{"$schema":"https://json.schemastore.org/sarif-2.1.0.json","version":"2.1.0","runs":[{"tool":{"driver":{"name":"CodeQL","organization":"GitHub","semanticVersion":"2.27.2","notifications":[{"id":"js/baseline/expected-extracted-files","name":"js/baseline/expected-extracted-files","shortDescription":{"text":"Expected extracted files"},"fullDescription":{"text":"Files appearing in the source archive that are expected to be extracted."},"defaultConfiguration":{"enabled":true},"properties":{"tags":["expected-extracted-files","telemetry"]}},{"id":"cli/file-coverage-baseline","name":"cli/file-coverage-baseline","shortDescription":{"text":"File coverage baseline telemetry"},"fullDescription":{"text":"File coverage baseline telemetry"},"defaultConfiguration":{"enabled":true}},{"id":"cli/platform","name":"cli/platform","shortDescription":{"text":"Platform"},"fullDescription":{"text":"Platform"},"defaultConfiguration":{"enabled":true}},{"id":"cli/sip-enablement","name":"cli/sip-enablement","shortDescription":{"text":"macOS SIP enablement status"},"fullDescription":{"text":"macOS SIP enablement status"},"defaultConfiguration":{"enabled":true}}],"rules":[{"id":"dataflowbench/javascript-taint-modeling","name":"dataflowbench/javascript-taint-modeling","shortDescription":{"text":"DataFlowBench JavaScript taint-modeling matrix"},"fullDescription":{"text":"Encodes the benchmark-controlled model declarations of docs/modeling-matrix.md natively in a CodeQL data-flow configuration, and reports flow that those declarations — rather than the fixture bodies — imply."},"defaultConfiguration":{"enabled":true,"level":"warning"},"properties":{"tags":["security"],"description":"Encodes the benchmark-controlled model declarations of docs/modeling-matrix.md natively in a CodeQL data-flow configuration, and reports flow that those declarations — rather than the fixture bodies — imply.","id":"dataflowbench/javascript-taint-modeling","kind":"path-problem","name":"DataFlowBench JavaScript taint-modeling matrix","precision":"high","problem.severity":"warning"}}]},"extensions":[{"name":"dataflowbench/codeql-javascript","semanticVersion":"0.0.1","locations":[{"uri":"file:///Users/dave/.codex/worktrees/9f01/dataflowbench/execution-state/v092/groups/series-01/codeql-javascript-modeling/attempt-01/adapters/codeql/v0.9.2/javascript/","description":{"text":"The QL pack root directory."},"properties":{"tags":["CodeQL/LocalPackRoot"]}},{"uri":"file:///Users/dave/.codex/worktrees/9f01/dataflowbench/execution-state/v092/groups/series-01/codeql-javascript-modeling/attempt-01/adapters/codeql/v0.9.2/javascript/qlpack.yml","description":{"text":"The QL pack definition file."},"properties":{"tags":["CodeQL/LocalPackDefinitionFile"]}}]},{"name":"codeql/javascript-all","semanticVersion":"2.10.3+a7057b836bf29767461026718b14d20790b9085f","locations":[{"uri":"file:///Users/dave/.codex/worktrees/9f01/dataflowbench/execution-state/v092/tools/codeql-packs/codeql/javascript-all/2.10.3/","description":{"text":"The QL pack root directory."},"properties":{"tags":["CodeQL/LocalPackRoot"]}},{"uri":"file:///Users/dave/.codex/worktrees/9f01/dataflowbench/execution-state/v092/tools/codeql-packs/codeql/javascript-all/2.10.3/qlpack.yml","description":{"text":"The QL pack definition file."},"properties":{"tags":["CodeQL/LocalPackDefinitionFile"]}}]},{"name":"codeql/threat-models","semanticVersion":"1.0.59+a7057b836bf29767461026718b14d20790b9085f","locations":[{"uri":"file:///Users/dave/.codex/worktrees/9f01/dataflowbench/execution-state/v092/tools/codeql-packs/codeql/threat-models/1.0.59/","description":{"text":"The QL pack root directory."},"properties":{"tags":["CodeQL/LocalPackRoot"]}},{"uri":"file:///Users/dave/.codex/worktrees/9f01/dataflowbench/execution-state/v092/tools/codeql-packs/codeql/threat-models/1.0.59/qlpack.yml","description":{"text":"The QL pack definition file."},"properties":{"tags":["CodeQL/LocalPackDefinitionFile"]}}]}]},"invocations":[{"toolExecutionNotifications":[{"locations":[{"physicalLocation":{"artifactLocation":{"uri":"Store.js","uriBaseId":"%SRCROOT%","index":0}}}],"message":{"text":""},"level":"none","descriptor":{"id":"js/baseline/expected-extracted-files","index":0},"properties":{"formattedMessage":{"text":""}}},{"message":{"text":""},"level":"none","timeUtc":"2026-10-20T09:29:14.442149Z","descriptor":{"id":"cli/file-coverage-baseline","index":1},"properties":{"attributes":{"durationMilliseconds":36},"visibility":{"statusPage":false,"telemetry":true}}},{"message":{"text":""},"level":"none","timeUtc":"2026-10-20T09:29:14.443363Z","descriptor":{"id":"cli/platform","index":2},"properties":{"attributes":{"arch":"aarch64","name":"Mac OS X","version":"27.0.1"},"visibility":{"statusPage":false,"telemetry":true}}},{"message":{"text":""},"level":"none","timeUtc":"2026-10-20T09:29:14.452222Z","descriptor":{"id":"cli/sip-enablement","index":3},"properties":{"attributes":{"isEnabled":true},"visibility":{"statusPage":false,"telemetry":true}}}],"executionSuccessful":true}],"artifacts":[{"location":{"uri":"Store.js","uriBaseId":"%SRCROOT%","index":0}}],"results":[{"ruleId":"dataflowbench/javascript-taint-modeling","ruleIndex":0,"rule":{"id":"dataflowbench/javascript-taint-modeling","index":0},"message":{"text":"A benchmark-declared source reaches a benchmark-declared sink."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"Store.js","uriBaseId":"%SRCROOT%","index":0},"region":{"startLine":23,"startColumn":12,"endColumn":26}}}],"partialFingerprints":{"primaryLocationLineHash":"4eb6acc63d489134:1","primaryLocationStartColumnFingerprint":"9"},"codeFlows":[{"threadFlows":[{"locations":[{"location":{"physicalLocation":{"artifactLocation":{"uri":"Store.js","uriBaseId":"%SRCROOT%","index":0},"region":{"startLine":19,"startColumn":18,"endColumn":30}},"message":{"text":"dfb_source()"}}},{"location":{"physicalLocation":{"artifactLocation":{"uri":"Store.js","uriBaseId":"%SRCROOT%","index":0},"region":{"startLine":23,"startColumn":12,"endColumn":26}},"message":{"text":"alpha.get(\"k\")"}},"taxa":[{"id":"Config","properties":{"CodeQL/DataflowRole":"step"}}]}]}]}],"relatedLocations":[{"physicalLocation":{"artifactLocation":{"uri":"Store.js","uriBaseId":"%SRCROOT%","index":0},"region":{"startLine":19,"startColumn":18,"endColumn":30}}}]}],"newlineSequences":["\r\n","\n","
","
"],"columnKind":"utf16CodeUnits","properties":{"semmle.formatSpecifier":"sarif-latest"}}]}