em linha nova",
      "blocking": true
    }
  ],
  "scope": {
    "files_changed": 1,
    "lines_added": 4,
    "critical_files": [],
    "wide": false
  },
  "contract_breaks": [
    {
      "file": "./app.py",
      "symbol": "antiga_api",
      "kind": "function"
    }
  ],
  "health": {
    "functions": 2,
    "avg_cyclomatic": 1.0,
    "max_cyclomatic": 1,
    "avg_cognitive": 0.0,
    "max_cognitive": 0,
    "complex_functions": 0,
    "duplicated_lines_density": 0.0,
    "technical_debt_minutes": 5,
    "code_smells": 0
  },
  "diff_only": true
}
