{"$schema":"https://schemastore.azurewebsites.net/schemas/json/sarif-2.1.0-rtm.6.json","version":"2.1.0","runs":[{"tool":{"driver":{"name":"devskim","fullName":"Microsoft DevSkim Command Line Interface","version":"1.0.90+fb2d676ce4","informationUri":"https://github.com/microsoft/DevSkim/","rules":[{"id":"DS176209","name":"SuspiciousComment","fullDescription":{"text":"Suspicious comment: A \"TODO\" or similar was left in source code, possibly indicating incomplete functionality"},"help":{"text":"A \"TODO\" or similar was left in source code, possibly indicating incomplete functionality","markdown":"Visit [https://github.com/Microsoft/DevSkim/blob/main/guidance/DS176209.md](https://github.com/Microsoft/DevSkim/blob/main/guidance/DS176209.md) for additional guidance on this issue."},"shortDescription":{"text":"A \"TODO\" or similar was left in source code, possibly indicating incomplete functionality"},"defaultConfiguration":{"level":"note"},"helpUri":"https://github.com/Microsoft/DevSkim/blob/main/guidance/DS176209.md","properties":{"precision":"high","problem.severity":"recommendation","DevSkimSeverity":"ManualReview","DevSkimConfidence":"High"}},{"id":"DS126858","name":"WeakbrokenHashAlgorithm","fullDescription":{"text":"Weak/Broken Hash Algorithm: A weak or broken hash algorithm was detected."},"help":{"text":"Consider switching to use SHA-256 or SHA-512 instead.","markdown":"Consider switching to use SHA-256 or SHA-512 instead. Visit [https://github.com/Microsoft/DevSkim/blob/main/guidance/DS126858.md](https://github.com/Microsoft/DevSkim/blob/main/guidance/DS126858.md) for additional guidance on this issue."},"shortDescription":{"text":"A weak or broken hash algorithm was detected."},"defaultConfiguration":{"level":"error"},"helpUri":"https://github.com/Microsoft/DevSkim/blob/main/guidance/DS126858.md","properties":{"precision":"high","problem.severity":"error","DevSkimSeverity":"Critical","DevSkimConfidence":"High"}},{"id":"DS137138","name":"InsecureUrl","fullDescription":{"text":"Insecure URL: An HTTP-based URL without TLS was detected."},"help":{"text":"Update to an HTTPS-based URL if possible.","markdown":"Update to an HTTPS-based URL if possible. Visit [https://github.com/Microsoft/DevSkim/blob/main/guidance/DS137138.md](https://github.com/Microsoft/DevSkim/blob/main/guidance/DS137138.md) for additional guidance on this issue."},"shortDescription":{"text":"An HTTP-based URL without TLS was detected."},"helpUri":"https://github.com/Microsoft/DevSkim/blob/main/guidance/DS137138.md","properties":{"precision":"high","problem.severity":"warning","DevSkimSeverity":"Moderate","DevSkimConfidence":"High"},"defaultConfiguration":{"level":"warning"}}]}},"results":[{"ruleId":"DS176209","level":"note","message":{"text":"Suspicious comment"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"BancoApi/Program.cs"},"region":{"startLine":60,"startColumn":3,"endLine":60,"endColumn":7,"charOffset":1995,"charLength":4,"snippet":{"text":"TODO","rendered":{"text":"TODO","markdown":"`TODO`"}},"sourceLanguage":"csharp"}}}],"properties":{"tags":["Hygiene.Comment.Suspicious"],"DevSkimSeverity":"ManualReview","DevSkimConfidence":"High"}},{"ruleId":"DS137138","message":{"text":"Insecure URL"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"BancoApi/Program.cs"},"region":{"startLine":54,"startColumn":51,"endLine":54,"endColumn":84,"charOffset":1739,"charLength":33,"snippet":{"text":"http://api.tipocambio.example.com","rendered":{"text":"http://api.tipocambio.example.com","markdown":"`http://api.tipocambio.example.com`"}},"sourceLanguage":"csharp"}}}],"fixes":[{"description":{"text":"An HTTP-based URL without TLS was detected."},"artifactChanges":[{"artifactLocation":{"uri":"BancoApi/Program.cs"},"replacements":[{"deletedRegion":{"charOffset":1739,"charLength":33},"insertedContent":{"text":"https://api.tipocambio.example.com"}}]}]}],"properties":{"tags":["ThreatModel.Integration.HTTP"],"DevSkimSeverity":"Moderate","DevSkimConfidence":"High"},"level":"warning"},{"ruleId":"DS126858","level":"error","message":{"text":"Weak/Broken Hash Algorithm"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"BancoApi/Program.cs"},"region":{"startLine":42,"startColumn":15,"endLine":42,"endColumn":19,"charOffset":1368,"charLength":4,"snippet":{"text":"sha1","rendered":{"text":"sha1","markdown":"`sha1`"}},"sourceLanguage":"csharp"}}}],"fixes":[{"description":{"text":"A weak or broken hash algorithm was detected."},"artifactChanges":[{"artifactLocation":{"uri":"BancoApi/Program.cs"},"replacements":[{"deletedRegion":{"charOffset":1368,"charLength":4},"insertedContent":{"text":"sha512"}}]}]},{"description":{"text":"A weak or broken hash algorithm was detected."},"artifactChanges":[{"artifactLocation":{"uri":"BancoApi/Program.cs"},"replacements":[{"deletedRegion":{"charOffset":1368,"charLength":4},"insertedContent":{"text":"sha256"}}]}]}],"properties":{"tags":["Cryptography.BannedHashAlgorithm"],"DevSkimSeverity":"Critical","DevSkimConfidence":"High"}},{"ruleId":"DS126858","level":"error","message":{"text":"Weak/Broken Hash Algorithm"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"BancoApi/Program.cs"},"region":{"startLine":41,"startColumn":21,"endLine":41,"endColumn":25,"charOffset":1338,"charLength":4,"snippet":{"text":"SHA1","rendered":{"text":"SHA1","markdown":"`SHA1`"}},"sourceLanguage":"csharp"}}}],"fixes":[{"description":{"text":"A weak or broken hash algorithm was detected."},"artifactChanges":[{"artifactLocation":{"uri":"BancoApi/Program.cs"},"replacements":[{"deletedRegion":{"charOffset":1338,"charLength":4},"insertedContent":{"text":"SHA256"}}]}]},{"description":{"text":"A weak or broken hash algorithm was detected."},"artifactChanges":[{"artifactLocation":{"uri":"BancoApi/Program.cs"},"replacements":[{"deletedRegion":{"charOffset":1338,"charLength":4},"insertedContent":{"text":"SHA512"}}]}]}],"properties":{"tags":["Cryptography.BannedHashAlgorithm"],"DevSkimSeverity":"Critical","DevSkimConfidence":"High"}},{"ruleId":"DS126858","level":"error","message":{"text":"Weak/Broken Hash Algorithm"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"BancoApi/Program.cs"},"region":{"startLine":41,"startColumn":14,"endLine":41,"endColumn":18,"charOffset":1331,"charLength":4,"snippet":{"text":"sha1","rendered":{"text":"sha1","markdown":"`sha1`"}},"sourceLanguage":"csharp"}}}],"fixes":[{"description":{"text":"A weak or broken hash algorithm was detected."},"artifactChanges":[{"artifactLocation":{"uri":"BancoApi/Program.cs"},"replacements":[{"deletedRegion":{"charOffset":1331,"charLength":4},"insertedContent":{"text":"sha512"}}]}]},{"description":{"text":"A weak or broken hash algorithm was detected."},"artifactChanges":[{"artifactLocation":{"uri":"BancoApi/Program.cs"},"replacements":[{"deletedRegion":{"charOffset":1331,"charLength":4},"insertedContent":{"text":"sha256"}}]}]}],"properties":{"tags":["Cryptography.BannedHashAlgorithm"],"DevSkimSeverity":"Critical","DevSkimConfidence":"High"}},{"ruleId":"DS126858","level":"error","message":{"text":"Weak/Broken Hash Algorithm"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"BancoApi/Program.cs"},"region":{"startLine":38,"startColumn":41,"endLine":38,"endColumn":45,"charOffset":1262,"charLength":4,"snippet":{"text":"SHA1","rendered":{"text":"SHA1","markdown":"`SHA1`"}},"sourceLanguage":"csharp"}}}],"fixes":[{"description":{"text":"A weak or broken hash algorithm was detected."},"artifactChanges":[{"artifactLocation":{"uri":"BancoApi/Program.cs"},"replacements":[{"deletedRegion":{"charOffset":1262,"charLength":4},"insertedContent":{"text":"SHA256"}}]}]},{"description":{"text":"A weak or broken hash algorithm was detected."},"artifactChanges":[{"artifactLocation":{"uri":"BancoApi/Program.cs"},"replacements":[{"deletedRegion":{"charOffset":1262,"charLength":4},"insertedContent":{"text":"SHA512"}}]}]}],"properties":{"tags":["Cryptography.BannedHashAlgorithm"],"DevSkimSeverity":"Critical","DevSkimConfidence":"High"}},{"ruleId":"DS126858","level":"error","message":{"text":"Weak/Broken Hash Algorithm"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"BancoApi/Program.cs"},"region":{"startLine":34,"startColumn":15,"endLine":34,"endColumn":18,"charOffset":1130,"charLength":3,"snippet":{"text":"md5","rendered":{"text":"md5","markdown":"`md5`"}},"sourceLanguage":"csharp"}}}],"fixes":[{"description":{"text":"A weak or broken hash algorithm was detected."},"artifactChanges":[{"artifactLocation":{"uri":"BancoApi/Program.cs"},"replacements":[{"deletedRegion":{"charOffset":1130,"charLength":3},"insertedContent":{"text":"sha512"}}]}]},{"description":{"text":"A weak or broken hash algorithm was detected."},"artifactChanges":[{"artifactLocation":{"uri":"BancoApi/Program.cs"},"replacements":[{"deletedRegion":{"charOffset":1130,"charLength":3},"insertedContent":{"text":"sha256"}}]}]}],"properties":{"tags":["Cryptography.BannedHashAlgorithm"],"DevSkimSeverity":"Critical","DevSkimConfidence":"High"}},{"ruleId":"DS126858","level":"error","message":{"text":"Weak/Broken Hash Algorithm"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"BancoApi/Program.cs"},"region":{"startLine":33,"startColumn":20,"endLine":33,"endColumn":23,"charOffset":1101,"charLength":3,"snippet":{"text":"MD5","rendered":{"text":"MD5","markdown":"`MD5`"}},"sourceLanguage":"csharp"}}}],"fixes":[{"description":{"text":"A weak or broken hash algorithm was detected."},"artifactChanges":[{"artifactLocation":{"uri":"BancoApi/Program.cs"},"replacements":[{"deletedRegion":{"charOffset":1101,"charLength":3},"insertedContent":{"text":"SHA256"}}]}]},{"description":{"text":"A weak or broken hash algorithm was detected."},"artifactChanges":[{"artifactLocation":{"uri":"BancoApi/Program.cs"},"replacements":[{"deletedRegion":{"charOffset":1101,"charLength":3},"insertedContent":{"text":"SHA512"}}]}]}],"properties":{"tags":["Cryptography.BannedHashAlgorithm"],"DevSkimSeverity":"Critical","DevSkimConfidence":"High"}},{"ruleId":"DS126858","level":"error","message":{"text":"Weak/Broken Hash Algorithm"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"BancoApi/Program.cs"},"region":{"startLine":33,"startColumn":14,"endLine":33,"endColumn":17,"charOffset":1095,"charLength":3,"snippet":{"text":"md5","rendered":{"text":"md5","markdown":"`md5`"}},"sourceLanguage":"csharp"}}}],"fixes":[{"description":{"text":"A weak or broken hash algorithm was detected."},"artifactChanges":[{"artifactLocation":{"uri":"BancoApi/Program.cs"},"replacements":[{"deletedRegion":{"charOffset":1095,"charLength":3},"insertedContent":{"text":"sha512"}}]}]},{"description":{"text":"A weak or broken hash algorithm was detected."},"artifactChanges":[{"artifactLocation":{"uri":"BancoApi/Program.cs"},"replacements":[{"deletedRegion":{"charOffset":1095,"charLength":3},"insertedContent":{"text":"sha256"}}]}]}],"properties":{"tags":["Cryptography.BannedHashAlgorithm"],"DevSkimSeverity":"Critical","DevSkimConfidence":"High"}},{"ruleId":"DS126858","level":"error","message":{"text":"Weak/Broken Hash Algorithm"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"BancoApi/Program.cs"},"region":{"startLine":30,"startColumn":41,"endLine":30,"endColumn":44,"charOffset":1028,"charLength":3,"snippet":{"text":"MD5","rendered":{"text":"MD5","markdown":"`MD5`"}},"sourceLanguage":"csharp"}}}],"fixes":[{"description":{"text":"A weak or broken hash algorithm was detected."},"artifactChanges":[{"artifactLocation":{"uri":"BancoApi/Program.cs"},"replacements":[{"deletedRegion":{"charOffset":1028,"charLength":3},"insertedContent":{"text":"SHA256"}}]}]},{"description":{"text":"A weak or broken hash algorithm was detected."},"artifactChanges":[{"artifactLocation":{"uri":"BancoApi/Program.cs"},"replacements":[{"deletedRegion":{"charOffset":1028,"charLength":3},"insertedContent":{"text":"SHA512"}}]}]}],"properties":{"tags":["Cryptography.BannedHashAlgorithm"],"DevSkimSeverity":"Critical","DevSkimConfidence":"High"}}],"columnKind":"utf16CodeUnits"}]}